@lateos/npm-scan 0.18.1 → 0.18.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/.dockerignore +20 -20
  2. package/.husky/pre-commit +1 -1
  3. package/CHANGELOG.md +233 -199
  4. package/LICENSING.md +19 -19
  5. package/README.de.md +708 -708
  6. package/README.fr.md +707 -707
  7. package/README.ja.md +704 -704
  8. package/README.md +826 -826
  9. package/README.zh.md +708 -708
  10. package/SECURITY.md +72 -72
  11. package/backend/cra.js +68 -68
  12. package/backend/db/schema.sql +32 -32
  13. package/backend/db.js +88 -88
  14. package/backend/detectors/atk-001-lifecycle.js +17 -17
  15. package/backend/detectors/atk-002-obfusc.js +261 -261
  16. package/backend/detectors/atk-003-creds.js +13 -13
  17. package/backend/detectors/atk-004-persist.js +13 -13
  18. package/backend/detectors/atk-005-exfil.js +13 -13
  19. package/backend/detectors/atk-006-depconf.js +14 -14
  20. package/backend/detectors/atk-007-typosquat.js +34 -34
  21. package/backend/detectors/atk-008-tarball-tamper.js +91 -91
  22. package/backend/detectors/atk-009-dormant-trigger.js +62 -62
  23. package/backend/detectors/atk-010-sandbox-evasion.js +50 -50
  24. package/backend/detectors/atk-011-transitive-prop.js +76 -76
  25. package/backend/detectors/cve-2026-48710-badhost/codePattern.js +99 -99
  26. package/backend/detectors/cve-2026-48710-badhost/findings.js +105 -105
  27. package/backend/detectors/cve-2026-48710-badhost/index.js +15 -15
  28. package/backend/detectors/cve-2026-48710-badhost/manifest.js +305 -305
  29. package/backend/detectors/cve-2026-48710-badhost/transitive.js +189 -189
  30. package/backend/detectors/hf-impersonation/index.js +396 -396
  31. package/backend/detectors/hf-impersonation/jaro-winkler.js +44 -44
  32. package/backend/detectors/hf-impersonation/known-orgs.js +5 -5
  33. package/backend/detectors/hf-impersonation/simhash.js +46 -46
  34. package/backend/detectors/index.js +81 -75
  35. package/backend/detectors/megalodon/d1-workflow-scan.js +147 -147
  36. package/backend/detectors/megalodon/d2-credential-harvest.js +61 -61
  37. package/backend/detectors/megalodon/d3-publish-velocity.js +67 -67
  38. package/backend/detectors/megalodon/d4-publisher-drift.js +124 -124
  39. package/backend/detectors/megalodon/d5-bot-commit-identity.js +3 -3
  40. package/backend/detectors/megalodon/d6-date-anachronism.js +3 -3
  41. package/backend/detectors/megalodon/index.js +80 -80
  42. package/backend/detectors/megalodon/types.js +9 -9
  43. package/backend/detectors/mini-shai-hulud/d1-burst-publish.js +42 -42
  44. package/backend/detectors/mini-shai-hulud/d2-sibling-compromise.js +116 -116
  45. package/backend/detectors/mini-shai-hulud/d3-slsa-mismatch.js +72 -72
  46. package/backend/detectors/mini-shai-hulud/d4-maintainer-anomaly.js +45 -45
  47. package/backend/detectors/mini-shai-hulud/d5-ioc-check.js +95 -95
  48. package/backend/detectors/mini-shai-hulud/d6-token-exfil.js +38 -38
  49. package/backend/detectors/mini-shai-hulud/index.js +118 -118
  50. package/backend/detectors/mini-shai-hulud/iocs.json +79 -79
  51. package/backend/detectors/tier1-cloud-imds.js +124 -0
  52. package/backend/detectors/tier1-infostealer.js +36 -0
  53. package/backend/detectors/tier1-multistage-postinstall.js +81 -0
  54. package/backend/detectors/tier1-version-confusion.js +107 -0
  55. package/backend/fetch.js +175 -175
  56. package/backend/index.js +4 -4
  57. package/backend/license.js +89 -89
  58. package/backend/lockfile.js +379 -379
  59. package/backend/pdf.js +245 -245
  60. package/backend/policy.js +193 -193
  61. package/backend/report.js +254 -254
  62. package/backend/sbom.js +66 -66
  63. package/backend/siem/cef.js +32 -32
  64. package/backend/siem/ecs.js +40 -40
  65. package/backend/siem/index.js +18 -18
  66. package/backend/siem/qradar.js +56 -56
  67. package/backend/siem/sentinel.js +27 -27
  68. package/backend/vsix-scan/detectors/activation-event-risk.js +116 -116
  69. package/backend/vsix-scan/detectors/burst-publish.js +52 -52
  70. package/backend/vsix-scan/detectors/exfil-pattern.js +88 -88
  71. package/backend/vsix-scan/detectors/known-ioc.js +105 -105
  72. package/backend/vsix-scan/detectors/orphan-commit-fetch.js +69 -69
  73. package/backend/vsix-scan/detectors/publisher-anomaly.js +70 -70
  74. package/backend/vsix-scan/index.js +183 -183
  75. package/backend/vsix-scan/marketplace-client.js +145 -145
  76. package/backend/vsix-scan/vsix-iocs.json +31 -31
  77. package/cli/cli.js +458 -458
  78. package/deploy/helm/npm-scan/Chart.yaml +21 -21
  79. package/deploy/helm/npm-scan/templates/_helpers.tpl +8 -8
  80. package/deploy/helm/npm-scan/templates/api.yaml +93 -93
  81. package/deploy/helm/npm-scan/templates/ingress.yaml +27 -27
  82. package/deploy/helm/npm-scan/templates/postgresql.yaml +66 -66
  83. package/deploy/helm/npm-scan/templates/secrets.yaml +18 -18
  84. package/deploy/helm/npm-scan/templates/worker.yaml +31 -31
  85. package/deploy/helm/npm-scan/values.byoc.yaml +74 -74
  86. package/deploy/helm/npm-scan/values.yaml +102 -102
  87. package/package.json +57 -57
  88. package/scripts/download-corpus.js +30 -30
  89. package/scripts/gen-mal-corpus.js +34 -34
  90. package/test/fixtures/lockfiles/npm-lock.json +68 -68
  91. package/test/fixtures/lockfiles/pnpm-lock.yaml +117 -117
  92. package/test/fixtures/lockfiles/yarn.lock +103 -103
  93. package/test/fixtures/mock-data.js +69 -69
@@ -1,69 +1,69 @@
1
- {
2
- "name": "test-project",
3
- "version": "1.0.0",
4
- "lockfileVersion": 3,
5
- "packages": {
6
- "": {
7
- "name": "test-project",
8
- "version": "1.0.0",
9
- "dependencies": {
10
- "lodash": "^4.17.21",
11
- "axios": "^1.6.0"
12
- },
13
- "devDependencies": {
14
- "@babel/core": "^7.23.0"
15
- }
16
- },
17
- "node_modules/lodash": {
18
- "name": "lodash",
19
- "version": "4.17.21",
20
- "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
21
- "integrity": "sha512-v2kDEeDAnj4p1hhL6Ogrgu4BSWwg8cD2fRIouDAiqwu+iNl1IvyMex9jG9j8OpNp1zntnv/headququbit",
22
- "dependencies": {}
23
- },
24
- "node_modules/axios": {
25
- "name": "axios",
26
- "version": "1.6.8",
27
- "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.8.tgz",
28
- "integrity": "sha512-j2xvyqwsdd456789abcdef",
29
- "dependencies": {
30
- "form-data": "4.0.0",
31
- "proxy-from-env": "1.1.0"
32
- }
33
- },
34
- "node_modules/axios/node_modules/form-data": {
35
- "version": "4.0.0",
36
- "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz",
37
- "integrity": "sha512-444567890123456"
38
- },
39
- "node_modules/@babel/core": {
40
- "name": "@babel/core",
41
- "version": "7.23.9",
42
- "resolved": "https://registry.yarnpkg.com/@babel/core/-/core-7.23.9.tgz",
43
- "integrity": "sha512-5q+M1iEJCOrGJs9NxzG3p3z7w2cJK/QuoRoI2pOJhtcNQjl9y7w6w4At5ZQHZdwqd+5N5G1lULu7I6pXVBw==",
44
- "dev": true,
45
- "dependencies": {
46
- "@babel/generator": "^7.23.6",
47
- "@babel/parser": "^7.23.9"
48
- }
49
- },
50
- "node_modules/reakt": {
51
- "name": "reakt",
52
- "version": "18.2.0",
53
- "resolved": "https://registry.yarnpkg.com/reakt/-/reakt-18.2.0.tgz",
54
- "integrity": "sha-abcdabcd1234defghi",
55
- "optional": true,
56
- "dependencies": {}
57
- },
58
- "node_modules/express": {
59
- "name": "express",
60
- "version": "4.18.2",
61
- "resolved": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
62
- "integrity": "sha512-abcdabcd1234abcdefghi",
63
- "dependencies": {
64
- "accepts": "~1.3.8",
65
- "body-parser": "1.20.2"
66
- }
67
- }
68
- }
1
+ {
2
+ "name": "test-project",
3
+ "version": "1.0.0",
4
+ "lockfileVersion": 3,
5
+ "packages": {
6
+ "": {
7
+ "name": "test-project",
8
+ "version": "1.0.0",
9
+ "dependencies": {
10
+ "lodash": "^4.17.21",
11
+ "axios": "^1.6.0"
12
+ },
13
+ "devDependencies": {
14
+ "@babel/core": "^7.23.0"
15
+ }
16
+ },
17
+ "node_modules/lodash": {
18
+ "name": "lodash",
19
+ "version": "4.17.21",
20
+ "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
21
+ "integrity": "sha512-v2kDEeDAnj4p1hhL6Ogrgu4BSWwg8cD2fRIouDAiqwu+iNl1IvyMex9jG9j8OpNp1zntnv/headququbit",
22
+ "dependencies": {}
23
+ },
24
+ "node_modules/axios": {
25
+ "name": "axios",
26
+ "version": "1.6.8",
27
+ "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.8.tgz",
28
+ "integrity": "sha512-j2xvyqwsdd456789abcdef",
29
+ "dependencies": {
30
+ "form-data": "4.0.0",
31
+ "proxy-from-env": "1.1.0"
32
+ }
33
+ },
34
+ "node_modules/axios/node_modules/form-data": {
35
+ "version": "4.0.0",
36
+ "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz",
37
+ "integrity": "sha512-444567890123456"
38
+ },
39
+ "node_modules/@babel/core": {
40
+ "name": "@babel/core",
41
+ "version": "7.23.9",
42
+ "resolved": "https://registry.yarnpkg.com/@babel/core/-/core-7.23.9.tgz",
43
+ "integrity": "sha512-5q+M1iEJCOrGJs9NxzG3p3z7w2cJK/QuoRoI2pOJhtcNQjl9y7w6w4At5ZQHZdwqd+5N5G1lULu7I6pXVBw==",
44
+ "dev": true,
45
+ "dependencies": {
46
+ "@babel/generator": "^7.23.6",
47
+ "@babel/parser": "^7.23.9"
48
+ }
49
+ },
50
+ "node_modules/reakt": {
51
+ "name": "reakt",
52
+ "version": "18.2.0",
53
+ "resolved": "https://registry.yarnpkg.com/reakt/-/reakt-18.2.0.tgz",
54
+ "integrity": "sha-abcdabcd1234defghi",
55
+ "optional": true,
56
+ "dependencies": {}
57
+ },
58
+ "node_modules/express": {
59
+ "name": "express",
60
+ "version": "4.18.2",
61
+ "resolved": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
62
+ "integrity": "sha512-abcdabcd1234abcdefghi",
63
+ "dependencies": {
64
+ "accepts": "~1.3.8",
65
+ "body-parser": "1.20.2"
66
+ }
67
+ }
68
+ }
69
69
  }
@@ -1,118 +1,118 @@
1
- lockfileVersion: "6.0"
2
-
3
- importers:
4
- .:
5
- dependencies:
6
- lodash: "^4.17.21"
7
- axios: "^1.6.0"
8
- devDependencies:
9
- "@babel/core": "^7.23.0"
10
- optionalDependencies:
11
- chalk: "^5.3.0"
12
- peerDependencies:
13
- react: ">=16"
14
-
15
- packages:
16
- "/lodash@4.17.21":
17
- resolution:
18
- url: "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
19
- sha512: X2xvyqwsdd456789abcdefghijk
20
- dev: false
21
- optional: false
22
- dependencies: {}
23
-
24
- "/axios@1.6.8":
25
- resolution:
26
- url: "https://registry.npmjs.org/axios/-/axios-1.6.8.tgz"
27
- sha512: j2xvyqwsdd456789abcdef
28
- dev: false
29
- optional: false
30
- dependencies:
31
- form-data: "4.0.0"
32
- proxy-from-env: "1.1.0"
33
-
34
- "/reakt@18.2.0":
35
- resolution:
36
- url: "https://registry.yarnpkg.com/reakt/-/reakt-18.2.0.tgz"
37
- sha512: abcdefghijk123456789
38
- dev: false
39
- optional: true
40
- dependencies: []
41
-
42
- "/@babel/core@7.23.9":
43
- resolution:
44
- url: "https://registry.yarnpkg.com/@babel/core/-/core-7.23.9.tgz"
45
- sha512: k2yVyqwsdd456789abcdefghij
46
- dev: true
47
- optional: false
48
- dependencies:
49
- "@babel/generator": "7.23.6"
50
- "@babel/parser": "7.23.9"
51
- "@babel/traverse": "7.23.9"
52
- "@babel/types": "7.23.9"
53
- convert-source-map: "2.0.0"
54
- debug: "4.1.0"
55
- gensync: "1.0.0-beta.2"
56
- json5: "2.2.3"
57
- semver: "6.3.1"
58
-
59
- "/@babel/generator@7.23.6":
60
- resolution:
61
- url: "https://registry.yarnpkg.com/@babel/generator/-/generator-7.23.6.tgz"
62
- sha512: abcdefghijk12345678abcdef
63
- dev: false
64
- optional: false
65
- dependencies:
66
- "@babel/types": "7.23.6"
67
- "@jridgewell/gen-mapping": "0.3.2"
68
- "@jridgewell/trace-mapping": "0.3.17"
69
- jsesc: "2.5.1"
70
-
71
- "/expres@4.18.2":
72
- resolution:
73
- url: "https://registry.npmjs.org/expres-4.18.2.tgz"
74
- sha512: abcdefghijk12345678
75
- dev: false
76
- optional: false
77
- dependencies:
78
- accepts: "1.3.8"
79
- array-flatten: "1.1.1"
80
- body-parser: "1.20.2"
81
- content-disposition: "0.5.4"
82
- content-type: "1.0.5"
83
- cookie: "0.5.0"
84
- cookie-signature: "1.0.6"
85
- debug: "2.6.9"
86
- depd: "2.0.0"
87
- encodeurl: "1.0.2"
88
- escape-html: "1.0.3"
89
- etag: "1.8.1"
90
- finalhandler: "1.2.0"
91
- fresh: "0.5.2"
92
- http-errors: "2.0.0"
93
- merge-descriptors: "1.0.1"
94
- methods: "1.1.2"
95
- on-finished: "2.4.1"
96
- parseurl: "1.3.3"
97
- path-to-regexp: "0.1.7"
98
- proxy-addr: "2.0.7"
99
- qs: "6.11.0"
100
- range-parser: "1.2.1"
101
- safe-buffer: "5.2.1"
102
- send: "0.18.0"
103
- serve-static: "1.15.0"
104
- setprototypeof: "1.2.0"
105
- statuses: "2.0.1"
106
- type-is: "1.6.18"
107
- utils-merge: "1.0.1"
108
- vary: "1.1.2"
109
-
110
- "/my-scope-plugin@1.0.0":
111
- resolution:
112
- url: "https://registry.npmjs.org/my-scope-plugin/-/my-scope-plugin-1.0.0.tgz"
113
- sha512: defghijk123456789abcdef
114
- dev: false
115
- optional: false
116
- dependencies:
117
- lodash: "4.17.21"
1
+ lockfileVersion: "6.0"
2
+
3
+ importers:
4
+ .:
5
+ dependencies:
6
+ lodash: "^4.17.21"
7
+ axios: "^1.6.0"
8
+ devDependencies:
9
+ "@babel/core": "^7.23.0"
10
+ optionalDependencies:
11
+ chalk: "^5.3.0"
12
+ peerDependencies:
13
+ react: ">=16"
14
+
15
+ packages:
16
+ "/lodash@4.17.21":
17
+ resolution:
18
+ url: "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
19
+ sha512: X2xvyqwsdd456789abcdefghijk
20
+ dev: false
21
+ optional: false
22
+ dependencies: {}
23
+
24
+ "/axios@1.6.8":
25
+ resolution:
26
+ url: "https://registry.npmjs.org/axios/-/axios-1.6.8.tgz"
27
+ sha512: j2xvyqwsdd456789abcdef
28
+ dev: false
29
+ optional: false
30
+ dependencies:
31
+ form-data: "4.0.0"
32
+ proxy-from-env: "1.1.0"
33
+
34
+ "/reakt@18.2.0":
35
+ resolution:
36
+ url: "https://registry.yarnpkg.com/reakt/-/reakt-18.2.0.tgz"
37
+ sha512: abcdefghijk123456789
38
+ dev: false
39
+ optional: true
40
+ dependencies: []
41
+
42
+ "/@babel/core@7.23.9":
43
+ resolution:
44
+ url: "https://registry.yarnpkg.com/@babel/core/-/core-7.23.9.tgz"
45
+ sha512: k2yVyqwsdd456789abcdefghij
46
+ dev: true
47
+ optional: false
48
+ dependencies:
49
+ "@babel/generator": "7.23.6"
50
+ "@babel/parser": "7.23.9"
51
+ "@babel/traverse": "7.23.9"
52
+ "@babel/types": "7.23.9"
53
+ convert-source-map: "2.0.0"
54
+ debug: "4.1.0"
55
+ gensync: "1.0.0-beta.2"
56
+ json5: "2.2.3"
57
+ semver: "6.3.1"
58
+
59
+ "/@babel/generator@7.23.6":
60
+ resolution:
61
+ url: "https://registry.yarnpkg.com/@babel/generator/-/generator-7.23.6.tgz"
62
+ sha512: abcdefghijk12345678abcdef
63
+ dev: false
64
+ optional: false
65
+ dependencies:
66
+ "@babel/types": "7.23.6"
67
+ "@jridgewell/gen-mapping": "0.3.2"
68
+ "@jridgewell/trace-mapping": "0.3.17"
69
+ jsesc: "2.5.1"
70
+
71
+ "/expres@4.18.2":
72
+ resolution:
73
+ url: "https://registry.npmjs.org/expres-4.18.2.tgz"
74
+ sha512: abcdefghijk12345678
75
+ dev: false
76
+ optional: false
77
+ dependencies:
78
+ accepts: "1.3.8"
79
+ array-flatten: "1.1.1"
80
+ body-parser: "1.20.2"
81
+ content-disposition: "0.5.4"
82
+ content-type: "1.0.5"
83
+ cookie: "0.5.0"
84
+ cookie-signature: "1.0.6"
85
+ debug: "2.6.9"
86
+ depd: "2.0.0"
87
+ encodeurl: "1.0.2"
88
+ escape-html: "1.0.3"
89
+ etag: "1.8.1"
90
+ finalhandler: "1.2.0"
91
+ fresh: "0.5.2"
92
+ http-errors: "2.0.0"
93
+ merge-descriptors: "1.0.1"
94
+ methods: "1.1.2"
95
+ on-finished: "2.4.1"
96
+ parseurl: "1.3.3"
97
+ path-to-regexp: "0.1.7"
98
+ proxy-addr: "2.0.7"
99
+ qs: "6.11.0"
100
+ range-parser: "1.2.1"
101
+ safe-buffer: "5.2.1"
102
+ send: "0.18.0"
103
+ serve-static: "1.15.0"
104
+ setprototypeof: "1.2.0"
105
+ statuses: "2.0.1"
106
+ type-is: "1.6.18"
107
+ utils-merge: "1.0.1"
108
+ vary: "1.1.2"
109
+
110
+ "/my-scope-plugin@1.0.0":
111
+ resolution:
112
+ url: "https://registry.npmjs.org/my-scope-plugin/-/my-scope-plugin-1.0.0.tgz"
113
+ sha512: defghijk123456789abcdef
114
+ dev: false
115
+ optional: false
116
+ dependencies:
117
+ lodash: "4.17.21"
118
118
  axios: "1.6.8"
@@ -1,104 +1,104 @@
1
- lodash@^4.17.21:
2
- version "4.17.21"
3
- resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz"
4
- integrity sha512-Vythumb
5
- dependencies: {}
6
- dev false
7
- optional true
8
-
9
- axios@^1.6.0:
10
- version "1.6.8"
11
- resolved "https://registry.yarnpkg.com/axios/-/axios-1.6.8.tgz"
12
- integrity sha-j2xvyqwsdd456789abcdef
13
- dependencies:
14
- form-data "4.0.0"
15
- proxy-from-env "1.1.0"
16
- dev false
17
- optional false
18
-
19
- "@babel/core@^7.23.0", "@babel/core@^7.23.9":
20
- version "7.23.9"
21
- resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.23.9.tgz"
22
- integrity sha512-5q+M1iEJCOrGJs9NxzG3p3z7w2cJK/QuoRoI2pOJhtcNQjl9y7w6w4At5ZQHZdwqd+5N5G1lULu7I6pXVBw==
23
- dependencies:
24
- "@babel/generator" "^7.23.6"
25
- "@babel/parser" "^7.23.9"
26
- "@babel/traverse" "^7.23.9"
27
- "@babel/types" "^7.23.9"
28
- convert-source-map "^2.0.0"
29
- debug "^4.1.0"
30
- gensync "^1.0.0-beta.2"
31
- json5 "^2.2.3"
32
- semver "^6.3.1"
33
- rimraf "^3.0.2"
34
- dev true
35
- optional false
36
-
37
- "@babel/generator@^7.23.6", "@babel/generator@^7.23.9":
38
- version "7.23.6"
39
- resolved "https://registry.yarnpkg.com/@babel/generator/-/generator-7.23.6.tgz"
40
- integrity sha512-56bfx9G1AJAFDl5QuK6t7MTCW3CBi7J8j+GxJJPvZ7L1f4P2FG8f9dBiH8Hg4U5Gcb6Bi4Y8DQ8x0j8b1QE8w==
41
- dependencies:
42
- "@babel/types" "^7.23.6"
43
- "@jridgewell/gen-mapping" "^0.3.2"
44
- "@jridgewell/trace-mapping" "^0.3.17"
45
- jsesc "^2.5.1"
46
- dev false
47
- optional false
48
-
49
- reakt@^18.2.0:
50
- version "18.2.0"
51
- resolved "https://registry.yarnpkg.com/reakt/-/reakt-18.2.0.tgz"
52
- integrity sha512-abcdabcd1234defghi
53
- dependencies: []
54
- dev false
55
- optional true
56
-
57
- express@npm:expres@^4.18.2:
58
- version "4.18.2"
59
- resolved "https://registry.npmjs.org/expres-4.18.2.tgz"
60
- integrity sha512-abcdabcd1234abcdefghi
61
- dependencies:
62
- accepts "~1.3.8"
63
- array-flatten "1.1.1"
64
- body-parser "1.20.2"
65
- content-disposition "0.5.4"
66
- content-type "~1.0.5"
67
- cookie "0.5.0"
68
- cookie-signature "1.0.6"
69
- debug "2.6.9"
70
- depd "2.0.0"
71
- encodeurl "~1.0.2"
72
- escape-html "~1.0.3"
73
- etag "~1.8.1"
74
- finalhandler "1.2.0"
75
- fresh "0.5.2"
76
- http-errors "2.0.0"
77
- merge-descriptors "1.0.1"
78
- methods "~1.1.2"
79
- on-finished "2.4.1"
80
- parseurl "~1.3.3"
81
- path-to-regexp "0.1.7"
82
- proxy-addr "~2.0.7"
83
- qs "6.11.0"
84
- range-parser "~1.2.1"
85
- safe-buffer "5.2.1"
86
- send "0.18.0"
87
- serve-static "1.15.0"
88
- setprototypeof "1.2.0"
89
- statuses "2.0.1"
90
- type-is "~1.6.18"
91
- utils-merge "1.0.1"
92
- vary "~1.1.2"
93
- dev false
94
- optional false
95
-
96
- "my-scope-plugin@npm:my-scope-plugin@^1.0.0":
97
- version "1.0.0"
98
- resolved "https://registry.npmjs.org/my-scope-plugin-1.0.0.tgz"
99
- integrity sha512-abcdefghijk123456789abcdef
100
- dependencies:
101
- lodash "^4.17.21"
102
- axios "^1.6.0"
103
- dev false
1
+ lodash@^4.17.21:
2
+ version "4.17.21"
3
+ resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz"
4
+ integrity sha512-Vythumb
5
+ dependencies: {}
6
+ dev false
7
+ optional true
8
+
9
+ axios@^1.6.0:
10
+ version "1.6.8"
11
+ resolved "https://registry.yarnpkg.com/axios/-/axios-1.6.8.tgz"
12
+ integrity sha-j2xvyqwsdd456789abcdef
13
+ dependencies:
14
+ form-data "4.0.0"
15
+ proxy-from-env "1.1.0"
16
+ dev false
17
+ optional false
18
+
19
+ "@babel/core@^7.23.0", "@babel/core@^7.23.9":
20
+ version "7.23.9"
21
+ resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.23.9.tgz"
22
+ integrity sha512-5q+M1iEJCOrGJs9NxzG3p3z7w2cJK/QuoRoI2pOJhtcNQjl9y7w6w4At5ZQHZdwqd+5N5G1lULu7I6pXVBw==
23
+ dependencies:
24
+ "@babel/generator" "^7.23.6"
25
+ "@babel/parser" "^7.23.9"
26
+ "@babel/traverse" "^7.23.9"
27
+ "@babel/types" "^7.23.9"
28
+ convert-source-map "^2.0.0"
29
+ debug "^4.1.0"
30
+ gensync "^1.0.0-beta.2"
31
+ json5 "^2.2.3"
32
+ semver "^6.3.1"
33
+ rimraf "^3.0.2"
34
+ dev true
35
+ optional false
36
+
37
+ "@babel/generator@^7.23.6", "@babel/generator@^7.23.9":
38
+ version "7.23.6"
39
+ resolved "https://registry.yarnpkg.com/@babel/generator/-/generator-7.23.6.tgz"
40
+ integrity sha512-56bfx9G1AJAFDl5QuK6t7MTCW3CBi7J8j+GxJJPvZ7L1f4P2FG8f9dBiH8Hg4U5Gcb6Bi4Y8DQ8x0j8b1QE8w==
41
+ dependencies:
42
+ "@babel/types" "^7.23.6"
43
+ "@jridgewell/gen-mapping" "^0.3.2"
44
+ "@jridgewell/trace-mapping" "^0.3.17"
45
+ jsesc "^2.5.1"
46
+ dev false
47
+ optional false
48
+
49
+ reakt@^18.2.0:
50
+ version "18.2.0"
51
+ resolved "https://registry.yarnpkg.com/reakt/-/reakt-18.2.0.tgz"
52
+ integrity sha512-abcdabcd1234defghi
53
+ dependencies: []
54
+ dev false
55
+ optional true
56
+
57
+ express@npm:expres@^4.18.2:
58
+ version "4.18.2"
59
+ resolved "https://registry.npmjs.org/expres-4.18.2.tgz"
60
+ integrity sha512-abcdabcd1234abcdefghi
61
+ dependencies:
62
+ accepts "~1.3.8"
63
+ array-flatten "1.1.1"
64
+ body-parser "1.20.2"
65
+ content-disposition "0.5.4"
66
+ content-type "~1.0.5"
67
+ cookie "0.5.0"
68
+ cookie-signature "1.0.6"
69
+ debug "2.6.9"
70
+ depd "2.0.0"
71
+ encodeurl "~1.0.2"
72
+ escape-html "~1.0.3"
73
+ etag "~1.8.1"
74
+ finalhandler "1.2.0"
75
+ fresh "0.5.2"
76
+ http-errors "2.0.0"
77
+ merge-descriptors "1.0.1"
78
+ methods "~1.1.2"
79
+ on-finished "2.4.1"
80
+ parseurl "~1.3.3"
81
+ path-to-regexp "0.1.7"
82
+ proxy-addr "~2.0.7"
83
+ qs "6.11.0"
84
+ range-parser "~1.2.1"
85
+ safe-buffer "5.2.1"
86
+ send "0.18.0"
87
+ serve-static "1.15.0"
88
+ setprototypeof "1.2.0"
89
+ statuses "2.0.1"
90
+ type-is "~1.6.18"
91
+ utils-merge "1.0.1"
92
+ vary "~1.1.2"
93
+ dev false
94
+ optional false
95
+
96
+ "my-scope-plugin@npm:my-scope-plugin@^1.0.0":
97
+ version "1.0.0"
98
+ resolved "https://registry.npmjs.org/my-scope-plugin-1.0.0.tgz"
99
+ integrity sha512-abcdefghijk123456789abcdef
100
+ dependencies:
101
+ lodash "^4.17.21"
102
+ axios "^1.6.0"
103
+ dev false
104
104
  optional false