id: package-json info: name: npm Config - Detect author: geeknik,afaq severity: info description: npm configuration information was detected. All npm packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project. reference: https://www.npmjs.com classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N cvss-score: 5.3 cwe-id: CWE-200 tags: config,exposure requests: - method: GET path: - "{{BaseURL}}/package.json" - "{{BaseURL}}/package-lock.json" matchers-condition: and matchers: - type: word words: - "name" - "version" condition: and - type: word words: - "application/json" part: header - type: status status: - 200 # Enhanced by mp on 2023/02/05