Cargo.toml

[package]
name = "vexscan"
version = "0.12.1"
edition = "2021"
description = "Security scanner for AI agent plugins, skills, and MCP servers"
license = "Apache-2.0"
repository = "https://github.com/edimuj/vexscan"
keywords = ["security", "ai", "agent", "scanner", "mcp", "plugin"]
categories = ["command-line-utilities", "development-tools"]

[dependencies]
# CLI
clap = { version = "4", features = ["derive", "env"] }
colored = "2"

# Async runtime
tokio = { version = "1", features = ["full"] }

# Serialization
serde = { version = "1", features = ["derive"] }
serde_json = "1"
toml = "0.8"

# File system
walkdir = "2"
globset = "0.4"
notify = "6"  # File watching

# Pattern matching
regex = "1"

# Encoding detection/decoding
base64 = "0.22"

# AST parsing
tree-sitter = "0.24"
tree-sitter-javascript = "0.23"
tree-sitter-typescript = "0.23"
tree-sitter-python = "0.23"

# HTTP client (for AI backends) - using rustls for cross-platform builds
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }

# Async traits
async-trait = "0.1"

# Error handling
anyhow = "1"

# Logging
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }

# Misc
sha2 = "0.10"  # For file hashing
chrono = { version = "0.4", features = ["serde"] }
dirs = "5"  # Home directory detection
# Git operations for vet command - vendored for cross-platform builds
git2 = { version = "0.20", default-features = false, features = ["vendored-libgit2", "vendored-openssl", "https"] }
tempfile = "3"  # Temp directories for vet command

[dev-dependencies]
tempfile = "3"
criterion = { version = "0.5", features = ["html_reports"] }

[[bench]]
name = "scanner"
harness = false

[profile.release]
opt-level = 3
lto = true
codegen-units = 1
strip = true