@mavogel/awscdk-rootmail 0.1.23 → 0.1.25

package/node_modules/libqp/lib/libqp.js

@@ -1,385 +1,6 @@
-/* eslint no-useless-escape: 0 */
-
 'use strict';
 
-const { Buffer } = require('node:buffer');
-const stream = require('node:stream');
-const Transform = stream.Transform;
-
-/**
- * Encodes a Buffer into a Quoted-Printable encoded string
- *
- * @param {Buffer} buffer Buffer to convert
- * @returns {String} Quoted-Printable encoded string
- */
-function encode(buffer) {
-    if (typeof buffer === 'string') {
-        buffer = Buffer.from(buffer, 'utf-8');
-    }
-
-    return encodeBytes(buffer, true);
-}
-
-/**
- * Encodes the bytes of a Buffer. The Encoder stream feeds it one chunk at a time, so it has
- * to be told whether the first byte starts an output line, which a plain encode() call always does
- *
- * @param {Buffer} buffer Buffer to convert
- * @param {Boolean} lineStart True if the first byte starts a line
- * @returns {String} Quoted-Printable encoded string
- */
-function encodeBytes(buffer, lineStart) {
-    // usable characters that do not need encoding
-    let ranges = [
-        // https://tools.ietf.org/html/rfc2045#section-6.7
-        [0x09], // <TAB>
-        [0x0a], // <LF>
-        [0x0d], // <CR>
-        [0x20, 0x3c], // <SP>!"#$%&'()*+,-./0123456789:;
-        [0x3e, 0x7e] // >?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}
-    ];
-    let result = '';
-    let ord;
-
-    for (let i = 0, len = buffer.length; i < len; i++) {
-        ord = buffer[i];
-        // if the char is in allowed range, then keep as is, unless it is a ws in the end of a line
-        // or a hyphen in the start of a line. A line starting with two hyphens reads as a MIME
-        // boundary delimiter, so a decoded body that gets encoded again could inject a part
-        if (
-            checkRanges(ord, ranges) &&
-            !((ord === 0x20 || ord === 0x09) && (i === len - 1 || buffer[i + 1] === 0x0a || buffer[i + 1] === 0x0d)) &&
-            !(ord === 0x2d && (i === 0 ? lineStart : buffer[i - 1] === 0x0a))
-        ) {
-            result += String.fromCharCode(ord);
-            continue;
-        }
-        result += '=' + (ord < 0x10 ? '0' : '') + ord.toString(16).toUpperCase();
-    }
-
-    return result;
-}
-
-/**
- * Decodes a Quoted-Printable encoded string to a Buffer object
- *
- * @param {String|Buffer} str Quoted-Printable encoded string. A Buffer is read byte for byte,
- *        so raw 8-bit bytes in the input are copied to the output unchanged
- * @returns {Buffer} Decoded value
- */
-function decode(str) {
-    // 'binary' maps every byte to one char code 0-255. A UTF-8 read would collapse raw
-    // multi-byte chars into one byte below and turn raw latin1 bytes into U+FFFD
-    str = (Buffer.isBuffer(str) ? str.toString('binary') : (str || '').toString())
-        // remove invalid whitespace from the end of lines. The leading group keeps this linear,
-        // a plain /[\t ]+$/gm rescans the rest of a whitespace run from every position inside it,
-        // which is quadratic. The lookahead lists the line terminators multiline $ matches before
-        .replace(/(^|[^ \t])[ \t]+(?=[\n\r\u2028\u2029]|$)/g, '$1')
-        // remove soft line breaks
-        .replace(/\=(?:\r?\n|$)/g, '');
-
-    // every =XX escape decodes into one byte, so count them to size the output.
-    // Counted with a loop, a match() would build an array with a string for every escape
-    let len = str.length;
-    let encodedBytesCount = 0;
-    for (let i = str.indexOf('='); i >= 0 && i < len - 2; i = str.indexOf('=', i + 1)) {
-        if (hexValue(str.charCodeAt(i + 1)) >= 0 && hexValue(str.charCodeAt(i + 2)) >= 0) {
-            encodedBytesCount++;
-            i += 2;
-        }
-    }
-
-    let buffer = Buffer.alloc(len - encodedBytesCount * 2);
-    let bufferPos = 0;
-
-    for (let i = 0; i < len; i++) {
-        let code = str.charCodeAt(i);
-        if (code === 0x3d /* = */ && i < len - 2) {
-            let hi = hexValue(str.charCodeAt(i + 1));
-            let lo = hexValue(str.charCodeAt(i + 2));
-            if (hi >= 0 && lo >= 0) {
-                buffer[bufferPos++] = hi * 16 + lo;
-                i += 2;
-                continue;
-            }
-        }
-        buffer[bufferPos++] = code;
-    }
-
-    return buffer;
-}
-
-/**
- * Helper function to read the value of a hex digit
- *
- * @param {Number} code Char code
- * @returns {Number} 0-15, or -1 if the char is not a hex digit
- */
-function hexValue(code) {
-    if (code >= 0x30 && code <= 0x39) {
-        return code - 0x30; // 0-9
-    }
-    if (code >= 0x41 && code <= 0x46) {
-        return code - 0x41 + 10; // A-F
-    }
-    if (code >= 0x61 && code <= 0x66) {
-        return code - 0x61 + 10; // a-f
-    }
-    return -1;
-}
-
-/**
- * Adds soft line breaks to a Quoted-Printable string
- *
- * @param {String} str Quoted-Printable encoded string that might need line wrapping
- * @param {Number} [lineLength=76] Maximum allowed length for a line
- * @returns {String} Soft-wrapped Quoted-Printable encoded string
- */
-function wrap(str, lineLength) {
-    str = (str || '').toString();
-    lineLength = lineLength || 76;
-
-    if (str.length <= lineLength) {
-        return str;
-    }
-
-    let pos = 0,
-        len = str.length,
-        match,
-        code,
-        line,
-        maxLength,
-        afterSoftBreak = false,
-        lineMargin = Math.floor(lineLength / 3),
-        result = '';
-
-    // insert soft linebreaks where needed
-    while (pos < len) {
-        maxLength = lineLength;
-
-        if (afterSoftBreak) {
-            afterSoftBreak = false;
-            // a line started by a soft break must not begin with a hyphen either, see encode().
-            // The escape takes the room of three characters off this line
-            if (str.charAt(pos) === '-') {
-                result += '=2D';
-                pos++;
-                maxLength -= 3;
-            }
-        }
-
-        line = str.substr(pos, maxLength);
-        if ((match = line.match(/\r\n/))) {
-            line = line.substr(0, match.index + match[0].length);
-            result += line;
-            pos += line.length;
-            continue;
-        }
-
-        if (line.substr(-1) === '\n') {
-            // nothing to change here
-            result += line;
-            pos += line.length;
-            continue;
-        } else if ((match = line.substr(-lineMargin).match(/\n.*?$/))) {
-            // truncate to nearest line break
-            line = line.substr(0, line.length - (match[0].length - 1));
-            result += line;
-            pos += line.length;
-            continue;
-        } else if (line.length > maxLength - lineMargin && (match = line.substr(-lineMargin).match(/[ \t\.,!\?][^ \t\.,!\?]*$/))) {
-            // truncate to nearest space
-            line = line.substr(0, line.length - (match[0].length - 1));
-        } else if (line.match(/\=[\da-f]{0,2}$/i)) {
-            // push incomplete encoding sequences to the next line
-            if ((match = line.match(/\=[\da-f]{0,1}$/i))) {
-                line = line.substr(0, line.length - match[0].length);
-            }
-
-            // ensure that utf-8 sequences are not split
-            while (line.length > 3 && line.length < len - pos && !line.match(/^(?:=[\da-f]{2}){1,4}$/i) && (match = line.match(/\=[\da-f]{2}$/gi))) {
-                code = parseInt(match[0].substr(1, 2), 16);
-                if (code < 128) {
-                    break;
-                }
-
-                line = line.substr(0, line.length - 3);
-
-                if (code >= 0xc0) {
-                    break;
-                }
-            }
-        }
-
-        if (pos + line.length < len && line.substr(-1) !== '\n') {
-            if (line.length === maxLength && line.match(/\=[\da-f]{2}$/i)) {
-                line = line.substr(0, line.length - 3);
-            } else if (line.length === maxLength) {
-                line = line.substr(0, line.length - 1);
-            }
-            pos += line.length;
-            line += '=\r\n';
-            afterSoftBreak = true;
-        } else {
-            pos += line.length;
-        }
-
-        result += line;
-    }
-
-    return result;
-}
-
-/**
- * Helper function to check if a number is inside provided ranges
- *
- * @param {Number} nr Number to check for
- * @param {Array} ranges An Array of allowed values
- * @returns {Boolean} True if the value was found inside allowed ranges, false otherwise
- */
-function checkRanges(nr, ranges) {
-    for (let i = ranges.length - 1; i >= 0; i--) {
-        if (!ranges[i].length) {
-            continue;
-        }
-        if (ranges[i].length === 1 && nr === ranges[i][0]) {
-            return true;
-        }
-        if (ranges[i].length === 2 && nr >= ranges[i][0] && nr <= ranges[i][1]) {
-            return true;
-        }
-    }
-    return false;
-}
-
-/**
- * Creates a transform stream for encoding data to Quoted-Printable encoding
- *
- * @constructor
- * @param {Object} options Stream options
- * @param {Number} [options.lineLength=76] Maximum lenght for lines, set to false to disable wrapping
- */
-class Encoder extends Transform {
-    constructor(options) {
-        super();
-
-        // init Transform
-        this.options = options || {};
-
-        if (this.options.lineLength !== false) {
-            this.options.lineLength = this.options.lineLength || 76;
-        }
-
-        this._curLine = '';
-        // true until a chunk that does not end with a line break has been encoded
-        this._lineStart = true;
-
-        this.inputBytes = 0;
-        this.outputBytes = 0;
-
-        Transform.call(this, this.options);
-    }
-
-    _transform(chunk, encoding, done) {
-        let qp;
-
-        if (encoding !== 'buffer') {
-            chunk = Buffer.from(chunk, encoding);
-        }
-
-        if (!chunk || !chunk.length) {
-            return done();
-        }
-
-        this.inputBytes += chunk.length;
-
-        let lineStart = this._lineStart;
-        this._lineStart = chunk[chunk.length - 1] === 0x0a;
-
-        if (this.options.lineLength) {
-            qp = this._curLine + encodeBytes(chunk, lineStart);
-            qp = wrap(qp, this.options.lineLength);
-            qp = qp.replace(/(^|\n)([^\n]*)$/, (match, lineBreak, lastLine) => {
-                this._curLine = lastLine;
-                return lineBreak;
-            });
-
-            if (qp) {
-                this.outputBytes += qp.length;
-                this.push(qp);
-            }
-        } else {
-            qp = encodeBytes(chunk, lineStart);
-            this.outputBytes += qp.length;
-            this.push(qp, 'ascii');
-        }
-
-        done();
-    }
-
-    _flush(done) {
-        if (this._curLine) {
-            this.outputBytes += this._curLine.length;
-            this.push(this._curLine, 'ascii');
-        }
-        done();
-    }
-}
-
-/**
- * Creates a transform stream for decoding Quoted-Printable encoded strings
- * The input is not actually processed as a stream but concatted and processed as a single input
- *
- * @constructor
- * @param {Object} options Stream options
- */
-class Decoder extends Transform {
-    constructor(options) {
-        options = options || {};
-        super(options);
-
-        // init Transform
-        this.options = options;
-        this._curLine = '';
-
-        this.inputBytes = 0;
-        this.outputBytes = 0;
-
-        this.qpChunks = [];
-    }
-
-    _transform(chunk, encoding, done) {
-        if (!chunk || !chunk.length) {
-            return done();
-        }
-
-        if (typeof chunk === 'string') {
-            chunk = Buffer.from(chunk, encoding);
-        }
-
-        // kept as a binary string, so joining the chunks is the only copy made before decoding
-        this.qpChunks.push(chunk.toString('binary'));
-        this.inputBytes += chunk.length;
-
-        done();
-    }
-
-    _flush(done) {
-        if (this.inputBytes) {
-            let buf = decode(this.qpChunks.join(''));
-            this.outputBytes += buf.length;
-            this.push(buf);
-        }
-
-        done();
-    }
-}
-
-// expose to the world
-module.exports = {
-    encode,
-    decode,
-    wrap,
-    Encoder,
-    Decoder
-};
+// The pre-TypeScript entry point. Node resolves `libqp/lib/libqp` through the exports map and
+// never loads this file, but resolvers that look for the path on disk and ignore the exports map
+// (webpack 4, browserify, and @yao/pkg, which warns about the import without it) still find it.
+module.exports = require('../dist/cjs/libqp.js');

package/node_modules/libqp/lib/package.json

@@ -0,0 +1,3 @@
+{
+    "type": "commonjs"
+}

package/node_modules/libqp/package.json

@@ -1,11 +1,55 @@
 {
     "name": "libqp",
-    "version": "2.1.3",
+    "version": "3.0.1",
     "description": "Encode and decode quoted-printable strings according to rfc2045",
-    "main": "lib/libqp.js",
+    "type": "module",
+    "main": "./dist/cjs/libqp.js",
+    "types": "./dist/cjs/libqp.d.ts",
+    "typesVersions": {
+        "*": {
+            "lib/*": [
+                "dist/cjs/*.d.ts"
+            ]
+        }
+    },
+    "exports": {
+        ".": {
+            "import": "./dist/esm/libqp.js",
+            "require": "./dist/cjs/libqp.js"
+        },
+        "./lib/libqp.js": {
+            "import": "./dist/esm/libqp.js",
+            "require": "./dist/cjs/libqp.js"
+        },
+        "./lib/libqp": {
+            "import": "./dist/esm/libqp.js",
+            "require": "./dist/cjs/libqp.js"
+        },
+        "./package.json": "./package.json"
+    },
+    "files": [
+        "dist",
+        "lib",
+        "CHANGELOG.md",
+        "SECURITY.md"
+    ],
     "scripts": {
-        "test": "node --test",
-        "update": "rm -rf node_modules package-lock.json && ncu -u && npm install"
+        "build": "node scripts/build.js",
+        "typecheck": "tsc -p tsconfig.json",
+        "pretest": "npm run build",
+        "test": "node --import tsx --test $(find test -name '*-test.ts')",
+        "pretest:coverage": "npm run build",
+        "test:coverage": "c8 node --import tsx --test $(find test -name '*-test.ts')",
+        "pretest:bun": "npm run build",
+        "test:bun": "bun test --timeout 60000 $(find ./test -name '*-test.ts')",
+        "format": "prettier --write \"**/*.{js,cjs,ts,json,md,yml,yaml}\"",
+        "format:check": "prettier --check \"**/*.{js,cjs,ts,json,md,yml,yaml}\"",
+        "lint": "npm run typecheck && eslint .",
+        "lint:fix": "eslint . --fix",
+        "prepare": "npm run build",
+        "update": "rm -rf node_modules package-lock.json && ncu -u && npm install",
+        "test:mutation": "node scripts/mutation-test.js",
+        "test:fuzz": "FUZZ_ITERATIONS=${FUZZ_ITERATIONS:-20000} FUZZ_SEED=${FUZZ_SEED:-random} node --import tsx --test test/property-test.ts test/legacy-test.ts"
     },
     "repository": {
         "type": "git",
@@ -22,7 +66,19 @@
     },
     "homepage": "https://github.com/nodemailer/libqp",
     "devDependencies": {
-        "eslint-config-nodemailer": "1.2.0",
-        "eslint-config-prettier": "10.1.8"
+        "@types/node": "20.19.43",
+        "c8": "12.0.0",
+        "eslint": "10.13.0",
+        "eslint-config-prettier": "10.1.8",
+        "fast-check": "4.10.2",
+        "globals": "17.13.0",
+        "libqp-legacy": "npm:libqp@2.1.3",
+        "prettier": "3.9.10",
+        "tsx": "4.23.15",
+        "typescript": "6.0.3",
+        "typescript-eslint": "8.71.2"
+    },
+    "engines": {
+        "node": ">=20.0.0"
     }
 }

package/node_modules/mailparser/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-    ".": "3.9.40"
+    ".": "3.9.46"
 }

package/node_modules/mailparser/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## [3.9.46](https://github.com/nodemailer/mailparser/compare/v3.9.45...v3.9.46) (2026-10-18)
+
+
+### Bug Fixes
+
+* bump libmime to 5.5.1, @zone-eu/mailsplit to 5.4.26 and nodemailer to 10.1.7 ([7279da5](https://github.com/nodemailer/mailparser/commit/7279da5c906cc7c155bdee16e6f10327d8e054ff))
+
+## [3.9.45](https://github.com/nodemailer/mailparser/compare/v3.9.44...v3.9.45) (2026-10-18)
+
+
+### Bug Fixes
+
+* bump nodemailer to 10.1.6 ([2815d34](https://github.com/nodemailer/mailparser/commit/2815d34e689c4b78b2e2633ae5e4b97fa7e24ebf))
+
+## [3.9.44](https://github.com/nodemailer/mailparser/compare/v3.9.43...v3.9.44) (2026-10-18)
+
+
+### Bug Fixes
+
+* bump nodemailer to 10.1.5 ([218b801](https://github.com/nodemailer/mailparser/commit/218b8014016eb79969788b92b8981f49c799a05e))
+
+## [3.9.43](https://github.com/nodemailer/mailparser/compare/v3.9.42...v3.9.43) (2026-10-18)
+
+
+### Bug Fixes
+
+* bump nodemailer to 10.1.4 ([3c68409](https://github.com/nodemailer/mailparser/commit/3c68409192cc34299ddc2479a1429ec218c1a4b9))
+
+## [3.9.42](https://github.com/nodemailer/mailparser/compare/v3.9.41...v3.9.42) (2026-10-18)
+
+
+### Bug Fixes
+
+* bump @zone-eu/mailsplit to 5.4.25 ([e4500fb](https://github.com/nodemailer/mailparser/commit/e4500fbd7cc5e0e0b1f070332bf797a5e331e5c7))
+
+## [3.9.41](https://github.com/nodemailer/mailparser/compare/v3.9.40...v3.9.41) (2026-10-18)
+
+
+### Bug Fixes
+
+* bump @zone-eu/mailsplit to 5.4.24 ([eb4b34b](https://github.com/nodemailer/mailparser/commit/eb4b34b04b18de974a3bd61c295d2abca1eb0d69))
+
 ## [3.9.40](https://github.com/nodemailer/mailparser/compare/v3.9.39...v3.9.40) (2026-10-16)
 
 

package/node_modules/mailparser/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mailparser",
-    "version": "3.9.40",
+    "version": "3.9.46",
     "description": "Parse e-mails",
     "main": "index.js",
     "scripts": {
@@ -18,14 +18,14 @@
     ],
     "license": "MIT",
     "dependencies": {
-        "@zone-eu/mailsplit": "5.4.23",
+        "@zone-eu/mailsplit": "5.4.26",
         "encoding-japanese": "2.4.0",
         "he": "1.2.0",
         "html-to-text": "10.0.1",
         "iconv-lite": "0.7.3",
-        "libmime": "5.4.9",
+        "libmime": "5.5.1",
         "linkify-it": "5.0.2",
-        "nodemailer": "10.1.2",
+        "nodemailer": "10.1.7",
         "punycode.js": "2.3.1",
         "tlds": "1.261.0"
     },
@@ -33,7 +33,7 @@
         "@eslint/eslintrc": "3.3.7",
         "@eslint/js": "10.0.1",
         "ajv": "8.20.0",
-        "eslint": "10.12.0",
+        "eslint": "10.13.0",
         "eslint-config-nodemailer": "1.2.0",
         "eslint-config-prettier": "10.1.8",
         "grunt": "1.6.3",

package/node_modules/nodemailer/CHANGELOG.md

@@ -1,5 +1,49 @@
 # CHANGELOG
 
+## [10.1.7](https://github.com/nodemailer/nodemailer/compare/v10.1.6...v10.1.7) (2026-10-18)
+
+
+### Bug Fixes
+
+* **mime-funcs:** encode parameter values that look like encoded words ([651d79b](https://github.com/nodemailer/nodemailer/commit/651d79b0e1067b93b0ae8fc1afbdf383a46c214d))
+
+## [10.1.6](https://github.com/nodemailer/nodemailer/compare/v10.1.5...v10.1.6) (2026-10-18)
+
+
+### Bug Fixes
+
+* **addressparser:** read groups in the same pass as the rest of the list ([ddf0de1](https://github.com/nodemailer/nodemailer/commit/ddf0de1e7615908101bf593c62edcadccc05c8d3))
+
+## [10.1.5](https://github.com/nodemailer/nodemailer/compare/v10.1.4...v10.1.5) (2026-10-18)
+
+
+### Bug Fixes
+
+* **addressparser:** handle an address list without copying it per address ([6bd09b3](https://github.com/nodemailer/nodemailer/commit/6bd09b395cb7ffd1b0ae95f960f3985ba9c25afb))
+* **addressparser:** tokenize into offsets instead of an object per token ([3fd3f50](https://github.com/nodemailer/nodemailer/commit/3fd3f50ce86671884896ef1eaddafff5e137f820))
+
+## [10.1.4](https://github.com/nodemailer/nodemailer/compare/v10.1.3...v10.1.4) (2026-10-18)
+
+
+### Bug Fixes
+
+* **addressparser:** apply the unexpected "<" rule outside quotes and comments ([ee35f57](https://github.com/nodemailer/nodemailer/commit/ee35f5745658bf46952651fa53207255e9dc3406))
+* **addressparser:** bound group nesting at ten levels ([ce63303](https://github.com/nodemailer/nodemailer/commit/ce633031d58f8d2e9c9b0f5b671944a1afe71f95))
+* **addressparser:** drop the obsolete route from an angle-addr ([3dbc730](https://github.com/nodemailer/nodemailer/commit/3dbc7304b0cfa06551543fa2dc01222447c2b554))
+* **addressparser:** end a comment only at the ")" that closes the outermost one ([0a87617](https://github.com/nodemailer/nodemailer/commit/0a8761762ac78f2db2ba37f712f2a52a404ce011))
+* **addressparser:** honour quoted strings and comments inside an angle-addr and a group ([1cd57d2](https://github.com/nodemailer/nodemailer/commit/1cd57d2b8c49dff048c21cdbafdb54439a7f07e2))
+* **addressparser:** never read a mailbox out of a comment ([a1538ea](https://github.com/nodemailer/nodemailer/commit/a1538ea39c76c48a4134806c41e31e59a258b1e5))
+* **addressparser:** read CFWS beside the "@" of an addr-spec as nothing ([ba3c095](https://github.com/nodemailer/nodemailer/commit/ba3c0952542581f95cb20d9322cc9e27baa470a2))
+* **addressparser:** read the first addr-spec of the display text ([038940a](https://github.com/nodemailer/nodemailer/commit/038940a069a2cecb64a70d0e81b17eb8ce200d3a))
+* split a domain literal off at the "@" in front of it ([d5983b0](https://github.com/nodemailer/nodemailer/commit/d5983b0ae234cd22ab45be817fefd434e9a53d58))
+
+## [10.1.3](https://github.com/nodemailer/nodemailer/compare/v10.1.2...v10.1.3) (2026-10-18)
+
+
+### Bug Fixes
+
+* format References and strip URLs in linear time, release any number of streams ([2f18641](https://github.com/nodemailer/nodemailer/commit/2f186418cf6c8fff18f235d4318892fd42f810fa))
+
 ## [10.1.2](https://github.com/nodemailer/nodemailer/compare/v10.1.1...v10.1.2) (2026-10-16)