Request for enhanced detection logic for javascript express js

[Nameisjohn247]

Hi Team,

I was using noir in one of the projects and even though it was a express project noir couldn't identify and ended with the below error

⚑ Detecting technologies to base directory.
▲ No technologies detected.
  ➔ If you know the technology, use the -t flag to specify it.
  ➔ Please check tech lists using the --list-techs flag.

Checked the detection logic and it is quite straightforward - it returns true if BOTH conditions are met:

1. The file has a .js extension (filename.includes? ".js")
2. AND one of these patterns is found in the file contents:

• require('express') (single quotes)
• require("express") (double quotes)

Checked the project code and it never had require syntax in it instead it had import syntax (import express from 'express';)
Just added var router = require('express').Router() line in one of the js file present in the repo and noir was able to detect and worked like a charm

I think that the current Express.js detector could be enhanced. Here are some suggestions:

Current Limitations:

• Only checks for basic require('express') pattern
• Might miss modern JavaScript code patterns

Suggested Improvements:

1. Add detection for more patterns like:

   • import express from 'express'
   • const/let/var express = require('express')
   • import { Router } from 'express'

2. Support more file types:

   • TypeScript (.ts files)
   • Modern JavaScript modules (.mjs files)

3. Check package.json for express dependency

This would help catch more Express.js applications and reduce false negatives.

I don't have coding experience to implement this, but I hope this suggestion helps improve the tool!

[hahwul]

Hi @Nameisjohn247
First, thank you so much for reporting this issue and for the detailed suggestions!

You're absolutely right—our current Express.js detection has limitations, especially with modern JavaScript patterns.
We'll work on improving this by:

• Adding support for import syntax and other patterns
• Extending compatibility for .ts and .mjs files
• Checking package.json for dependencies

We appreciate your feedback and will use it to make noir better.
Thanks again for your contribution 😊

cc, @ksg97031