Node.js Project Security Scanner

This Python script scans a Node.js project for suspicious code patterns, hidden text files, and risky dependencies.

Features

• Detects long strings in code files (default: 200 characters, configurable)
• Flags usage of eval()
• Checks for suspicious dependencies in package.json
• Finds text files disguised with binary extensions
• Skips the node_modules directory

Requirements

• Python 3.x (no external packages required)

Usage

1. Clone or copy the script into your project folder.

2. Open a terminal in your project directory.

3. Run the script with default settings:

   python scan_node_project.py

4. Optionally, specify the minimum long string length to flag (e.g., 300):

   python scan_node_project.py 500

5. Optionally, specify the minimum long string length and the full path to the source folder:

   python scan_node_project.py 500 "C:\path\to\your\project"

   Or just the path (uses default string length):

   python scan_node_project.py "C:\path\to\your\project"

6. Review the output for any potential issues.

Notes

• The script only uses Python's standard library.
• You can customize the list of suspicious dependencies and binary extensions in scan_node_project.py.