API ContractsInput validation

api-contracts/require-input-validation

Explicit route and raw boundary inputs need runtime validation; type annotations alone do not establish that incoming data is valid.

validationroutesuntrusted-input

01 Examples

TypeScript

app.post("/users", req => createUser(req.body));

Finding

Require validation of untrusted boundary input.

02 Enable it

Setup

Install the package, register its plugin factory, then enable the rule.

pnpm add -D @scruple/api-contracts

In scruple.config.ts, register the factory under the api-contracts namespace used by the rule ID.

import { apiContracts } from "@scruple/api-contracts";

plugins: {
  "api-contracts": apiContracts(),
},

"api-contracts/require-input-validation": "warn"