add security checks

Makefile

@@ -47,7 +47,7 @@ node_modules:
 	npm install
 
 
-test: unittest lint spellcheck
+test: unittest lint spellcheck securitycheck
 
 unittest:
 	$(ENV)/nose2 --verbose
@@ -64,6 +64,10 @@ spellcheck:
 	$(NODE_BIN)/mdspell --en-gb -ranx theme/templates/**/*.* theme/templates/*.*
 	$(NODE_BIN)/mdspell --en-gb -ranx content/**/*.md content/*.md content/**/*.html content/*.html
 
+securitycheck:
+	$(NODE_BIN)/nsp check
+	$(ENV)/bandit -r plugins/ config/ tests/
+
 
 upload:
 	git clone https://github.com/RealOrangeOne/host-container.git $(DEPLOY_DIR)

package.json

@@ -32,6 +32,7 @@
     "eslint-plugin-react": "=3.4.2",
     "markdown-spellcheck": "=0.11.0",
     "node-sass": "=3.8.0",
+    "nsp": "=2.6.1",
     "postcss-cli": "=2.5.2",
     "sass-lint": "=1.8.2",
     "uglify-js": "=2.7.0"

requirements.txt

@@ -1,3 +1,4 @@
+bandit==1.1.0
 flake8==2.5.0
 fontawesome_markdown==0.2.5
 git+https://github.com/ryneeverett/python-markdown-comments.git