Project · Open source · MIT · npm package
@deepwissen/preflight-core
The shared, zero-dependency TypeScript engine powering both tools. Secret, trap-file, instruction-integrity, and MCP-config scanners you can build on.
Install
npm i @deepwissen/preflight-core Part of the AI Preflight family — one detection engine, two surfaces: a VS Code extension, a CLI, and this shared engine they’re both built on.
What it is — The shared engine both tools are built on — extracted so one detection codebase serves many frontends.
What it does
- A composable pipeline of analyzers — secret scanner (4-layer: provider prefixes, keyword, Shannon entropy, connection strings + credential lifetime), trap-file scanner, instruction-integrity scanner, MCP-config scanner, plus token/budget/risk/waste analysis.
- Pure TypeScript, zero platform dependencies — no
vscode, no Node-only APIs in the core — so it runs in an editor, a CLI, or anywhere else. - Extensively tested — hundreds of unit tests, adversarial corpora, false-positive guards.
Use it
npm i @deepwissen/preflight-coreTech: TypeScript (ESM + types), zero dependencies.