@chubbyts/chubbyts-decode-encode 2.3.0 → 2.4.1

package/README.md

@@ -1,6 +1,6 @@
 # chubbyts-decode-encode
 
-[![CI](https://github.com/chubbyts/chubbyts-decode-encode/workflows/CI/badge.svg?branch=master)](https://github.com/chubbyts/chubbyts-decode-encode/actions?query=workflow%3ACI)
+[![CI](https://github.com/chubbyts/chubbyts-decode-encode/actions/workflows/ci.yml/badge.svg?branch=master)](https://github.com/chubbyts/chubbyts-decode-encode/actions/workflows/ci.yml)
 [![Coverage Status](https://coveralls.io/repos/github/chubbyts/chubbyts-decode-encode/badge.svg?branch=master)](https://coveralls.io/github/chubbyts/chubbyts-decode-encode?branch=master)
 [![Mutation testing badge](https://img.shields.io/endpoint?style=flat&url=https%3A%2F%2Fbadge-api.stryker-mutator.io%2Fgithub.com%2Fchubbyts%2Fchubbyts-decode-encode%2Fmaster)](https://dashboard.stryker-mutator.io/reports/github.com/chubbyts/chubbyts-decode-encode/master)
 [![npm-version](https://img.shields.io/npm/v/@chubbyts/chubbyts-decode-encode.svg)](https://www.npmjs.com/package/@chubbyts/chubbyts-decode-encode)
@@ -24,17 +24,18 @@ A simple decode/encode solution for json / jsonx / url-encoded / xml / yaml.
 ## Requirements
 
  * node: 22
- * [@chubbyts/chubbyts-throwable-to-error][2]: ^2.2.0
- * [fast-xml-parser][3]: ^5.7.3
- * [qs][4]: ^6.15.1
- * [yaml][5]: ^2.8.4
+ * [@chubbyts/chubbyts-throwable-to-error][2]: ^2.3.0
+ * [fast-xml-builder][3]: ^1.3.0
+ * [fast-xml-parser][4]: ^5.10.1
+ * [qs][5]: ^6.15.3
+ * [yaml][6]: ^2.9.0
 
 ## Installation
 
 Through [NPM](https://www.npmjs.com) as [@chubbyts/chubbyts-decode-encode][1].
 
 ```ts
-npm i @chubbyts/chubbyts-decode-encode@^2.3.0
+npm i @chubbyts/chubbyts-decode-encode@^2.4.1
 ```
 
 ## Usage
@@ -179,6 +180,7 @@ const contentType = yamlTypeEncoder.contentType;
 
 [1]: https://www.npmjs.com/package/@chubbyts/chubbyts-decode-encode
 [2]: https://www.npmjs.com/package/@chubbyts/chubbyts-throwable-to-error
-[3]: https://www.npmjs.com/package/fast-xml-parser
-[4]: https://www.npmjs.com/package/qs
-[5]: https://www.npmjs.com/package/yaml
+[3]: https://www.npmjs.com/package/fast-xml-builder
+[4]: https://www.npmjs.com/package/fast-xml-parser
+[5]: https://www.npmjs.com/package/qs
+[6]: https://www.npmjs.com/package/yaml

package/dist/data.js

@@ -3,4 +3,12 @@ export const isBoolean = (value) => typeof value === 'boolean';
 export const isNumber = (value) => typeof value === 'number';
 export const isString = (value) => typeof value === 'string';
 export const isArray = (value) => Array.isArray(value);
-export const isObject = (value) => value !== null && typeof value === 'object' && value.constructor.name == 'Object';
+export const isObject = (value) => {
+    if (value === null || typeof value !== 'object') {
+        return false;
+    }
+    // prototype based check: constructor based checks crash on null prototype objects (Object.create(null))
+    // and can be shadowed by an attacker controlled own "constructor" property (e.g. {"constructor": 1})
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+};

package/dist/decoder/decoder.js

@@ -1,6 +1,7 @@
 export class DecodeError extends Error {
     constructor(message, stack) {
         super(message);
+        // oxlint-disable-next-line functional/immutable-data
         this.stack = stack;
     }
 }

package/dist/decoder/jsonx-type-decoder.js

@@ -2,7 +2,7 @@ import { XMLParser } from 'fast-xml-parser';
 import { throwableToError } from '@chubbyts/chubbyts-throwable-to-error/dist/throwable-to-error';
 import { DATATYPE_ARRAY, DATATYPE_BOOLEAN, DATATYPE_NULL, DATATYPE_NUMBER, DATATYPE_OBJECT, DATATYPE_STRING, } from '../jsonx-datatypes.js';
 import { DecodeError } from './decoder.js';
-const decodeHtmlEntities = (string) => string.replace(/&#\d+;/gm, (code) => String.fromCharCode(code.match(/\d+/)[0]));
+const decodeHtmlEntities = (string) => string.replace(/&#(\d+);/gm, (_, code) => String.fromCodePoint(Number(code)));
 const getNodeName = (node) => {
     return node[':@']?.['@_name'];
 };

package/dist/decoder/url-encoded-type-decoder.js

@@ -16,7 +16,7 @@ const decodeValue = (value) => {
     if (value === 'false') {
         return false;
     }
-    const float = parseFloat(value); // handles integers as well
+    const float = Number.parseFloat(value); // handles integers as well
     if (float.toString() === value) {
         return float;
     }

package/dist/encoder/encoder.js

@@ -1,6 +1,7 @@
 export class EncodeError extends Error {
     constructor(message, stack) {
         super(message);
+        // oxlint-disable-next-line functional/immutable-data
         this.stack = stack;
     }
 }

package/dist/encoder/jsonx-type-encoder.js

@@ -1,16 +1,13 @@
-import { XMLBuilder } from 'fast-xml-parser';
+import Builder from 'fast-xml-builder';
 import { throwableToError } from '@chubbyts/chubbyts-throwable-to-error/dist/throwable-to-error';
 import { isArray, isBoolean, isNumber, isObject, isString, isNull } from '../data.js';
 import { DATATYPE_ARRAY, DATATYPE_BOOLEAN, DATATYPE_NULL, DATATYPE_NUMBER, DATATYPE_OBJECT, DATATYPE_STRING, } from '../jsonx-datatypes.js';
 import { EncodeError } from './encoder.js';
-const encodeHtmlEntities = (string) => string.replace(/[\u00A0-\u9999<>&]/g, (i) => '&#' + i.charCodeAt(0) + ';');
+const encodeHtmlEntities = (string) => string.replace(/[\u00A0-\u9999<>&]/g, (i) => '&#' + i.codePointAt(0) + ';');
 const createXmlNode = () => {
     return {
-        '?xml': [
-            {
-                '#text': '',
-            },
-        ],
+        // Stryker disable next-line ArrayDeclaration: the XMLBuilder ignores the children of the xml processing instruction node
+        '?xml': [],
         ':@': {
             '@_version': '1.0',
             '@_encoding': 'UTF-8',
@@ -146,7 +143,7 @@ const createObjectNode = (value, key = undefined) => {
     };
 };
 export const createJsonxTypeEncoder = (prettyPrint = false) => {
-    const builder = new XMLBuilder({
+    const builder = new Builder({
         preserveOrder: true,
         ignoreAttributes: false,
         processEntities: false,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@chubbyts/chubbyts-decode-encode",
   "type": "module",
-  "version": "2.3.0",
+  "version": "2.4.1",
   "description": "A simple decode/encode solution for json / jsonx / url-encoded / xml / yaml.",
   "keywords": [
     "chubbyts",
@@ -15,7 +15,10 @@
   ],
   "author": "Dominik Zogg",
   "license": "MIT",
-  "repository": "chubbyts/chubbyts-decode-encode",
+  "repository": {
+    "type": "git",
+    "url": "chubbyts/chubbyts-decode-encode"
+  },
   "prettier": {
     "printWidth": 120,
     "tabWidth": 2,
@@ -51,22 +54,24 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@chubbyts/chubbyts-throwable-to-error": "^2.2.0",
-    "fast-xml-parser": "^5.7.3",
-    "qs": "^6.15.1",
-    "yaml": "^2.8.4"
+    "@chubbyts/chubbyts-throwable-to-error": "^2.3.0",
+    "fast-xml-builder": "^1.3.0",
+    "fast-xml-parser": "^5.10.1",
+    "qs": "^6.15.3",
+    "yaml": "^2.9.0"
   },
   "devDependencies": {
-    "@chubbyts/chubbyts-eslint": "^5.2.0",
-    "@chubbyts/chubbyts-function-mock": "^2.1.1",
+    "@chubbyts/chubbyts-function-mock": "^2.3.0",
+    "@chubbyts/chubbyts-oxlint": "^1.0.0",
     "@stryker-mutator/core": "^9.6.1",
     "@stryker-mutator/vitest-runner": "^9.6.1",
-    "@types/node": "^25.6.2",
+    "@types/node": "^26.1.2",
     "@types/qs": "^6.15.1",
-    "@vitest/coverage-v8": "^4.1.5",
-    "prettier": "^3.8.3",
-    "typescript": "^6.0.3",
-    "vitest": "^4.1.5"
+    "@vitest/coverage-v8": "^4.1.10",
+    "oxlint": "^1.76.0",
+    "prettier": "^3.9.6",
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.10"
   },
   "publishConfig": {
     "access": "public"
@@ -76,8 +81,8 @@
     "cs-fix": "prettier --write src tests",
     "cs": "prettier --check src tests",
     "infection": "stryker run",
-    "lint-fix": "eslint src tests eslint.config.js vitest.config.ts --fix",
-    "lint": "eslint src tests",
+    "lint-fix": "oxlint --fix src tests vitest.config.ts",
+    "lint": "oxlint src tests vitest.config.ts",
     "test": "vitest"
   }
 }