> ## Documentation Index
> Fetch the complete documentation index at: https://arclux-os.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# security-analysis

> Ringkasan packages/security-analysis

## packages/security-analysis

# ARCLUX Security Analysis

This package provides defensive, source-based security findings and provenance
contracts. `analyzeRepositorySecurity(repository)` is the integration point for
the ARCLUX engine. It does not execute repository code or perform network scans.

**Exports** (dari `index.ts`):

* `DiskSourceProvider`
* `type SourceProvider`
* `detectSecretExposure`
* `shannonEntropy`
* `DEFAULT_SECRET_RULES`
* `type SecretRule`
* `type SecretDetectionOptions`
* `detectUnsafePatterns`
* `DEFAULT_UNSAFE_PATTERN_RULES`
* `type UnsafePatternRule`
* `type UnsafePatternOptions`
* `detectSensitiveDataFlow`
* `DEFAULT_DATA_FLOW_RULES`
* `type DataFlowRule`
* `type SensitiveDataFlowOptions`
* `detectTrustBoundaryViolations`
* `classifyTrustZone`
* `DEFAULT_TRUST_ZONES`
* `type TrustZoneDefinition`
* `type TrustZoneId`
* `type TrustBoundaryOptions`
* `detectCrossBoundaryCalls`
* `analyzeSecurityImpact`
* `attachImpactToFindings`
* `type SecurityImpactReport`
* `type ImpactedFinding`
* `remediateRule`
* `attachRemediations`
* `buildSecurityReport`
* `summarize`
* `type SecurityReport`
* `type SecurityReportSummary`
* `type ReportAttackSurface`
* `type BuildSecurityReportInput`
* `parseLockfiles`
* `normalizeVersion`
* `LOCKFILE_NAMES`
* `type LockedDependency`
* `type LockfileParseResult`
* `compareSemver`
* `isVulnerable`
* `detectVulnerableDependencies`
* `toSecurityFindings`
* `DEFAULT_KNOWN_VULNERABILITIES`
* `type KnownVulnerability`
* `type VulnerableDependencyFinding`
* `analyzeTransitiveRisk`
* `vulnerableNames`
* `type TransitiveRiskReport`
* `analyzeDependencyRisk`
* `isUnpinnedRange`
* `type DependencyRiskInput`
* `type DependencyRiskResult`