@nodesecure/[email protected]

Minor Changes

• #369 644232a Thanks @clemgbld! - refactor(probe/isSerializeEnv): trace re-assignment of JSON.stringy & process.env

Patch Changes

• #375 20181e7 Thanks @PierreDemailly! - Update files to includes /dist folder

• Updated dependencies [19f9822]:

  • @nodesecure/[email protected]

@nodesecure/[email protected]

Minor Changes

• #363 e37384c Thanks @intincrab! - feat(probes): add serialize-environment warning detection

  Add new probe to detect potential environment variable exfiltration through JSON.stringify(process.env).

• #362 5f78d4a Thanks @clemgbld! - feat(probes): add initialize

• #366 cf2b5eb Thanks @fraxken! - Refactor relation and dependency to Tracer for estree-ast-utils workspace

Patch Changes

• Updated dependencies [cf2b5eb, 8b72326, c3016e0]:
  • @nodesecure/[email protected]
  • @nodesecure/[email protected]

@nodesecure/[email protected]

Minor Changes

• #374 19f9822 Thanks @fraxken! - Add missing utilities UT

@nodesecure/[email protected]

Major Changes

• #366 cf2b5eb Thanks @fraxken! - Refactor relation and dependency to Tracer for estree-ast-utils workspace

Minor Changes

• #365 8b72326 Thanks @fraxken! - Enhance input and output types using Meriyah ESTree defs

@nodesecure/[email protected]

Patch Changes

• Updated dependencies [d38f809]:
  • @nodesecure/[email protected]

@nodesecure/[email protected]

Major Changes

• #346 d38f809 Thanks @fraxken! - Remove VariableTracer

@nodesecure/[email protected]

Major Changes

• #342 633f334 Thanks @fraxken! - Resolve CallExpression in MemberExpression with getCallExpressionIdentifier helper

@nodesecure/[email protected]

Minor Changes

• #337 f83112d Thanks @fraxken! - Remove node: prefix when scanning import and require

v9.0.0

What's Changed

• chore(deps): bump the github-actions group with 3 updates by @dependabot in #329
• feat(AstAnalyser): add SourceFlags with oneline-require and is-minified by @intincrab in #331
• docs: add intincrab as a contributor for code by @allcontributors in #332
• feat: configure changesets by @fraxken in #333
• feat(warnings): exports warnings for non node.js environments by @clemgbld in #335
• test(AstAnalyser): add tests for flags property and minified/oneline-require detection by @intincrab in #334
• feat(probes): Flag some URL and domains as suspicious/shady (such as … by @clemgbld in #336

Full Changelog: v8.2.0...v9.0.0

v8.2.0

What's Changed

• feat(EntryFilesAnalyzer): add option to ignore entry file that doesn't exist by @clemgbld in #320
• docs: add clemgbld as a contributor for code, and test by @allcontributors in #321
• test(JsSourceParser): should not crash with source code containing im… by @clemgbld in #322
• feat: implement native fetch detection & implement SourceFile flags by @fraxken in #324

New Contributors

• @clemgbld made their first contribution in #320

Full Changelog: v8.1.1...v8.2.0