@contrast/assess 1.41.0 → 1.43.0

package/lib/crypto-analysis/install/crypto.js

@@ -21,7 +21,6 @@ const {
   primordials: { StringPrototypeToLowerCase },
 } = require('@contrast/common');
 const semver = require('semver');
-const { InstrumentationType: { RULE } } = require('../../constants');
 const { PATCH_TYPE: patchType } = require('../common');
 
 const SAFE_HASH_ALGORITHMS = new Set([
@@ -68,19 +67,19 @@ module.exports = function (core) {
     assess: {
       eventFactory,
       cryptoAnalysis,
-      getSourceContext,
+      getSinkContext,
     },
   } = core;
 
   const installer = core.assess.cryptoAnalysis.installers.crypto = {
     install() {
-      depHooks.resolve({ name: 'crypto' }, (_export) => {
+      depHooks.resolve({ name: 'crypto', version: '*' }, (_export) => {
         patcher.patch(_export, 'createHash', {
           name: 'crypto.createHash',
           patchType,
           post(data) {
             const [alg] = data.args;
-            if (!isString(alg) || !getSourceContext(RULE, Rule.CRYPTO_BAD_MAC)) return;
+            if (!isString(alg) || !getSinkContext(Rule.CRYPTO_BAD_MAC)) return;
 
             const algLower = StringPrototypeToLowerCase.call(alg);
             if (SAFE_HASH_ALGORITHMS.has(algLower)) return;
@@ -134,7 +133,7 @@ module.exports = function (core) {
             patchType,
             post(data) {
               const [alg] = data.args;
-              if (!isString(alg) || !getSourceContext(RULE, Rule.CRYPTO_BAD_CIPHERS)) return;
+              if (!isString(alg) || !getSinkContext(Rule.CRYPTO_BAD_CIPHERS)) return;
 
               const algLower = StringPrototypeToLowerCase.call(alg);
               for (const prefix of SAFE_CIPHER_ALGORITHM_PREFIXES) {

package/lib/crypto-analysis/install/crypto.test.js

@@ -17,7 +17,7 @@ describe('assess crypto-analysis node:crypto', function () {
       createCipher: sinon.stub(),
       createCipheriv: sinon.stub(),
     };
-    core.depHooks.resolve.withArgs({ name: 'crypto' }).yields(mockCrypto);
+    core.depHooks.resolve.yields(mockCrypto);
     sinon.spy(core.assess.cryptoAnalysis, 'report');
     core.assess.cryptoAnalysis.installers.crypto.install();
   });

package/lib/crypto-analysis/install/math.js

@@ -16,11 +16,9 @@
 'use strict';
 
 const { Rule } = require('@contrast/common');
-const { InstrumentationType } = require('../../constants');
 const { PATCH_TYPE: patchType } = require('../common');
 
 const { CRYPTO_WEAK_RANDOMNESS: ruleId } = Rule;
-const { RULE } = InstrumentationType;
 
 const SAFE_RANDOM_LIBS = [
   'node_modules/node-uuid/',
@@ -38,7 +36,7 @@ module.exports = function (core) {
     assess: {
       eventFactory,
       cryptoAnalysis,
-      getSourceContext,
+      getSinkContext,
     },
     config,
     logger,
@@ -51,7 +49,7 @@ module.exports = function (core) {
         name: 'global.Math.random',
         patchType,
         post(data) {
-          if (!getSourceContext(RULE, ruleId)) return;
+          if (!getSinkContext(ruleId)) return;
 
           const event = eventFactory.createCryptoAnalysisEvent({
             args: [],

package/lib/dataflow/propagation/install/JSON/parse.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { isString } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 const { createSubsetTags } = require('../../../tag-utils');
 const { patchType } = require('../../common');
 const { getKeyValueIndices } = require('./parse-fn');
@@ -50,7 +49,7 @@ module.exports = function (core) {
     logger,
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker },
     },
@@ -102,7 +101,7 @@ module.exports = function (core) {
         patchType,
         usePerf: 'sync',
         pre(data) {
-          if (!data.args[0] || !getSourceContext(PROPAGATOR)) return;
+          if (!data.args[0] || !getPropagatorContext()) return;
           const [input, reviver] = data.args;
 
           const strInfo = tracker.getData(input);

package/lib/dataflow/propagation/install/JSON/stringify.js

@@ -26,7 +26,6 @@ const {
   }
 } = require('@contrast/common');
 const crypto = require('crypto');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 const { createMergedTags, getAdjustedUntrackedValue } = require('../../../tag-utils');
 const { patchType } = require('../../common');
 
@@ -83,7 +82,7 @@ module.exports = function(core) {
   const {
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -167,7 +166,7 @@ module.exports = function(core) {
         patchType,
         usePerf: 'sync',
         pre(data) {
-          if (!getSourceContext(PROPAGATOR)) return;
+          if (!getPropagatorContext()) return;
 
           const [input, , space] = data.args;
           let [, replacer] = data.args;
@@ -224,7 +223,7 @@ module.exports = function(core) {
           data.args = [input, contrastReplacer, space];
         },
         post(data) {
-          if (!getSourceContext(PROPAGATOR)) return;
+          if (!getPropagatorContext()) return;
           let tags = {};
           const vulnerableSources = [];
           if (!data.metadata?.propagate) {

package/lib/dataflow/propagation/install/array-prototype-join.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { isString, primordials: { ArrayPrototypeJoin } } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../constants');
 const { createAppendTags } = require('../../tag-utils');
 const { patchType } = require('../common');
 
@@ -25,7 +24,7 @@ module.exports = function(core) {
     patcher,
     assess: {
       inspect,
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -72,7 +71,7 @@ module.exports = function(core) {
         usePerf: 'sync',
         post(data) {
           const { args: origArgs, obj, result, hooked, orig } = data;
-          if (!result || !getSourceContext(PROPAGATOR)) return;
+          if (!result || !getPropagatorContext()) return;
 
           const resultInfo = tracker.getData(result);
           const delimiter = origArgs[0] === undefined ? ',' : origArgs[0];

package/lib/dataflow/propagation/install/buffer.js

@@ -15,14 +15,13 @@
 'use strict';
 
 const { isString, primordials: { ArrayPrototypeJoin, StringPrototypeSubstring, BufferPrototypeToString } } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../constants');
 const { getAdjustedUntrackedValue } = require('../../tag-utils');
 const { patchType } = require('../common');
 
 module.exports = function(core) {
   const {
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     },
@@ -39,7 +38,7 @@ module.exports = function(core) {
         post(data) {
           const { hooked, obj, orig, result } = data;
 
-          if (!result || !getSourceContext(PROPAGATOR)) return;
+          if (!result || !getPropagatorContext()) return;
 
           const bufferInfo = tracker.getData(obj);
           if (!bufferInfo) {
@@ -92,7 +91,7 @@ module.exports = function(core) {
           if (
             !data.args[0] ||
             !typeSupported ||
-            !getSourceContext(PROPAGATOR)
+            !getPropagatorContext()
           ) return;
 
           const trkInfo = tracker.getData(data.args[0]);

package/lib/dataflow/propagation/install/contrast-methods/add.js

@@ -15,14 +15,13 @@
 
 'use strict';
 
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 const { createAppendTags } = require('../../../tag-utils');
 
 module.exports = function(core) {
   const {
     assess: {
       inspect,
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -41,7 +40,7 @@ module.exports = function(core) {
         // first get result, then following logic acts as post-hook in patcher speak
         const result = add(...args);
 
-        if (!result || !getSourceContext(PROPAGATOR)) return result;
+        if (!result || !getPropagatorContext()) return result;
 
         const rInfo = tracker.getData(result);
         if (rInfo) {

package/lib/dataflow/propagation/install/contrast-methods/number.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { isString } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = function (core) {
@@ -24,7 +23,7 @@ module.exports = function (core) {
     logger,
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       dataflow: { tracker }
     }
   } = core;
@@ -44,7 +43,7 @@ module.exports = function (core) {
             isNaN(result) ||
             !value ||
             !isString(value) ||
-            !getSourceContext(PROPAGATOR)
+            !getPropagatorContext()
           ) return;
 
           tracker.untrack(value);

package/lib/dataflow/propagation/install/contrast-methods/string.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { DataflowTag } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 function metadataUpdate(strInfo, event) {
@@ -32,7 +31,7 @@ module.exports = function(core) {
   const {
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker },
     }
@@ -46,7 +45,7 @@ module.exports = function(core) {
         patchType,
         usePerf: 'sync',
         post(data) {
-          if (!data.result || !getSourceContext(PROPAGATOR)) return;
+          if (!data.result || !getPropagatorContext()) return;
 
           const arg = data.args[0];
           let argInfo = tracker.getData(arg);

package/lib/dataflow/propagation/install/contrast-methods/tag.js

@@ -15,13 +15,12 @@
 
 'use strict';
 
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = function(core) {
   const {
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker },
     },
@@ -35,7 +34,7 @@ module.exports = function(core) {
         patchType,
         usePerf: 'sync',
         post(data) {
-          if (!data.result || !getSourceContext(PROPAGATOR)) {
+          if (!data.result || !getPropagatorContext()) {
             return;
           }
 

package/lib/dataflow/propagation/install/decode-uri-component.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { DataflowTag: { URL_ENCODED } } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../constants');
 const { createFullLengthCopyTags } = require('../../tag-utils');
 const { patchType, createObjectLabel } = require('../common');
 
@@ -24,7 +23,7 @@ module.exports = function(core) {
   const {
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -40,7 +39,7 @@ module.exports = function(core) {
         usePerf: 'sync',
         post(data) {
           const { args, result, hooked, orig } = data;
-          if (!result || !args[0] || !getSourceContext(PROPAGATOR)) return;
+          if (!result || !args[0] || !getPropagatorContext()) return;
 
           const argInfo = tracker.getData(args[0]);
 

package/lib/dataflow/propagation/install/ejs/escape-xml.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { DataflowTag: { WEAK_URL_ENCODED } } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 const { createFullLengthCopyTags } = require('../../../tag-utils');
 const { patchType } = require('../../common');
 
@@ -25,7 +24,7 @@ module.exports = function(core) {
     patcher,
     depHooks,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -33,7 +32,7 @@ module.exports = function(core) {
 
   return core.assess.dataflow.propagation.ejsInstrumentation.escapeXML = {
     install() {
-      depHooks.resolve({ name: 'ejs', file: 'lib/utils.js', version: '>=2.6.2' }, (ejsUtils) => {
+      depHooks.resolve({ name: 'ejs', file: 'lib/utils.js', version: '>=2.6.2 <4' }, (ejsUtils) => {
         const name = 'ejs.utils.escapeXML';
         patcher.patch(ejsUtils, 'escapeXML', {
           name,
@@ -41,7 +40,7 @@ module.exports = function(core) {
           usePerf: 'sync',
           post(data) {
             const { args, result, hooked, orig } = data;
-            if (!result || !args[0] || !getSourceContext(PROPAGATOR)) return;
+            if (!result || !args[0] || !getPropagatorContext()) return;
 
             const argInfo = tracker.getData(args[0]);
 

package/lib/dataflow/propagation/install/ejs/template.js

@@ -18,7 +18,6 @@
 const { EOL } = require('os');
 const { primordials: { ArrayPrototypeJoin, StringPrototypeSubstring } } = require('@contrast/common');
 const { patchType } = require('../../common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants');
 
 /**
  * @param {{
@@ -30,7 +29,7 @@ const { InstrumentationType: { PROPAGATOR } } = require('../../../../constants')
  */
 module.exports = function (core) {
   const {
-    assess: { getSourceContext },
+    assess: { getPropagatorContext },
     depHooks,
     logger,
     patcher,
@@ -56,13 +55,13 @@ module.exports = function (core) {
      *   function __append() { // rewritten }
      */
     install() {
-      depHooks.resolve({ name: 'ejs', version: '>=2.6.2' }, (_export, version) => {
+      depHooks.resolve({ name: 'ejs', version: '>=2.6.2 <4' }, (_export, version) => {
         patcher.patch(_export.Template.prototype, 'generateSource', {
           name: 'ejs.Template.prototype.generateSource',
           patchType,
           usePerf: 'sync',
           post(data) {
-            if (!getSourceContext(PROPAGATOR)) return;
+            if (!getPropagatorContext()) return;
 
             try {
               const { code } = rewriter.rewriteSync(`${WRAPPER_PREFIX}${data.obj.source}${WRAPPER_SUFFIX}`, REWRITE_OPTS);

package/lib/dataflow/propagation/install/ejs/template.test.js

@@ -21,7 +21,7 @@ describe('assess dataflow propagation ejs.Template', function () {
     MockEjsTemplate.prototype.generateSource = function() {
     };
 
-    core.depHooks.resolve.withArgs({ name: 'ejs', version: '>=2.6.2' }).yields({ Template: MockEjsTemplate });
+    core.depHooks.resolve.withArgs({ name: 'ejs', version: '>=2.6.2 <4' }).yields({ Template: MockEjsTemplate });
     core.assess.dataflow.propagation.ejsInstrumentation.template.install();
   });
 

package/lib/dataflow/propagation/install/encode-uri.js

@@ -18,7 +18,6 @@
 const {
   DataflowTag: { URL_ENCODED, WEAK_URL_ENCODED }
 } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../constants');
 const { createEscapeTagRanges } = require('../../tag-utils');
 const { patchType, createObjectLabel } = require('../common');
 
@@ -26,7 +25,7 @@ module.exports = function(core) {
   const {
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -51,7 +50,7 @@ module.exports = function(core) {
           usePerf: 'sync',
           post(data) {
             const { args, result, hooked, orig } = data;
-            if (!result || !args[0] || !getSourceContext(PROPAGATOR)) return;
+            if (!result || !args[0] || !getPropagatorContext()) return;
 
             const argInfo = tracker.getData(args[0]);
 

package/lib/dataflow/propagation/install/escape-html.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { DataflowTag: { HTML_ENCODED } } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../constants');
 const { createEscapeTagRanges } = require('../../tag-utils');
 const { patchType } = require('../common');
 
@@ -25,7 +24,7 @@ module.exports = function(core) {
     patcher,
     depHooks,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -33,7 +32,7 @@ module.exports = function(core) {
 
   return core.assess.dataflow.propagation.escapeHtml = {
     install() {
-      depHooks.resolve({ name: 'escape-html' }, (escapeHtml) => {
+      depHooks.resolve({ name: 'escape-html', version: '<2' }, (escapeHtml) => {
         const name = 'escape-html';
 
         return patcher.patch(escapeHtml, {
@@ -42,7 +41,7 @@ module.exports = function(core) {
           usePerf: 'sync',
           post(data) {
             const { args, result, hooked, orig } = data;
-            if (!result || !args[0] || !getSourceContext(PROPAGATOR)) return;
+            if (!result || !args[0] || !getPropagatorContext()) return;
 
             const argInfo = tracker.getData(args[0]);
 

package/lib/dataflow/propagation/install/escape.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { DataflowTag: { WEAK_URL_ENCODED } } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../constants');
 const { createFullLengthCopyTags } = require('../../tag-utils');
 const { patchType, createObjectLabel } = require('../common');
 
@@ -24,7 +23,7 @@ module.exports = function(core) {
   const {
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -40,7 +39,7 @@ module.exports = function(core) {
         usePerf: 'sync',
         post(data) {
           const { args, result, hooked, orig } = data;
-          if (!result || !args[0] || !getSourceContext(PROPAGATOR)) return;
+          if (!result || !args[0] || !getPropagatorContext()) return;
 
           const argInfo = tracker.getData(args[0]);
 

package/lib/dataflow/propagation/install/fastify-send.js

@@ -21,12 +21,12 @@ module.exports = function (core) {
   const {
     depHooks,
     patcher,
-    assess: { getSourceContext }
+    assess: { getPropagatorContext }
   } = core;
 
   return core.assess.dataflow.propagation.fastifySend = {
     install() {
-      depHooks.resolve({ name: '@fastify/send', file: 'lib/SendStream.js' }, (_SendStream) => {
+      depHooks.resolve({ name: '@fastify/send', version: '<4', file: 'lib/SendStream.js' }, (_SendStream) => {
         patcher.patch(_SendStream.prototype, 'sendFile', {
           name: '@fastify/send/lib/SendStream.js',
           patchType,
@@ -34,7 +34,7 @@ module.exports = function (core) {
           pre(data) {
             const { args } = data;
 
-            if (!getSourceContext()) return;
+            if (!getPropagatorContext()) return;
 
             const untrackedPath = StringPrototypeSlice.call(` ${args[0]}`, 1);
             args[0] = untrackedPath;

package/lib/dataflow/propagation/install/fastify-send.test.js

@@ -22,9 +22,7 @@ describe('assess @fastify/send', function() {
         sendFileStub(path);
       }
     };
-    core.depHooks.resolve
-      .withArgs({ name: '@fastify/send', file: 'lib/SendStream.js' })
-      .yield(SendStreamMock);
+    core.depHooks.resolve.yield(SendStreamMock);
   });
 
   afterEach(function() {

package/lib/dataflow/propagation/install/handlebars-utils-escape-expression.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { DataflowTag: { HTML_ENCODED } } = require('@contrast/common');
-const { InstrumentationType: { PROPAGATOR } } = require('../../../constants');
 const { createFullLengthCopyTags } = require('../../tag-utils');
 const { patchType } = require('../common');
 
@@ -25,7 +24,7 @@ module.exports = function(core) {
     patcher,
     depHooks,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       eventFactory: { createPropagationEvent },
       dataflow: { tracker }
     }
@@ -33,7 +32,7 @@ module.exports = function(core) {
 
   return core.assess.dataflow.propagation.handlebarsEscapeExpression = {
     install() {
-      depHooks.resolve({ name: 'handlebars', version: '>=4.0.0' }, (handlebars) => {
+      depHooks.resolve({ name: 'handlebars', version: '>=4 <5' }, (handlebars) => {
         const name = 'handlebars.Utils.escapeExpression';
 
         patcher.patch(handlebars.Utils, 'escapeExpression', {
@@ -42,7 +41,7 @@ module.exports = function(core) {
           usePerf: 'sync',
           post(data) {
             const { args, result, hooked, orig } = data;
-            if (!result || !args[0] || !getSourceContext(PROPAGATOR)) return;
+            if (!result || !args[0] || !getPropagatorContext()) return;
 
             const argInfo = tracker.getData(args[0]);
 

package/lib/dataflow/propagation/install/isnumeric-0.js

@@ -33,7 +33,7 @@ module.exports = function (core) {
     install() {
       const name = 'isnumeric';
 
-      depHooks.resolve({ name, version: '<1.0.0' }, (_export, { version }) => {
+      depHooks.resolve({ name, version: '<1' }, (_export, { version }) => {
         const fullName = `${name}@${version}`;
         return patcher.patch(_export, {
           name,

package/lib/dataflow/propagation/install/joi/any.js

@@ -28,7 +28,7 @@ module.exports = function(core) {
   joiInstrumentation.any = {
     install() {
       depHooks.resolve(
-        { name: 'joi', file: 'lib/types/any', version: '>=17.0.0' },
+        { name: 'joi', file: 'lib/types/any', version: '>=17 <18' },
         (exp) => {
           const anyTypePrototype = Object.getPrototypeOf(exp);
           const def = anyTypePrototype?._definition;

package/lib/dataflow/propagation/install/joi/any.test.js

@@ -12,7 +12,7 @@ describe('assess dataflow propagation joi object validator with custom or extern
     tracker = core.assess.dataflow.tracker;
     core.config.assess.trust_custom_validators = true;
 
-    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/any', version: '>=17.0.0' }).yields(require('joi-17/lib/types/any'));
+    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/any', version: '>=17 <18' }).yields(require('joi-17/lib/types/any'));
 
     require('./index')(core).install();
     joi = require('joi-17');

package/lib/dataflow/propagation/install/joi/array.test.js

@@ -41,11 +41,11 @@ describe('assess dataflow propagation joi array schema validation', function() {
     tracker = core.assess.dataflow.tracker;
     core.config.assess.trust_custom_validators = true;
 
-    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/string.js', version: '>=17.0.0' }).yields(require('joi-17/lib/types/string'));
-    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/keys.js', version: '>=17.0.0' }).yields(require('joi-17/lib/types/keys'));
-    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/any', version: '>=17.0.0' }).yields(require('joi-17/lib/types/any'));
-    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/validator', version: '>=17.0.0' }).yields(require('joi-17/lib/validator'));
-    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/values.js', version: '>=17.0.0' }).yields(require('joi-17/lib/values'));
+    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/string.js', version: '>=17 <18' }).yields(require('joi-17/lib/types/string'));
+    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/keys.js', version: '>=17 <18' }).yields(require('joi-17/lib/types/keys'));
+    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/types/any', version: '>=17 <18' }).yields(require('joi-17/lib/types/any'));
+    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/validator', version: '>=17 <18' }).yields(require('joi-17/lib/validator'));
+    core.depHooks.resolve.withArgs({ name: 'joi', file: 'lib/values.js', version: '>=17 <18' }).yields(require('joi-17/lib/values'));
 
     require('./index')(core).install();
     joi = require('joi-17');

package/lib/dataflow/propagation/install/joi/boolean.js

@@ -25,7 +25,7 @@ module.exports = function(core) {
     depHooks,
     patcher,
     assess: {
-      getSourceContext,
+      getPropagatorContext,
       inspect, // TODO NODE-3455: remove
       eventFactory: { createPropagationEvent },
       dataflow: { tracker },
@@ -50,7 +50,7 @@ module.exports = function(core) {
         if (
           !data.result?.value ||
           typeof data.result.value !== 'boolean' ||
-          !getSourceContext()
+          !getPropagatorContext()
         ) return;
 
         const argInfo = tracker.getData(data.args[0]);
@@ -100,7 +100,7 @@ module.exports = function(core) {
   return core.assess.dataflow.propagation.joiInstrumentation.booleanCoerce = {
     install() {
       depHooks.resolve(
-        { name: 'joi', file: 'lib/types/boolean.js', version: '>=17.0.0' },
+        { name: 'joi', file: 'lib/types/boolean.js', version: '>=17 <18' },
         instrumentJoiBoolean
       );
     },

package/lib/dataflow/propagation/install/joi/boolean.test.js

@@ -20,7 +20,7 @@ describe('assess dataflow propagation joi boolean', function() {
       .withArgs({
         name: 'joi',
         file: 'lib/types/boolean.js',
-        version: '>=17.0.0',
+        version: '>=17 <18',
       })
       .yields(require('joi-17/lib/types/boolean'));