@contrast/agent 3.11.10

package/node_modules/winston-transport/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "winston-transport",
+  "description": "Base stream implementations for winston@3 and up.",
+  "version": "4.4.0",
+  "main": "index.js",
+  "browser": "dist/index.js",
+  "scripts": {
+    "lint": "populist config/*.js index.js",
+    "pretest": "npm run lint && npm run build",
+    "test": "nyc mocha test/*.test.js",
+    "report": "nyc report --reporter=lcov",
+    "build": "./node_modules/.bin/rimraf dist && babel *.js -d ./dist",
+    "prepublishOnly": "npm run build"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git@github.com:winstonjs/winston-transport.git"
+  },
+  "keywords": [
+    "winston",
+    "transport",
+    "winston3"
+  ],
+  "author": "Charlie Robbins <charlie.robbins@gmail.com>",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/winstonjs/winston-transport/issues"
+  },
+  "homepage": "https://github.com/winstonjs/winston-transport#readme",
+  "dependencies": {
+    "readable-stream": "^2.3.7",
+    "triple-beam": "^1.2.0"
+  },
+  "devDependencies": {
+    "@types/node": "^14.0.13",
+    "abstract-winston-transport": ">= 0.3.0",
+    "assume": "^2.2.0",
+    "babel-cli": "^6.26.0",
+    "babel-preset-env": "^1.7.0",
+    "eslint-config-populist": "^4.2.0",
+    "logform": "^2.2.0",
+    "mocha": "^8.0.1",
+    "nyc": "^15.1.0",
+    "rimraf": "^3.0.2",
+    "winston-compat": "^0.1.5"
+  },
+  "engines": {
+    "node": ">= 6.4.0"
+  }
+
+,"_resolved": "https://registry.npmjs.org/winston-transport/-/winston-transport-4.4.0.tgz"
+,"_integrity": "sha512-Lc7/p3GtqtqPBYYtS6KCN3c77/2QCev51DvcJKbkFPQNoj1sinkGwLGFDxkXY9J6p9+EPnYs+D90uwbnaiURTw=="
+,"_from": "winston-transport@4.4.0"
+}

package/node_modules/winston-transport/tsconfig.json

@@ -0,0 +1,22 @@
+{
+  "compilerOptions": {
+    "module": "commonjs",
+    "lib": [
+      "es6"
+    ],
+    "noImplicitAny": true,
+    "noImplicitThis": true,
+    "strictNullChecks": true,
+    "baseUrl": "./",
+    "typeRoots": [
+      "./node_modules/@types",
+      "./node_modules"
+    ],
+    "types": ["node", "logform"],
+    "noEmit": true,
+    "forceConsistentCasingInFileNames": true
+  },
+  "files": [
+    "index.d.ts"
+  ]
+}

package/package.json

@@ -0,0 +1,196 @@
+{
+  "name": "@contrast/agent",
+  "version": "3.11.10",
+  "publishConfig": {
+    "tag": "latest-3"
+  },
+  "description": "Node.js security instrumentation by Contrast Security",
+  "keywords": [
+    "security",
+    "instrumentation",
+    "debug"
+  ],
+  "author": "Contrast Security",
+  "license": "SEE LICENSE IN LICENSE",
+  "contributors": [
+    "Matt Austin",
+    "Ehden Sinai",
+    "Matthew Henry",
+    "Alex Boyd",
+    "Ben Greenberg",
+    "Bob Evans",
+    "Griffin Yourick",
+    "Ati Ok",
+    "Pat McClory",
+    "Michael Woytowitz"
+  ],
+  "scripts": {
+    "docs": "jsdoc -c ../.jsdoc.json",
+    "release": "scripts/make-release.js",
+    "tag": "scripts/tag-release.js",
+    "test:debug": "scripts/test.sh debug",
+    "test": "scripts/test.sh",
+    "test:screener": "mocha --parallel test/screener/**/*test.js",
+    "bench": "NODE_ENV=test mocha './test/benchmark/**/*.js'",
+    "test:gh-ci": "scripts/test.sh gh-ci",
+    "test:no-cov": "scripts/test.sh no-cov",
+    "test:only": "scripts/test.sh only",
+    "findCircularDeps": "madge -c .",
+    "build": "asar p lib/ lib.asar",
+    "docker-pkg": "docker build -t node-agent .",
+    "extract-licenses": "node scripts/extract-licenses",
+    "fix": "eslint . --fix",
+    "prepare": "husky install || exit 0",
+    "preversion": "npm run test:gh-ci"
+  },
+  "lint-staged": {
+    "*.js": "eslint --fix",
+    "*.sh": "shellcheck -x"
+  },
+  "bin": {
+    "node-contrast": "cli.js",
+    "perf-logs": "perf-logs.js"
+  },
+  "files": [
+    "bin/**",
+    "lib.asar",
+    "agent-loader.js",
+    "bootstrap.js",
+    "cli.js",
+    "esm.mjs",
+    "loader.js",
+    "perf-logs.js"
+  ],
+  "repository": {
+    "type": "git"
+  },
+  "homepage": "https://docs.contrastsecurity.com/installation-node.html#node-overview",
+  "dependencies": {
+    "@babel/generator": "^7.12.1",
+    "@babel/parser": "^7.12.3",
+    "@babel/template": "^7.10.4",
+    "@babel/traverse": "^7.12.1",
+    "@babel/types": "^7.12.1",
+    "@contrast/distringuish-prebuilt": "^2.1.1",
+    "@contrast/escodegen": "^1.16.0",
+    "@contrast/esprima": "^4.1.2",
+    "@contrast/estraverse": "^5.1.0",
+    "@contrast/flat": "^4.1.1",
+    "@contrast/fn-inspect": "2.3.3",
+    "@contrast/heapdump": "^1.0.0",
+    "@contrast/protobuf-api": "^3.2.0",
+    "@contrast/require-hook": "^2.0.4",
+    "@contrast/synchronous-source-maps": "^1.1.0",
+    "amqp-connection-manager": "^3.2.2",
+    "amqplib": "^0.8.0",
+    "asar": "^3.0.1",
+    "base64url": "^3.0.1",
+    "big-integer": "^1.6.36",
+    "bluebird": "^3.5.3",
+    "cls-hooked": "^4.2.2",
+    "commander": "^5.0.0",
+    "content-security-policy-parser": "^0.2.0",
+    "cookie": "^0.3.1",
+    "crc-32": "^1.0.0",
+    "find-cache-dir": "^3.3.1",
+    "ipaddr.js": "^1.8.1",
+    "json-stable-stringify": "^1.0.1",
+    "jspack": "0.0.4",
+    "lodash": "^4.17.21",
+    "make-dir": "^3.1.0",
+    "moment": "^2.21.0",
+    "multi-stage-sourcemap": "^0.3.1",
+    "on-finished": "^2.3.0",
+    "parseurl": "^1.3.3",
+    "prom-client": "^12.0.0",
+    "recursive-readdir": "^2.2.2",
+    "request": "^2.88.0",
+    "semver": "^7.3.2",
+    "source-map": "^0.7.3",
+    "winston": "^3.1.0",
+    "winston-daily-rotate-file": "^3.5.1",
+    "winston-syslog": "2.1.0",
+    "yaml": "^1.10.0"
+  },
+  "devDependencies": {
+    "@bmacnaughton/string-generator": "^1.0.0",
+    "@contrast/eslint-config": "^2.0.1",
+    "@contrast/fake-module": "file:test/mock/contrast-fake",
+    "@contrast/screener-service": "^1.12.4",
+    "@hapi/boom": "file:test/mock/boom",
+    "@hapi/hapi": "file:test/mock/hapi",
+    "@ls-lint/ls-lint": "^1.8.1",
+    "ast-types": "^0.12.4",
+    "aws-sdk": "file:test/mock/aws-sdk",
+    "axios": "^0.21.1",
+    "base58": "^2.0.1",
+    "callsite": "^1.0.0",
+    "chai": "^4.2.0",
+    "chai-as-promised": "^7.1.1",
+    "chai-like": "^1.1.1",
+    "codecov": "^3.7.0",
+    "config": "^3.3.3",
+    "csv-writer": "^1.2.0",
+    "deasync": "^0.1.20",
+    "escape-html": "^1.0.3",
+    "eslint": "^5.16.0",
+    "eslint-config-prettier": "^6.11.0",
+    "eslint-plugin-mocha": "^7.0.1",
+    "eslint-plugin-node": "^11.1.0",
+    "eslint-plugin-prettier": "^3.1.4",
+    "express": "file:test/mock/express",
+    "fetch-cookie": "^0.11.0",
+    "form-data": "^3.0.0",
+    "glob": "^7.1.4",
+    "handlebars": "^4.7.7",
+    "husky": "^6.0.0",
+    "joi": "^17.4.0",
+    "jsdoc": "^3.6.7",
+    "libxmljs": "file:test/mock/libxmljs",
+    "libxmljs2": "file:test/mock/libxmljs2",
+    "lint-staged": "^11.0.0",
+    "madge": "^4.0.1",
+    "marsdb": "file:test/mock/marsdb",
+    "mocha": "^8.2.0",
+    "mochawesome": "^6.2.2",
+    "mongodb": "file:test/mock/mongodb",
+    "mongodb-npm": "npm:mongodb@^3.6.5",
+    "mustache": "^3.0.1",
+    "mysql": "file:test/mock/mysql",
+    "nock": "^12.0.3",
+    "node-fetch": "^2.6.1",
+    "npm-license-crawler": "^0.2.1",
+    "nyc": "^15.0.0",
+    "pg": "file:test/mock/pg",
+    "pino": "^6.7.0",
+    "prettier": "^1.19.1",
+    "proxyquire": "^2.1.0",
+    "qs": "^6.9.4",
+    "rethinkdb": "file:test/mock/rethinkdb",
+    "sequelize": "^6.3.3",
+    "shellcheck": "^1.0.0",
+    "sinon": "^7.2.2",
+    "sinon-chai": "^3.3.0",
+    "sqlite3": "file:test/mock/sqlite3",
+    "swig": "file:test/mock/swig",
+    "triple-beam": "^1.3.0",
+    "typeorm": "file:test/mock/typeorm",
+    "uuid": "^8.3.1",
+    "validator": "^13.5.2",
+    "xpath": "file:test/mock/xpath",
+    "yargs-interactive": "^3.0.0"
+  },
+  "main": "bootstrap.js",
+  "directories": {
+    "test": "test"
+  },
+  "engines": {
+    "node": ">=10.13.0 <11 || >=12.13.0 <13 || >=14.15.0 <15",
+    "npm": ">=6.13.7 <7 || >=7.11.0"
+  },
+  "bundleDependencies": [
+    "winston",
+    "winston-syslog",
+    "winston-daily-rotate-file"
+  ]
+}

package/perf-logs.js

@@ -0,0 +1,158 @@
+#!/usr/bin/env node
+/**
+Copyright: 2021 Contrast Security, Inc
+  Contact: support@contrastsecurity.com
+  License: Commercial
+
+  NOTICE: This Software and the patented inventions embodied within may only be
+  used as part of Contrast Security’s commercial offerings. Even though it is
+  made available through public repositories, use of this Software is subject to
+  the applicable End User Licensing Agreement found at
+  https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+  between Contrast Security and the End User. The Software may not be reverse
+  engineered, modified, repackaged, sold, redistributed or otherwise used in a
+  way not consistent with the End User License Agreement.
+*/
+'use strict';
+
+const { program } = require('commander');
+const fs = require('fs');
+const readline = require('readline');
+
+const LOG_REGEX = /req-perf-logger - /;
+
+/*
+ * transform raw data to more consumable values
+ * (nano->ms, calculate percentages)
+ */
+function transform(data) {
+  // lame but make a new object so they get logged in insertion order
+  const newData = { path: data.path, method: data.method };
+  newData.instrumentationTimeMs = data.instrumentationTime / 10 ** 6;
+  newData.totalTimeMs = data.totalTime / 10 ** 6;
+  newData.instrumentationOverheadPerc =
+    (data.instrumentationTime / data.totalTime) * 100;
+
+  newData.events = [];
+  for (let i = 0; i < data.events.length; i++) {
+    newData.events[i] = { name: data.events[i].name, times: {} };
+    newData.events[i].times.preMs = data.events[i].times.pre / 10 ** 6;
+    newData.events[i].times.postMs = data.events[i].times.post / 10 ** 6;
+    newData.events[i].times.origMs = data.events[i].times.orig / 10 ** 6;
+    newData.events[i].times.preOverheadPerc =
+      (data.events[i].times.pre / data.events[i].times.orig) * 100;
+    newData.events[i].times.postOverheadPerc =
+      (data.events[i].times.post / data.events[i].times.orig) * 100;
+    newData.events[i].times.totalOverheadPerc =
+      ((data.events[i].times.pre + data.events[i].times.post) /
+        data.events[i].times.orig) *
+      100;
+  }
+  return newData;
+}
+
+/*
+ * merge an entry with already accumulated data
+ */
+function merge(accum, data) {
+  accum.count = accum.count + 1;
+  accum.instrumentationTimeMs += data.instrumentationTimeMs;
+  accum.totalTimeMs += data.totalTimeMs;
+  accum.instrumentationOverheadPerc =
+    (accum.instrumentationTimeMs / accum.totalTimeMs) * 100;
+
+  const newDataEvents = data.events.reduce((accum, cur) => {
+    accum[cur.name] = cur;
+    return accum;
+  }, {});
+
+  for (let i = 0; i < accum.events.length; i++) {
+    const { name } = accum.events[i];
+    if (!newDataEvents[name]) {
+      continue;
+    }
+    accum.events[i].times.preMs += newDataEvents[name].times.preMs;
+    accum.events[i].times.postMs += newDataEvents[name].times.postMs;
+    accum.events[i].times.origMs += newDataEvents[name].times.origMs;
+    accum.events[i].times.preOverheadPerc =
+      (accum.events[i].times.preMs / accum.events[i].times.origMs) * 100;
+    accum.events[i].times.postOverheadPerc =
+      (accum.events[i].times.postMs / accum.events[i].times.origMs) * 100;
+    accum.events[i].times.totalOverheadPerc =
+      ((accum.events[i].times.preMs + accum.events[i].times.postMs) /
+        accum.events[i].times.origMs) *
+      100;
+    delete newDataEvents[name];
+  }
+
+  // append any remaining events from the new data
+  Array.prototype.push.apply(accum.events, Object.values(newDataEvents));
+  return accum;
+}
+
+async function processFile(filename, filter, group) {
+  const rl = readline.createInterface({
+    input: fs.createReadStream(filename),
+    crlfDelay: Infinity
+  });
+
+  const merged = {};
+  for await (const line of rl) {
+    if (line.match(LOG_REGEX)) {
+      const data = transform(JSON.parse(line.split(LOG_REGEX)[1]));
+      if (filter && !data.path.match(filter)) {
+        continue;
+      }
+      if (!group) {
+        // eslint-disable-next-line no-console
+        console.log(JSON.stringify(data, null, 4));
+      } else {
+        const key = filter
+          ? `regex:${data.method}`
+          : `${data.path}:${data.method}`;
+        if (filter) {
+          // path is meaningless if we're merging w/ a filter
+          delete data.path;
+        }
+        if (!merged[key]) {
+          merged[key] = data;
+          merged[key].count = 1;
+        } else {
+          merged[key] = merge(merged[key], data);
+        }
+      }
+    }
+  }
+
+  if (group) {
+    // eslint-disable-next-line no-console
+    console.log(JSON.stringify(Object.values(merged), null, 4));
+  }
+}
+
+program
+  .arguments('<log_file>')
+  .option(
+    '-g, --group',
+    'group like requests together (defaults by req path, but uses filter regex if specified)'
+  )
+  .option('-f, --filter <regex>', 'filter (and group if specified) by regex');
+
+program.parse(process.argv);
+if (program.args.length === 0) {
+  program.help();
+}
+
+let filterRegex;
+if (program.filter) {
+  try {
+    filterRegex = new RegExp(program.filter);
+  } catch (e) {
+    // eslint-disable-next-line no-console
+    console.error('invalid filter regex');
+    // eslint-disable-next-line no-process-exit
+    process.exit(-1);
+  }
+}
+
+processFile(program.args[0], filterRegex, program.group);