@contrast/agent-bundle 5.40.0 → 5.41.0

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/LICENSE

@@ -1,12 +0,0 @@
-Copyright: 2025 Contrast Security, Inc
-Contact: support@contrastsecurity.com
-License: Commercial
-
-NOTICE: This Software and the patented inventions embodied within may only be
-used as part of Contrast Security’s commercial offerings. Even though it is
-made available through public repositories, use of this Software is subject to
-the applicable End User Licensing Agreement found at
-https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
-between Contrast Security and the End User. The Software may not be reverse
-engineered, modified, repackaged, sold, redistributed or otherwise used in a
-way not consistent with the End User License Agreement.

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/README.md

@@ -1,270 +0,0 @@
-# `@contrast/logger`
-
-- [Usage](#usage)
-- [Structured Logging](#structured-logging)
-  - [Filtering](#filtering)
-- [Best Practices](#best-practices)
-  - [Errors](#errors)
-  - [Objects](#objects)
-
-## Usage
-
-```ts
-import install from '@contrast/logger';
-// or
-const { default: install } = require('@contrast/logger');
-
-const logger = install(core);
-
-logger.info({ foo, bar }, 'message with %s, %d', 'string', 123);
-```
-
-See [Pino](https://github.com/pinojs/pino/blob/master/docs/api.md#logger-instance)
-documentation for the logger's API.
-
-## Structured Logging
-
-Pino logs as JSON, so it is particularly good at logging JavaScript objects.
-
-Given:
-
-```ts
-logger.info('hello world');
-logger.error('this is at error level');
-logger.info('the answer is %d', 42);
-logger.info({ obj: 42 }, 'hello world');
-logger.info({ obj: 42, b: 2 }, 'hello world');
-logger.info({ nested: { obj: 42 } }, 'nested');
-```
-
-Log output looks like the following:
-
-```json
-{"level":30,"time":1649266923912,"pid":12345,"hostname":"foo","msg":"hello world"}
-{"level":50,"time":1649266923913,"pid":12345,"hostname":"foo","msg":"this is at error level"}
-{"level":30,"time":1649266923913,"pid":12345,"hostname":"foo","msg":"the answer is 42"}
-{"level":30,"time":1649266923913,"pid":12345,"hostname":"foo","obj":42,"msg":"hello world"}
-{"level":30,"time":1649266923913,"pid":12345,"hostname":"foo","obj":42,"b":2,"msg":"hello world"}
-{"level":30,"time":1649266923913,"pid":12345,"hostname":"foo","nested":{"obj":42},"msg":"nested"}
-```
-
-You can use [`pino-pretty`](https://github.com/pinojs/pino-pretty) to format
-logs during development.
-The previous lines, when passed to pino-pretty, will
-format to the following:
-
-```sh
-node example.js | npx pino-pretty
-```
-
-```
-[1649266998216] INFO (12345 on foo): hello world
-[1649266998216] ERROR (12345 on foo): this is at error level
-[1649266998216] INFO (12345 on foo): the answer is 42
-[1649266998216] INFO (12345 on foo): hello world
-    obj: 42
-[1649266998216] INFO (12345 on foo): hello world
-    obj: 42
-    b: 2
-[1649266998216] INFO (12345 on foo): nested
-    nested: {
-      "obj": 42
-    }
-```
-
-### Filtering
-
-In addition to being easier to read when pretty-printed, JSON logging also allows
-us to filter with utilities like [`jq`](https://stedolan.github.io/jq/).
-
-For example, we can filter only error messages:
-
-```sh
-node example.js | jq "select(.level == 50)"
-```
-
-<details>
-<summary>Output (click to expand)</summary>
-
-```json
-{
-  "level": 50,
-  "time": 1649268122322,
-  "pid": 12345,
-  "hostname": "foo",
-  "msg": "this is at error level"
-}
-```
-
-</details>
-
-Or, we can look up only log entries with the `obj` property:
-
-```sh
-node example.js | jq "select(.obj)"
-```
-
-<details>
-<summary>Output (click to expand)</summary>
-
-```json
-{
-  "level": 30,
-  "time": 1649268235040,
-  "pid": 12345,
-  "hostname": "foo",
-  "obj": 42,
-  "msg": "hello world"
-}
-{
-  "level": 30,
-  "time": 1649268235040,
-  "pid": 12345,
-  "hostname": "foo",
-  "obj": 42,
-  "b": 2,
-  "msg": "hello world"
-}
-```
-
-</details>
-
-See `jq`'s [tutorial](https://stedolan.github.io/jq/tutorial/) and
-[manual](https://stedolan.github.io/jq/manual/v1.6/) for examples on just how
-powerful JSON processing can be!
-
-## Best Practices
-
-### Errors
-
-Pino handles errors specially when they are passed as `err` _or_ when passed
-as the first argument.
-See: https://github.com/pinojs/pino/blob/master/docs/api.md#serializers-object
-
-For example, when handling an error we should use the following pattern(s):
-
-```ts
-try {
-  // ...something that throws
-} catch (err) {
-  logger.warn(err);
-  // if we want to customize the message:
-  logger.warn(err, 'something bad happened');
-  // or if we need to provide additional data:
-  logger.warn({ err, data }, 'something broke when handling %s', filename);
-}
-```
-
-<details>
-<summary>Output (click to expand)</summary>
-
-```
-[1649264653814] WARN (12345 on foo): yikes!
-  err: {
-    "type": "Error",
-    "message": "yikes!",
-    "stack":
-        Error: yikes!
-            at Object.<anonymous> (/path/to/file.js:5:13)
-            at Module._compile (internal/modules/cjs/loader.js:1085:14)
-            at Object.Module._extensions..js (internal/modules/cjs/loader.js:1114:10)
-            at Module.load (internal/modules/cjs/loader.js:950:32)
-            at Function.Module._load (internal/modules/cjs/loader.js:790:12)
-            at Function.executeUserEntryPoint [as runMain] (internal/modules/run_main.js:75:12)
-            at internal/main/run_main_module.js:17:47
-  }
-
-[1649264653814] WARN (12345 on foo): something bad happened
-  err: {
-    "type": "Error",
-    "message": "yikes!",
-    "stack":
-        Error: yikes!
-            at Object.<anonymous> (/path/to/file.js:5:13)
-            at Module._compile (internal/modules/cjs/loader.js:1085:14)
-            at Object.Module._extensions..js (internal/modules/cjs/loader.js:1114:10)
-            at Module.load (internal/modules/cjs/loader.js:950:32)
-            at Function.Module._load (internal/modules/cjs/loader.js:790:12)
-            at Function.executeUserEntryPoint [as runMain] (internal/modules/run_main.js:75:12)
-            at internal/main/run_main_module.js:17:47
-  }
-
-[1649264653814] WARN (12345 on foo): something broke when handling foo.js
-  data: {
-    "foo": "bar"
-  }
-  err: {
-    "type": "Error",
-    "message": "yikes!",
-    "stack":
-        Error: yikes!
-            at Object.<anonymous> (/path/to/file.js:5:13)
-            at Module._compile (internal/modules/cjs/loader.js:1085:14)
-            at Object.Module._extensions..js (internal/modules/cjs/loader.js:1114:10)
-            at Module.load (internal/modules/cjs/loader.js:950:32)
-            at Function.Module._load (internal/modules/cjs/loader.js:790:12)
-            at Function.executeUserEntryPoint [as runMain] (internal/modules/run_main.js:75:12)
-            at internal/main/run_main_module.js:17:47
-  }
-```
-
-</details>
-
-### Objects
-
-Rather than including information in the log message itself, it is more helpful
-to include data in the first argument.
-
-For example, if we want to log the contents of an object:
-
-```ts
-const manifest = require('./package.json');
-logger.info({ manifest }, 'package.json contents');
-// instead of
-logger.info('package.json contents: %o', manifest);
-```
-
-<details>
-<summary>Output (Click to expand)</summary>
-
-```
-[1649265443612] INFO (12345 on foo): package.json contents
-  manifest: {
-    "name": "@contrast/logger",
-    "version": "1.0.0",
-    "description": "Centralized logging for Contrast agent services",
-    "license": "UNLICENSED",
-    "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
-    "main": "lib/index.js",
-    "types": "lib/index.d.ts",
-    "engines": {
-      "npm": ">=6.13.7 <7 || >= 8.3.1",
-      "node": ">= 14.15.0"
-    },
-    "scripts": {
-      "build": "tsc --build src/",
-      "test": "nyc mocha src/",
-      "test:only": "mocha --no-parallel lib/",
-      "posttest": "echo \"file://$PWD/coverage/lcov-report/index.html\""
-    },
-    "dependencies": {
-      "pino": "^7.9.1"
-    }
-  }
-
-[1649265443613] INFO (12345 on foo): package.json contents: {"name":"@contrast/logger","version":"1.0.0","description":"Centralized logging for Contrast agent services","license":"UNLICENSED","author":"Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)","main":"lib/index.js","types":"lib/index.d.ts","engines":{"npm":">= 8.4.0","node":">= 14.15.0"},"scripts":{"build":"tsc --build src/","test":"nyc mocha src/","test:only":"npm test -- --no-parallel","posttest":"echo \"file://$PWD/coverage/lcov-report/index.html\""},"dependencies":{"pino":"^7.9.1"}}
-```
-
-</details>
-
-## Namespacing
-
-When using the logger in another module, you could instantiate a namespace using
-the [`child`](https://github.com/pinojs/pino/blob/master/docs/api.md#loggerchildbindings-options--logger) method.
-
-For example, in the `@contrast/rewriter` module, we could namespace the logger
-as follows:
-
-```ts
-const logger = core.logger.child({ name: 'contrast:rewriter' });
-```

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/index.d.ts

@@ -1,16 +0,0 @@
-import { LoggerOptions, Logger } from 'pino';
-import { Config } from '@contrast/config';
-import { Messages, ThreadTransferData } from '@contrast/common';
-import Perf from '@contrast/perf';
-export interface Core {
-    readonly config: Config;
-    readonly messages: Messages;
-    readonly Perf: typeof Perf;
-    readonly threadTransferData?: ThreadTransferData;
-}
-export { Logger };
-export declare const kChildren: unique symbol;
-export default function init(core: Core & {
-    logger?: Logger;
-}, opts?: LoggerOptions): Logger;
-//# sourceMappingURL=index.d.ts.map

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/index.js

@@ -1,132 +0,0 @@
-"use strict";
-/*
- * Copyright: 2025 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.kChildren = void 0;
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const node_os_1 = require("node:os");
-const node_worker_threads_1 = require("node:worker_threads");
-const pino_1 = __importDefault(require("pino"));
-const config_1 = require("@contrast/config");
-const common_1 = require("@contrast/common");
-const serializers = __importStar(require("./serializers"));
-const REDACT_PATHS = [
-    'err.config.headers.Authorization',
-    'err.config.headers["API-Key"]',
-];
-exports.kChildren = Symbol('contrast.logger.children');
-function extend(logger) {
-    Reflect.set(logger, exports.kChildren, []);
-    return logger;
-}
-function init(core, opts = {}) {
-    const config = core.config.agent.logger;
-    const perf = new core.Perf('logger');
-    const streams = [];
-    let err;
-    if (config.path !== '/dev/null') {
-        try {
-            // fs methods throw if we don't have write permissions.
-            node_fs_1.default.mkdirSync(node_path_1.default.dirname(config.path), { recursive: true });
-            // check for an existing log file descriptor, or open a new one and remember it.
-            const fd = core.threadTransferData?.loggerFd ?? node_fs_1.default.openSync(config.path, config.append ? 'a' : 'w');
-            if (core.threadTransferData)
-                core.threadTransferData.loggerFd = fd;
-            streams.push({
-                stream: pino_1.default.destination(fd),
-                level: 'trace',
-            });
-        }
-        catch (cause) {
-            err = new Error('Unable to write to the configured log file. To disable writing to a log file, set `agent.logger.path` to \'/dev/null\', or set CONTRAST__AGENT__LOGGER__PATH="/dev/null" in your environment', 
-            // @ts-expect-error `cause` requires ts to target es2022 or above, which corresponds to Node 17+, despite being added to Node in 16.9
-            { cause });
-        }
-    }
-    if (config.stdout) {
-        streams.push({
-            stream: pino_1.default.destination(process.stdout.fd),
-            level: 'trace',
-        });
-    }
-    if (err && streams.length === 0)
-        throw err;
-    const logger = (core.logger = perf.wrapPinoInstance(extend((0, pino_1.default)({
-        name: 'contrast',
-        level: config.level,
-        base: { tid: node_worker_threads_1.threadId, pid: process.pid, hostname: (0, node_os_1.hostname)() },
-        serializers,
-        onChild(instance) {
-            Reflect.get(this, exports.kChildren).push(perf.wrapPinoInstance(extend(instance)));
-        },
-        redact: {
-            paths: REDACT_PATHS,
-            censor: 'contrast-redacted',
-        },
-        ...opts,
-    }, pino_1.default.multistream(streams)))));
-    logger.on('level-change', (level, val, prevLevel, prevVal, instance) => {
-        Reflect.get(instance, exports.kChildren).forEach((child) => {
-            child.level = level;
-        });
-    });
-    if (core.config.getEffectiveSource('agent.logger.level') === config_1.ConfigSource.DEFAULT_VALUE) {
-        core.messages?.on?.(common_1.Event.SERVER_SETTINGS_UPDATE, () => {
-            const effectiveLevel = core.config.getEffectiveValue('agent.logger.level');
-            if (effectiveLevel && effectiveLevel !== logger.level) {
-                logger.level = effectiveLevel;
-                logger.info('Received new log level: %s from server-features', effectiveLevel);
-            }
-        });
-    }
-    if (err)
-        logger.error({ err });
-    // (NODE-3735) if the app has a dependency on same pino version, then our depHooks for it
-    // will not execute since it's already in the module cache, e.g. we patch it for deadzones
-    for (const cacheKey of Object.keys(require.cache)) {
-        if (cacheKey.includes(`${node_path_1.default.sep}pino${node_path_1.default.sep}`))
-            delete require.cache[cacheKey];
-    }
-    return logger;
-}
-exports.default = init;
-//# sourceMappingURL=index.js.map

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/serializers.d.ts

@@ -1,33 +0,0 @@
-import { Config } from '@contrast/config';
-import { AxiosRequestConfig, AxiosResponse } from 'axios';
-/**
- * Logs the config object in the format used by the agent (the report format is used in
- * diagnostics capabilities). Leverages the .getReport() redaction functionality to make
- * a copy of the config with sensitive values masked.
- */
-export declare function config(config: Config): any;
-/**
- * Hides the `stdout` and `stderr` fields from child_process errors since they
- * are extremely verbose.
- */
-export declare const err: (err: Error) => Record<string, any>;
-/** Excludes irrelevant information from the metrics object.  */
-export declare function metrics({ start, timeout, ...metrics }: any): any;
-/**
- * Serializes requests for the contrast-ui http logger.
- */
-export declare function req(config: AxiosRequestConfig): {
-    id: any;
-    method: string | undefined;
-    url: string | undefined;
-    data: any;
-    contentLength: any;
-};
-/**
- * Serializes response for the contrast-ui http logger.
- */
-export declare function res(response: AxiosResponse): {
-    status: number;
-    data: any;
-};
-//# sourceMappingURL=serializers.d.ts.map

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/serializers.js

@@ -1,75 +0,0 @@
-"use strict";
-/*
- * Copyright: 2025 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.res = exports.req = exports.metrics = exports.err = exports.config = void 0;
-const common_1 = require("@contrast/common");
-const pino_1 = require("pino");
-/**
- * Logs the config object in the format used by the agent (the report format is used in
- * diagnostics capabilities). Leverages the .getReport() redaction functionality to make
- * a copy of the config with sensitive values masked.
- */
-function config(config) {
-    // log as-is if not a Config instance
-    if (typeof config?.getReport !== 'function')
-        return config;
-    const safeCopy = { _errors: [...config._errors] };
-    const { config: { effective_config } } = config.getReport({ redact: true });
-    for (const info of effective_config) {
-        const { canonical_name, value } = info;
-        (0, common_1.set)(safeCopy, canonical_name, value);
-    }
-    return safeCopy;
-}
-exports.config = config;
-/**
- * Hides the `stdout` and `stderr` fields from child_process errors since they
- * are extremely verbose.
- */
-exports.err = pino_1.stdSerializers.wrapErrorSerializer(({ stdout, stderr, ...err }) => err);
-/** Excludes irrelevant information from the metrics object.  */
-function metrics({ start, timeout, ...metrics }) {
-    return metrics;
-}
-exports.metrics = metrics;
-/**
- * Serializes requests for the contrast-ui http logger.
- */
-function req(config) {
-    return {
-        id: Reflect.get(config, 'id'),
-        method: config.method,
-        url: config.url,
-        // Since we log `req` data on both request and response events we don't want
-        // to duplicate logging `data`, which is a JSON object when provided to the
-        // request interceptor but a string within the `response.config` object.
-        data: typeof config.data === 'object' ? config.data : undefined,
-        contentLength: config.headers?.['Content-Length'] // only present on response.config
-    };
-}
-exports.req = req;
-/**
- * Serializes response for the contrast-ui http logger.
- */
-function res(response) {
-    return {
-        status: response.status,
-        // If the response is empty, like from a 204 or 304, don't log ""
-        data: response.data !== '' ? response.data : undefined,
-    };
-}
-exports.res = res;
-//# sourceMappingURL=serializers.js.map

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/utils.d.ts

@@ -1,15 +0,0 @@
-/// <reference types="node" />
-/// <reference types="mocha" />
-/// <reference types="node" />
-/// <reference types="node" />
-/// <reference types="node" />
-/// <reference types="node" />
-/**
- * @deprecated this is a relic from when we used transports.
- *
- * Removes any `'-r @contrast/protect'` or similar strings from `process.env.NODE_OPTIONS.`.
- * If we don't do this, the logger worker threads will be instrumented and those agents
- * will attempt to spawn more loggers and result in infinite recursion scenario.
- */
-export declare const cleanEnv: (env: NodeJS.ProcessEnv) => NodeJS.ProcessEnv;
-//# sourceMappingURL=utils.d.ts.map

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/utils.js

@@ -1,34 +0,0 @@
-"use strict";
-/*
- * Copyright: 2025 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.cleanEnv = void 0;
-const common_1 = require("@contrast/common");
-const { StringPrototypeReplace } = common_1.primordials;
-const ENV_REGEX = /(?:-r|--require|--import|--(?:experimental-)?loader)\s+(@contrast\S+|\S*agent(?:\.c?js)?|\S*loader(?:\.m?js)?)\s*/;
-/**
- * @deprecated this is a relic from when we used transports.
- *
- * Removes any `'-r @contrast/protect'` or similar strings from `process.env.NODE_OPTIONS.`.
- * If we don't do this, the logger worker threads will be instrumented and those agents
- * will attempt to spawn more loggers and result in infinite recursion scenario.
- */
-const cleanEnv = (env) => {
-    // @ts-expect-error exported primordials don't handle overloads very well
-    const NODE_OPTIONS = env.NODE_OPTIONS ? StringPrototypeReplace.call(env.NODE_OPTIONS, ENV_REGEX, '') : undefined;
-    return { ...env, NODE_OPTIONS };
-};
-exports.cleanEnv = cleanEnv;
-//# sourceMappingURL=utils.js.map

package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/package.json

@@ -1,28 +0,0 @@
-{
-  "name": "@contrast/logger",
-  "version": "1.26.0",
-  "description": "Centralized logging for Contrast agent services",
-  "license": "SEE LICENSE IN LICENSE",
-  "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
-  "files": [
-    "lib/",
-    "!*.test.*",
-    "!tsconfig.*",
-    "!*.map"
-  ],
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "engines": {
-    "npm": ">=6.13.7 <7 || >= 8.3.1",
-    "node": ">= 16.9.1"
-  },
-  "scripts": {
-    "build": "tsc --build src/",
-    "test": "bash ../scripts/test.sh"
-  },
-  "dependencies": {
-    "@contrast/common": "1.33.0",
-    "@contrast/config": "1.48.0",
-    "pino": "^8.15.0"
-  }
-}

package/node_modules/@contrast/sec-obs/node_modules/@contrast/patcher/LICENSE

@@ -1,12 +0,0 @@
-Copyright: 2025 Contrast Security, Inc
-Contact: support@contrastsecurity.com
-License: Commercial
-
-NOTICE: This Software and the patented inventions embodied within may only be
-used as part of Contrast Security’s commercial offerings. Even though it is
-made available through public repositories, use of this Software is subject to
-the applicable End User Licensing Agreement found at
-https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
-between Contrast Security and the End User. The Software may not be reverse
-engineered, modified, repackaged, sold, redistributed or otherwise used in a
-way not consistent with the End User License Agreement.