@blamejs/core 0.6.12 → 0.6.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/NOTICE +16 -0
- package/README.md +9 -8
- package/index.js +12 -0
- package/lib/api-key.js +2 -3
- package/lib/audit.js +4 -0
- package/lib/auth/password.js +449 -4
- package/lib/cache.js +3 -7
- package/lib/cli.js +598 -4
- package/lib/config-drift.js +309 -0
- package/lib/crypto-field.js +37 -0
- package/lib/crypto.js +8 -0
- package/lib/db.js +17 -2
- package/lib/dual-control.js +475 -0
- package/lib/file-type.js +265 -0
- package/lib/http-client.js +77 -0
- package/lib/internal-sha1-hibp.js +34 -0
- package/lib/middleware/csp-nonce.js +7 -4
- package/lib/middleware/index.js +2 -0
- package/lib/middleware/network-allowlist.js +199 -0
- package/lib/network-dns.js +469 -0
- package/lib/network-heartbeat.js +290 -0
- package/lib/network-nts.js +552 -0
- package/lib/network-proxy.js +246 -0
- package/lib/network-tls.js +326 -0
- package/lib/network.js +233 -0
- package/lib/notify.js +2 -3
- package/lib/ntp-check.js +50 -4
- package/lib/numeric-checks.js +40 -0
- package/lib/object-store/azure-blob.js +16 -42
- package/lib/permissions.js +223 -9
- package/lib/pqc-agent.js +4 -4
- package/lib/queue.js +5 -5
- package/lib/restore.js +5 -3
- package/lib/retention.js +439 -0
- package/lib/retry.js +3 -6
- package/lib/security-assert.js +368 -0
- package/lib/session.js +138 -8
- package/lib/slug.js +2 -3
- package/lib/ssrf-guard.js +9 -0
- package/lib/testing.js +3 -7
- package/lib/vendor/MANIFEST.json +12 -0
- package/lib/vendor/common-passwords-top-10000.txt +10000 -0
- package/lib/webhook.js +3 -6
- package/package.json +3 -2
- package/sbom.cyclonedx.json +61 -0
package/lib/webhook.js
CHANGED
|
@@ -72,6 +72,7 @@ var safeUrl = require("./safe-url");
|
|
|
72
72
|
var retry = require("./retry");
|
|
73
73
|
var C = require("./constants");
|
|
74
74
|
var lazyRequire = require("./lazy-require");
|
|
75
|
+
var numericChecks = require("./numeric-checks");
|
|
75
76
|
var requestHelpers = require("./request-helpers");
|
|
76
77
|
var { WebhookError } = require("./framework-error");
|
|
77
78
|
|
|
@@ -113,12 +114,8 @@ var DEFAULTS = Object.freeze({
|
|
|
113
114
|
|
|
114
115
|
// ---- Call-site validation helpers (throw on bad input) ----
|
|
115
116
|
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
}
|
|
119
|
-
function _isNonNegFinite(n) {
|
|
120
|
-
return typeof n === "number" && isFinite(n) && n >= 0;
|
|
121
|
-
}
|
|
117
|
+
var _isPositiveInt = numericChecks.isPositiveInt;
|
|
118
|
+
var _isNonNegFinite = numericChecks.isFiniteNonNegative;
|
|
122
119
|
function _hasOwn(obj, k) { return Object.prototype.hasOwnProperty.call(obj, k); }
|
|
123
120
|
function _objectKeys(obj) { return Object.keys(obj); }
|
|
124
121
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@blamejs/core",
|
|
3
|
-
"version": "0.6.
|
|
3
|
+
"version": "0.6.20",
|
|
4
4
|
"description": "The Node framework that owns its stack.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "blamejs contributors",
|
|
@@ -65,7 +65,8 @@
|
|
|
65
65
|
"LTS-CALENDAR.md",
|
|
66
66
|
"MIGRATING.md",
|
|
67
67
|
"NOTICE",
|
|
68
|
-
"README.md"
|
|
68
|
+
"README.md",
|
|
69
|
+
"sbom.cyclonedx.json"
|
|
69
70
|
],
|
|
70
71
|
"scripts": {
|
|
71
72
|
"test": "node test/smoke.js",
|
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
|
|
3
|
+
"bomFormat": "CycloneDX",
|
|
4
|
+
"specVersion": "1.5",
|
|
5
|
+
"serialNumber": "urn:uuid:f8db554c-5d58-4abf-bc02-17d78305ef63",
|
|
6
|
+
"version": 1,
|
|
7
|
+
"metadata": {
|
|
8
|
+
"timestamp": "2026-05-02T06:29:19.951Z",
|
|
9
|
+
"lifecycles": [
|
|
10
|
+
{
|
|
11
|
+
"phase": "build"
|
|
12
|
+
}
|
|
13
|
+
],
|
|
14
|
+
"tools": [
|
|
15
|
+
{
|
|
16
|
+
"vendor": "npm",
|
|
17
|
+
"name": "cli",
|
|
18
|
+
"version": "11.11.0"
|
|
19
|
+
}
|
|
20
|
+
],
|
|
21
|
+
"component": {
|
|
22
|
+
"bom-ref": "@blamejs/core@0.6.20",
|
|
23
|
+
"type": "library",
|
|
24
|
+
"name": "blamejs",
|
|
25
|
+
"version": "0.6.20",
|
|
26
|
+
"scope": "required",
|
|
27
|
+
"author": "blamejs contributors",
|
|
28
|
+
"description": "The Node framework that owns its stack.",
|
|
29
|
+
"purl": "pkg:npm/%40blamejs/core@0.6.20",
|
|
30
|
+
"properties": [],
|
|
31
|
+
"externalReferences": [
|
|
32
|
+
{
|
|
33
|
+
"type": "vcs",
|
|
34
|
+
"url": "git+https://github.com/blamejs/blamejs.git"
|
|
35
|
+
},
|
|
36
|
+
{
|
|
37
|
+
"type": "website",
|
|
38
|
+
"url": "https://github.com/blamejs/blamejs"
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
"type": "issue-tracker",
|
|
42
|
+
"url": "https://github.com/blamejs/blamejs/issues"
|
|
43
|
+
}
|
|
44
|
+
],
|
|
45
|
+
"licenses": [
|
|
46
|
+
{
|
|
47
|
+
"license": {
|
|
48
|
+
"id": "Apache-2.0"
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
]
|
|
52
|
+
}
|
|
53
|
+
},
|
|
54
|
+
"components": [],
|
|
55
|
+
"dependencies": [
|
|
56
|
+
{
|
|
57
|
+
"ref": "@blamejs/core@0.6.20",
|
|
58
|
+
"dependsOn": []
|
|
59
|
+
}
|
|
60
|
+
]
|
|
61
|
+
}
|