@contrast/assess 1.41.0 → 1.43.0

package/lib/dataflow/sinks/install/postgres.js

@@ -26,7 +26,6 @@ const {
   Rule: { SQL_INJECTION: ruleId },
   isString,
 } = require('@contrast/common');
-const { InstrumentationType: { RULE } } = require('../../../constants');
 const { filterSafeTags, patchType } = require('../common');
 
 /**
@@ -43,7 +42,7 @@ module.exports = function(core) {
     patcher,
     assess: {
       inspect, // TODO NODE-3455: remove
-      getSourceContext,
+      getSinkContext,
       eventFactory: { createSinkEvent },
       dataflow: {
         tracker,
@@ -63,7 +62,7 @@ module.exports = function(core) {
   const postgres = core.assess.dataflow.sinks.postgres = {};
 
   const preHook = (methodSignature) => (data) => {
-    if (!getSourceContext(RULE, ruleId) || isLocked(ruleId)) return;
+    if (!getSinkContext(ruleId) || isLocked(ruleId)) return;
 
     const [arg0] = data.args;
     const query = arg0?.text || arg0;
@@ -126,7 +125,7 @@ module.exports = function(core) {
   postgres.install = function() {
     const pgClientQueryPatchName = 'pg.Client.prototype.query';
     depHooks.resolve(
-      { name: 'pg', file: 'lib/client.js' },
+      { name: 'pg', version: '<9', file: 'lib/client.js' },
       (client) => {
         patcher.patch(client.prototype, 'query', {
           name: pgClientQueryPatchName,
@@ -138,7 +137,7 @@ module.exports = function(core) {
 
     const pgNativeClientQueryPatchName = 'pg.native.Client.prototype.query';
     depHooks.resolve(
-      { name: 'pg', file: 'lib/native/client.js' },
+      { name: 'pg', version: '<9', file: 'lib/native/client.js' },
       (client) => {
         patcher.patch(client.prototype, 'query', {
           name: pgNativeClientQueryPatchName,
@@ -148,7 +147,7 @@ module.exports = function(core) {
       },
     );
 
-    depHooks.resolve({ name: 'pg-pool' }, (pool) => {
+    depHooks.resolve({ name: 'pg-pool', version: '<4' }, (pool) => {
       const name = 'pg-pool.Pool.prototype.query';
       patcher.patch(pool.prototype, 'query', {
         name,

package/lib/dataflow/sinks/install/postgres.test.js

@@ -28,15 +28,9 @@ describe('assess dataflow sinks postgres', function () {
     reportFindings = sinon.stub(core.assess.dataflow.sinks, 'reportFindings');
     reportSafePositive = sinon.stub(core.assess.dataflow.sinks, 'reportSafePositive');
 
-    core.depHooks.resolve
-      .withArgs({ name: 'pg', file: 'lib/client.js' })
-      .yields(Client);
-
-    core.depHooks.resolve
-      .withArgs({ name: 'pg', file: 'lib/native/client.js' })
-      .yields(NativeClient);
-
-    core.depHooks.resolve.withArgs({ name: 'pg-pool' }).yields(Pool);
+    core.depHooks.resolve.withArgs(sinon.match({ name: 'pg', file: 'lib/client.js' })).yields(Client);
+    core.depHooks.resolve.withArgs(sinon.match({ name: 'pg', file: 'lib/native/client.js' })).yields(NativeClient);
+    core.depHooks.resolve.withArgs(sinon.match({ name: 'pg-pool' })).yields(Pool);
 
     require('./postgres')(core).install();
   });

package/lib/dataflow/sinks/install/restify.js

@@ -28,7 +28,6 @@ const {
   isString,
   primordials: { ArrayPrototypeJoin },
 } = require('@contrast/common');
-const { InstrumentationType: { RULE } } = require('../../../constants');
 const { createAppendTags } = require('../../tag-utils');
 const { patchType } = require('../common');
 
@@ -45,7 +44,7 @@ module.exports = function(core) {
     depHooks,
     patcher,
     assess: {
-      getSourceContext,
+      getSinkContext,
       eventFactory: { createSinkEvent },
       dataflow: {
         tracker,
@@ -114,7 +113,7 @@ module.exports = function(core) {
     install() {
       // restify adds functionality to the built-in response via this patch function.
       // once it returns the request, it'll have been decorated with redirect() method.
-      depHooks.resolve({ name: 'restify', file: 'lib/response.js' }, (responsePatch) => patcher.patch(responsePatch, {
+      depHooks.resolve({ name: 'restify', version: '<12', file: 'lib/response.js' }, (responsePatch) => patcher.patch(responsePatch, {
         name: 'restify.response.patch',
         patchType,
         post(data) {
@@ -122,7 +121,7 @@ module.exports = function(core) {
             patchType,
             name: 'restify.Response.redirect',
             pre(data) {
-              if (!getSourceContext(RULE, ruleId)) return;
+              if (!getSinkContext(ruleId)) return;
 
               let vulnArgIdx;
               let vulnArgIsString = true;

package/lib/dataflow/sinks/install/restify.test.js

@@ -33,11 +33,9 @@ describe('assess dataflow restify sinks', function () {
       return new Response();
     };
 
-    core.depHooks.resolve
-      .withArgs({ name: 'restify', file: 'lib/response.js' })
-      .callsFake((desc, cb) => {
-        patchMock = cb(patch);
-      });
+    core.depHooks.resolve.callsFake((desc, cb) => {
+      patchMock = cb(patch);
+    });
 
     require('./restify')(core).install();
   });

package/lib/dataflow/sinks/install/sequelize.js

@@ -25,7 +25,6 @@ const {
     CUSTOM_ENCODED,
   },
 } = require('@contrast/common');
-const { InstrumentationType: { RULE } } = require('../../../constants');
 const { patchType, filterSafeTags } = require('../common');
 
 /**
@@ -42,7 +41,7 @@ module.exports = function (core) {
     config,
     assess: {
       inspect, // TODO NODE-3455: remove
-      getSourceContext,
+      getSinkContext,
       eventFactory: { createSinkEvent },
       dataflow: {
         tracker,
@@ -63,12 +62,12 @@ module.exports = function (core) {
   const sequelize = (core.assess.dataflow.sinks.sequelize = {});
 
   sequelize.install = function () {
-    depHooks.resolve({ name: 'sequelize' }, (sequelize) => {
+    depHooks.resolve({ name: 'sequelize', version: '<7' }, (sequelize) => {
       patcher.patch(sequelize.prototype, 'query', {
         name: 'sequelize.prototype.query',
         patchType,
         around(next, data) {
-          if (!getSourceContext(RULE, ruleId) || !data.args[0]) return next();
+          if (!getSinkContext(ruleId) || !data.args[0]) return next();
 
           const { args, hooked, orig } = data;
           const query = typeof args[0] === 'string' ? args[0] : args[0].query;

package/lib/dataflow/sinks/install/sqlite3.js

@@ -27,7 +27,6 @@ const {
   Rule: { SQL_INJECTION: ruleId },
   isString
 } = require('@contrast/common');
-const { InstrumentationType: { RULE } } = require('../../../constants');
 
 const safeTags = [
   `excluded:${ruleId}`,
@@ -49,7 +48,7 @@ module.exports = function(core) {
     depHooks,
     patcher,
     assess: {
-      getSourceContext,
+      getSinkContext,
       eventFactory: { createSinkEvent },
       dataflow: {
         tracker,
@@ -60,7 +59,7 @@ module.exports = function(core) {
 
   const pre = (name, method) => (data) => {
     if (
-      !getSourceContext(RULE, ruleId) ||
+      !getSinkContext(ruleId) ||
       !data.args[0] ||
       !isString(data.args[0]) ||
       isLocked(ruleId)
@@ -105,7 +104,7 @@ module.exports = function(core) {
 
   core.assess.dataflow.sinks.sqlite3 = {
     install() {
-      depHooks.resolve({ name: 'sqlite3' }, sqlite3 => {
+      depHooks.resolve({ name: 'sqlite3', version: '<6' }, sqlite3 => {
         ['all', 'run', 'get', 'each', 'exec', 'prepare'].forEach((method) => {
           const name = `sqlite3.Database.prototype.${method}`;
           patcher.patch(sqlite3.Database.prototype, method, {

package/lib/dataflow/sinks/install/vm.js

@@ -33,7 +33,6 @@ const {
   },
   traverseValues,
 } = require('@contrast/common');
-const { InstrumentationType: { RULE } } = require('../../../constants');
 const { createAdjustedQueryTags } = require('../../tag-utils');
 
 const safeTags = [
@@ -58,7 +57,7 @@ module.exports = function (core) {
     patcher,
     assess: {
       inspect, // TODO NODE-3455: remove
-      getSourceContext,
+      getSinkContext,
       eventFactory: { createSinkEvent },
       dataflow: {
         tracker,
@@ -144,7 +143,7 @@ module.exports = function (core) {
   }
 
   function around(next, { args: origArgs, hooked, orig, name }) {
-    if (!getSourceContext(RULE, ruleId) || isLocked(ruleId)) return next();
+    if (!getSinkContext(ruleId) || isLocked(ruleId)) return next();
 
     const methodPath = StringPrototypeSplit.call(name, '.');
     const method = methodPath[methodPath.length - 1];
@@ -250,7 +249,7 @@ module.exports = function (core) {
 
   core.assess.dataflow.sinks.vm = {
     install() {
-      depHooks.resolve({ name: 'vm' }, (vm) => {
+      depHooks.resolve({ name: 'vm', version: '*' }, (vm) => {
         [
           'Script',
           'createScript',

package/lib/dataflow/sources/install/body-parser1.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../constants');
 const { patchType } = require('../common');
 
 const METHODS = ['json', 'raw', 'text', 'urlencoded'];
@@ -39,7 +38,7 @@ module.exports = function init(core) {
   const preHook = (data) => {
     const [req, , next] = data.args;
     data.args[2] = scopes.wrap(function contrastNext(...args) {
-      const sourceContext = getSourceContext(SOURCE);
+      const sourceContext = getSourceContext();
 
       if (!sourceContext) {
         return next(...args);
@@ -98,7 +97,7 @@ module.exports = function init(core) {
   core.assess.dataflow.sources.bodyParser1Instrumentation = {
     install() {
       depHooks.resolve(
-        { name: 'body-parser', version: '>=1.0.0' },
+        { name: 'body-parser', version: '>=1 <2' },
         /** @param {import('body-parser').BodyParser} bodyParser */
         (bodyParser) => {
           bodyParser = patcher.patch(bodyParser, {

package/lib/dataflow/sources/install/busboy.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../constants');
 const { patchType } = require('../common');
 
 const inputType = InputType.MULTIPART_VALUE;
@@ -38,7 +37,7 @@ module.exports = (core) => {
   function createPreHook(finalEventName) {
     return function (data) {
       const { orig, hooked, funcKey } = data;
-      const sourceContext = getSourceContext(SOURCE);
+      const sourceContext = getSourceContext();
 
       if (!sourceContext) {
         return;
@@ -84,7 +83,7 @@ module.exports = (core) => {
 
   // Patch `busboy`
   function install() {
-    depHooks.resolve({ name, version: '<1.0.0' }, (busboy) => {
+    depHooks.resolve({ name, version: '<1' }, (busboy) => {
       patcher.patch(busboy.prototype, 'emit', {
         name: 'busboy.prototype.emit',
         patchType,
@@ -93,7 +92,7 @@ module.exports = (core) => {
     });
 
 
-    depHooks.resolve({ name, version: '>=1.0.0' }, (busboy) =>
+    depHooks.resolve({ name, version: '1' }, (busboy) =>
       patcher.patch(busboy, {
         name,
         patchType,

package/lib/dataflow/sources/install/busboy.test.js

@@ -27,8 +27,8 @@ describe('assess dataflow sources busboy', function () {
     sinon.spy(sources, 'handle');
 
     busboyInstr(core).install();
-    core.depHooks.resolve.withArgs({ name: 'busboy', version: '<1.0.0' }).yield(mockBusboy0);
-    core.depHooks.resolve.withArgs({ name: 'busboy', version: '>=1.0.0' }).yield(mockBusboy1);
+    core.depHooks.resolve.withArgs({ name: 'busboy', version: '<1' }).yield(mockBusboy0);
+    core.depHooks.resolve.withArgs({ name: 'busboy', version: '1' }).yield(mockBusboy1);
     const patchedBusboy1 = core.patcher.patch.getCall(1).returnValue;
 
     emitMethodVersions = {

package/lib/dataflow/sources/install/cookie-parser1.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../constants');
 const { patchType } = require('../common');
 
 module.exports = function init(core) {
@@ -25,7 +24,7 @@ module.exports = function init(core) {
   assess.dataflow.sources.cookieParser1Instrumentation = {
     install() {
       depHooks.resolve(
-        { name: 'cookie-parser', version: '>=1.0.0' },
+        { name: 'cookie-parser', version: '>=1 <2' },
         /** @param {import('cookie-parser')} cookieParser */
         (cookieParser) =>
           patcher.patch(cookieParser, {
@@ -40,7 +39,7 @@ module.exports = function init(core) {
                   const { funcKey } = data;
                   const [req, , next] = data.args;
                   data.args[2] = function contrastNext(...args) {
-                    const sourceContext = assess.getSourceContext(SOURCE);
+                    const sourceContext = assess.getSourceContext();
 
                     if (!sourceContext) {
                       return next(...args);

package/lib/dataflow/sources/install/express/params.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = function init(core) {
@@ -41,7 +40,7 @@ module.exports = function init(core) {
         layer.keys.length === 0
       ) return;
 
-      const sourceContext = getSourceContext(SOURCE);
+      const sourceContext = getSourceContext();
       if (!sourceContext) return;
 
       if (sourceContext.parsedParams) {

package/lib/dataflow/sources/install/express/parsedUrl.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = function init(core) {
@@ -33,7 +32,7 @@ module.exports = function init(core) {
     return function(data) {
       const [req] = args || data.args;
 
-      const sourceContext = getSourceContext(SOURCE);
+      const sourceContext = getSourceContext();
       if (!sourceContext) return;
 
       const sourceInfo = {

package/lib/dataflow/sources/install/express/parsedUrl.test.js

@@ -5,7 +5,7 @@ const { expect } = require('chai');
 const { initAssessFixture } = require('@contrast/test/fixtures');
 
 describe('assess dataflow sources express parsedUrl', function () {
-  let core, instrumentation, patcher, simulateRequestScope, middleware, req, res, tracker;
+  let core, instrumentation, patcher, simulateRequestScope, req, res, tracker;
 
   beforeEach(function () {
     ({ core, simulateRequestScope } = initAssessFixture());
@@ -13,12 +13,15 @@ describe('assess dataflow sources express parsedUrl', function () {
     instrumentation = core.assess.dataflow.sources.expressInstrumentation.parsedUrl;
     tracker = core.assess.dataflow.tracker;
     patcher = core.patcher;
+
+    req = {};
+    res = {};
   });
 
   describe('express4', function() {
+    let middleware;
+
     beforeEach(function() {
-      req = {};
-      res = {};
       middleware = {
         init() {
           return function (req, res, next) {
@@ -34,10 +37,7 @@ describe('assess dataflow sources express parsedUrl', function () {
         }
       };
 
-      core.depHooks
-        .resolve
-        .withArgs({ name: 'express', version: '>=4 <5', file: 'lib/middleware/init.js' })
-        .yields(middleware);
+      core.depHooks.resolve.withArgs(sinon.match({ name: 'express' })).yields(middleware);
     });
 
     it('hooks init next in order to track req._parsedUrl values', function () {
@@ -69,6 +69,7 @@ describe('assess dataflow sources express parsedUrl', function () {
 
   describe('express5', function() {
     let LayerMock;
+
     beforeEach(function() {
       req = {
         _parsedUrl: {
@@ -83,7 +84,7 @@ describe('assess dataflow sources express parsedUrl', function () {
       LayerMock = sinon.stub();
       LayerMock.prototype.handleRequest = sinon.stub();
 
-      core.depHooks.resolve.withArgs({ name: 'router', version: '>=2 <3', file: 'lib/layer.js' }).yields(LayerMock);
+      core.depHooks.resolve.withArgs(sinon.match({ name: 'router' })).yields(LayerMock);
     });
 
     it('hooks handleRequest in order to track req._parsedUrl values', function () {

package/lib/dataflow/sources/install/fastify/fastify.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = function (core) {
@@ -32,7 +31,7 @@ module.exports = function (core) {
 
   const source = sources.fastifyInstrumentation.fastify = {
     install() {
-      depHooks.resolve({ name: 'fastify', version: '>=3.2.0' }, (fastify) => patcher.patch(fastify, {
+      depHooks.resolve({ name: 'fastify', version: '>=3.2.0 <5' }, (fastify) => patcher.patch(fastify, {
         name: 'fastify.constructor',
         patchType,
         post({ result: server, funcKey }) {
@@ -42,7 +41,7 @@ module.exports = function (core) {
               : typeof request.body == 'object'
                 ? InputType.PARAMETER_VALUE
                 : InputType.BODY;
-            const sourceContext = getSourceContext(SOURCE);
+            const sourceContext = getSourceContext();
 
             if (!sourceContext) return;
 

package/lib/dataflow/sources/install/fastify/fastify.test.js

@@ -26,12 +26,9 @@ describe('assess dataflow sources fastify', function () {
       addHook: sinon.stub().yields(reqMock, replyMock, doneMock),
     };
     fastifyServerMock = () => serverMock;
-    core.depHooks
-      .resolve
-      .withArgs({ name: 'fastify', version: '>=3.2.0' })
-      .callsFake((desc, cb) => {
-        fastifyServerMock = cb(fastifyServerMock);
-      });
+    core.depHooks.resolve.callsFake((desc, cb) => {
+      fastifyServerMock = cb(fastifyServerMock);
+    });
 
     fastifyInstr(core).install();
     core.logger.trace.resetHistory();

package/lib/dataflow/sources/install/formidable1.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../constants');
 const { patchType } = require('../common');
 
 const inputType = InputType.MULTIPART_VALUE;
@@ -36,13 +35,13 @@ module.exports = (core) => {
 
   // Patch `formidable`
   function install() {
-    depHooks.resolve({ name: 'formidable' }, (formidable) => {
+    depHooks.resolve({ name: 'formidable', version: '<4' }, (formidable) => {
       formidable.IncomingForm.prototype.parse = patcher.patch(formidable.IncomingForm.prototype.parse, {
         name,
         patchType,
         pre(data) {
           const { funcKey } = data;
-          const sourceContext = getSourceContext(SOURCE);
+          const sourceContext = getSourceContext();
 
           if (!sourceContext) return;
 

package/lib/dataflow/sources/install/hapi/hapi.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = function (core) {
@@ -40,7 +39,7 @@ module.exports = function (core) {
             post({ result: server, funcKey, hooked, orig }) {
 
               server.ext('onRequest', (req, h) => {
-                const sourceContext = getSourceContext(SOURCE);
+                const sourceContext = getSourceContext();
                 if (!sourceContext) return;
 
                 [

package/lib/dataflow/sources/install/http.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { primordials: { StringPrototypeToLowerCase }, InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../constants');
 const { patchType } = require('../common');
 
 /**
@@ -47,7 +46,7 @@ module.exports = function (core) {
 
     try {
       const [, req, res] = data.args;
-      const sourceContext = getSourceContext(SOURCE);
+      const sourceContext = getSourceContext();
 
       if (!sourceContext?.policy) {
         return next();
@@ -88,7 +87,7 @@ module.exports = function (core) {
             if (
               value &&
               StringPrototypeToLowerCase.call(name) === 'content-type' &&
-              getSourceContext(SOURCE)
+              getSourceContext()
             ) {
               sourceContext.responseData.contentType = value;
             }

package/lib/dataflow/sources/install/http.test.js

@@ -16,7 +16,7 @@ describe('assess dataflow sources http', function () {
     response = mocks.serverResponse();
 
     class Server extends EventEmitter { }
-    core.depHooks.resolve.withArgs({ name: 'http' }).yields({ Server });
+    core.depHooks.resolve.withArgs(sinon.match({ name: 'http' })).yields({ Server });
     core.logger.child = () => core.logger;
 
     require('./http')(core).install();
@@ -25,7 +25,7 @@ describe('assess dataflow sources http', function () {
 
   it('instantiates assess store with appropriate metadata and handles base sources', function (next) {
     simulateRequestScope(() => {
-      core.scopes.sources.getStore().assess.req
+      core.scopes.sources.getStore().assess.req;
       server.on('request', test);
       server.emit('request', request, response);
     });

package/lib/dataflow/sources/install/koa/koa-bodyparsers.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = (core) => {
@@ -30,10 +29,9 @@ module.exports = (core) => {
     },
   } = core;
 
-  // Patch `koa-body` v4.x.x and `koa-bodyparser` v5.x.x packages
   function install() {
-    ['koa-body', 'koa-bodyparser'].forEach((name) => {
-      depHooks.resolve({ name }, (koaBody) => patcher.patch(koaBody, {
+    [['koa-body', '<7'], ['koa-bodyparser', '<5']].forEach(([name, version]) => {
+      depHooks.resolve({ name, version }, (koaBody) => patcher.patch(koaBody, {
         name,
         patchType,
         post(data) {
@@ -43,7 +41,7 @@ module.exports = (core) => {
             pre(data) {
               const { funcKey } = data;
               const [ctx, origNext] = data.args;
-              const sourceContext = getSourceContext(SOURCE);
+              const sourceContext = getSourceContext();
 
               if (!sourceContext) return;
 

package/lib/dataflow/sources/install/koa/koa-multer.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = (core) => {
@@ -31,7 +30,7 @@ module.exports = (core) => {
   } = core;
 
   function handler(req, constructorOpt) {
-    const sourceContext = getSourceContext(SOURCE);
+    const sourceContext = getSourceContext();
     if (!sourceContext) return;
 
     function handle(context, data, key) {
@@ -68,9 +67,9 @@ module.exports = (core) => {
   }
 
   function install() {
-    ['koa-multer', '@koa/multer'].forEach((name) => {
+    [['koa-multer', '<2'], ['@koa/multer', '<4']].forEach(([name, version]) => {
       depHooks.resolve(
-        { name }, (_export) => {
+        { name, version }, (_export) => {
           const origMulter = _export;
           return patcher.patch(_export, {
             name,

package/lib/dataflow/sources/install/koa/koa-multer.test.js

@@ -47,7 +47,7 @@ describe('assess dataflow sources Koa multer', function () {
         koaMulter(core).install();
 
         [patchedKoaMulter] = core.depHooks.resolve
-          .withArgs({ name })
+          .withArgs(sinon.match({ name }))
           .yield(koaMulterMock);
 
       });

package/lib/dataflow/sources/install/koa/koa-routers.js

@@ -16,7 +16,6 @@
 'use strict';
 
 const { InputType } = require('@contrast/common');
-const { InstrumentationType: { SOURCE } } = require('../../../../constants');
 const { patchType } = require('../../common');
 
 module.exports = (core) => {
@@ -32,15 +31,15 @@ module.exports = (core) => {
 
   // Patch `koa-router` and `@koa/router` to handle parsed params
   function install() {
-    ['koa-router', '@koa/router'].forEach(router => {
+    [['koa-router', '<14'], ['@koa/router', '<14']].forEach(([router, version]) => {
       depHooks.resolve(
-        { name: router, file: 'lib/layer.js' },
+        { name: router, version, file: 'lib/layer.js' },
         (layer) => {
           layer.prototype = patcher.patch(layer.prototype, 'params', {
             name: `[${router}].layer.prototype`,
             patchType,
             post({ orig, hooked, result, name, funcKey }) {
-              const sourceContext = getSourceContext(SOURCE);
+              const sourceContext = getSourceContext();
               const inputType = InputType.URL_PARAMETER;
 
               if (!sourceContext) return;