@heroku/js-blanket 1.0.0 → 1.0.1

package/dist/esm/core/types.d.ts

@@ -57,7 +57,7 @@ export interface ScrubConfig {
      * ]
      * ```
      */
-    fields?: (string | RegExp)[];
+    fields?: readonly (string | RegExp)[];
     /**
      * Path-based scrubbing: matches specific dot-notation paths
      *
@@ -74,7 +74,7 @@ export interface ScrubConfig {
      * ]
      * ```
      */
-    paths?: string[];
+    paths?: readonly string[];
     /**
      * Pattern-based scrubbing: regex patterns for content scrubbing
      *
@@ -92,7 +92,7 @@ export interface ScrubConfig {
      * ]
      * ```
      */
-    patterns?: RegExp[];
+    patterns?: readonly RegExp[];
     /**
      * Replacement string for scrubbed values
      *
@@ -120,6 +120,30 @@ export interface ScrubConfig {
      * ```
      */
     recursive?: boolean;
+    /**
+     * Maximum depth for object traversal (F5: DoS prevention)
+     *
+     * Limits how deep the scrubber will traverse nested objects to prevent
+     * stack overflow from maliciously crafted deeply nested payloads.
+     *
+     * @default 100
+     *
+     * @example
+     * ```typescript
+     * maxDepth: 50  // Limit to 50 levels of nesting
+     * maxDepth: Infinity  // No limit (backward compatible)
+     * ```
+     */
+    maxDepth?: number;
+    /**
+     * Behavior when max depth is exceeded
+     *
+     * - 'truncate': Replace the value with '[MAX_DEPTH_EXCEEDED]' (default)
+     * - 'throw': Throw an error with the path where depth was exceeded
+     *
+     * @default 'truncate'
+     */
+    maxDepthBehavior?: 'truncate' | 'throw';
 }
 /**
  * Result of a scrub operation

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "@heroku/js-blanket",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Framework-agnostic sensitive data scrubbing library for error monitoring and logging",
   "type": "module",
+  "packageManager": "pnpm@10.26.0",
   "engines": {
     "node": ">=20.0.0"
   },
@@ -16,27 +17,43 @@
       "types": "./dist/esm/index.d.ts"
     }
   },
+  "scripts": {
+    "build:cjs": "rm -rf dist/cjs && tsc -p tsconfig.cjs.json && mkdir -p dist/cjs && echo '{\"type\": \"commonjs\"}' > dist/cjs/package.json",
+    "build:esm": "rm -rf dist/esm && tsc -p tsconfig.esm.json",
+    "build": "pnpm run build:cjs && pnpm run build:esm",
+    "test": "c8 mocha --require ./scripts/test-setup.mjs --forbid-only \"dist/esm/**/*.test.js\"",
+    "prepare": "husky && pnpm run build",
+    "lint": "eslint \"src/**/*.{js,ts}\"",
+    "lint:fix": "eslint \"src/**/*.{js,ts}\" --fix",
+    "prettier": "prettier . --write",
+    "format": "pnpm run prettier && pnpm run lint:fix",
+    "pretest": "pnpm run build:cjs && pnpm run build:esm && pnpm run type-check",
+    "type-check": "tsc --noEmit -p tsconfig.json",
+    "lint-staged": "npx lint-staged",
+    "check": "pnpm run format && pnpm run type-check && pnpm test",
+    "ci": "pnpm run lint && pnpm run type-check && pnpm test"
+  },
   "dependencies": {
     "tslib": "^2.8.1"
   },
   "devDependencies": {
-    "@eslint/js": "^9.39.1",
+    "@eslint/js": "^9.39.4",
     "@types/chai": "^5.2.3",
     "@types/mocha": "^10.0.10",
-    "@types/node": "^24.10.0",
-    "@typescript-eslint/eslint-plugin": "^8.46.3",
-    "@typescript-eslint/parser": "^8.46.3",
+    "@types/node": "^25.9.3",
+    "@typescript-eslint/eslint-plugin": "^8.61.1",
+    "@typescript-eslint/parser": "^8.61.1",
     "c8": "^10.1.3",
-    "chai": "^6.2.0",
-    "eslint": "^9.39.1",
+    "chai": "^6.2.2",
+    "eslint": "^9.39.4",
+    "glob": "^10.5.0",
     "husky": "^9.1.7",
-    "lint-staged": "^16.2.6",
-    "mocha": "^11.7.5",
-    "prettier": "^3.6.2",
+    "lint-staged": "^16.4.0",
+    "mocha": "^11.7.6",
+    "prettier": "^3.8.4",
     "typescript": "^5.9.3"
   },
   "publishConfig": {
-    "access": "restricted",
     "registry": "https://registry.npmjs.org/"
   },
   "files": [
@@ -59,20 +76,5 @@
     "data-sanitization",
     "error-monitoring",
     "logging"
-  ],
-  "scripts": {
-    "build:cjs": "rm -rf dist/cjs && tsc -p tsconfig.cjs.json && mkdir -p dist/cjs && echo '{\"type\": \"commonjs\"}' > dist/cjs/package.json",
-    "build:esm": "rm -rf dist/esm && tsc -p tsconfig.esm.json",
-    "build": "pnpm run build:cjs && pnpm run build:esm",
-    "test": "c8 mocha --require ./scripts/test-setup.mjs --forbid-only \"dist/esm/**/*.test.js\"",
-    "lint": "eslint \"src/**/*.{js,ts}\"",
-    "lint:fix": "eslint \"src/**/*.{js,ts}\" --fix",
-    "prettier": "prettier . --write",
-    "format": "pnpm run prettier && pnpm run lint:fix",
-    "pretest": "pnpm run build:cjs && pnpm run build:esm && pnpm run type-check",
-    "type-check": "tsc --noEmit -p tsconfig.json",
-    "lint-staged": "npx lint-staged",
-    "check": "pnpm run format && pnpm run type-check && pnpm test",
-    "ci": "pnpm run lint && pnpm run type-check && pnpm test"
-  }
-}
+  ]
+}