wasm

Documentation

Overview

Command skills-wasm exposes the REAL SecureVibe scanners to the browser so the docs playground runs the same engine the CLI does — no backend, no network, no telemetry. The malicious-package DB, typosquat DB, and secret-detection rules are baked in via go:embed (populated by `make wasm`), and the Library reads them through its fs.FS data path (NewLibraryFS).

JS API (set on the global object once the runtime is up):

svScanDeps(filename, content) -> JSON {deps, findings}
svScanSecrets(text)           -> JSON CheckSecretPatternResult
svReady                       -> true
window.svOnReady()            -> called if defined, after setup