@mitre/hdf-converters 2.7.0 → 2.8.1

package/README.md

@@ -2,31 +2,32 @@
 
 "[Heimdall Data Format (HDF)](https://saf.mitre.org/#/normalize)" is our common data exchange format to preserve and transform security data.
 
-HDF Converters supplies several methods to convert various types of security tool data to and from this HDF standard. HDF Converters can be used in a variety of tools, and is currently well integrated with Heimdall itself, and the [SAF CLI](https://github.com/mitre/saf).
+HDF Converters supplies several methods to convert various types of security tool data to and from the HDF standard. HDF Converters can be used in a variety of tools, and is currently well integrated with Heimdall itself, and the [SAF CLI](https://github.com/mitre/saf).
 
 ## Supported Formats
 1.  [**asff-mapper**] - AWS Security Finding Format JSON file, Prowler-derived AWS Security Finding Format results from concatenated JSON blobs, and Trivy-derived AWS Security Finding Format results from concatenated JSON blobs
 2.  [**aws-config-mapper**] - AWS Config
 3.  [**burpsuite-mapper**] - BurpSuite Pro XML file
-4.  [**checklist-mapper**] - Checlist Mapper format
-5.  [**conveyor-mapper**] - Conveyor JSON file
-6.  [**dbprotect-mapper**] - DBProtect report in "Check Results Details" XML format
-7.  [**fortify-mapper**] - Fortify results FVDL file
-8.  [**ionchannel-mapper**] - SBOM data from Ion Channel
-9.  [**jfrog-xray-mapper**] - JFrog Xray results JSON file
-10. [**nessus-mapper**] - Nessus XML results file
-11. [**netsparker-mapper**] - Netsparker XML results file
-12. [**nikto-mapper**] - Nikto results JSON file
-13. [**prisma-mapper**] - Prisma Cloud Scan Report CSV file
-14. [**sarif-mapper**] - SARIF JSON file
-15. [**scoutsuite-mapper**] - ScoutSuite results from a Javascript object
-16. [**snyk-mapper**] - Snyk results JSON file
-17. [**sonarqube-mapper**] - SonarQube vulnerabilities for the specified project name and optional branch or pull/merge request ID name from an API
-18. [**splunk-mapper**] - Splunk instance
-19. [**twistlock-mapper**] - Twistlock CLI output file
-20. [**veracode-mapper**] - Veracode Scan Results XML file
-21. [**xccdf-results-mapper**] - SCAP client XCCDF-Results XML report
-22. [**zap-mapper**] - OWASP ZAP results JSON
+4.  [**caat-mapper**] - Compliance Assessment and Audit Tracking (CAAT) file
+5.  [**checklist-mapper**] - Checlist Mapper format
+6.  [**conveyor-mapper**] - Conveyor JSON file
+7.  [**dbprotect-mapper**] - DBProtect report in "Check Results Details" XML format
+8.  [**fortify-mapper**] - Fortify results FVDL file
+9.  [**ionchannel-mapper**] - SBOM data from Ion Channel
+10. [**jfrog-xray-mapper**] - JFrog Xray results JSON file
+11. [**nessus-mapper**] - Nessus XML results file
+12. [**netsparker-mapper**] - Netsparker XML results file
+13. [**nikto-mapper**] - Nikto results JSON file
+14. [**prisma-mapper**] - Prisma Cloud Scan Report CSV file
+15. [**sarif-mapper**] - SARIF JSON file
+16. [**scoutsuite-mapper**] - ScoutSuite results from a Javascript object
+17. [**snyk-mapper**] - Snyk results JSON file
+18. [**sonarqube-mapper**] - SonarQube vulnerabilities for the specified project name and optional branch or pull/merge request ID name from an API
+19. [**splunk-mapper**] - Splunk instance
+20. [**twistlock-mapper**] - Twistlock CLI output file
+21. [**veracode-mapper**] - Veracode Scan Results XML file
+22. [**xccdf-results-mapper**] - SCAP client XCCDF-Results XML report
+23. [**zap-mapper**] - OWASP ZAP results JSON
 
 ### NOTICE
 

package/lib/data/converters/xml2json.js

@@ -1,10 +1,33 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const fs_1 = __importDefault(require("fs"));
-const lodash_1 = __importDefault(require("lodash"));
+const _ = __importStar(require("lodash"));
 const xml2js_1 = __importDefault(require("xml2js"));
 const parser = new xml2js_1.default.Parser();
 const pathToInfile = process.argv[2];
@@ -25,7 +48,7 @@ else {
                 else {
                     const result = {};
                     converted.cci_list.cci_items[0].cci_item.forEach((cciItem) => {
-                        const newestReference = lodash_1.default.maxBy(cciItem.references[0].reference, (item) => lodash_1.default.get(item, '$.version'));
+                        const newestReference = _.maxBy(cciItem.references[0].reference, (item) => _.get(item, '$.version'));
                         if (newestReference) {
                             result[cciItem.$.id] = newestReference.$.index;
                         }

package/lib/data/converters/xml2json.js.map

@@ -1 +1 @@
-{"version":3,"file":"xml2json.js","sourceRoot":"","sources":["../../../data/converters/xml2json.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,oDAAuB;AACvB,oDAA4B;AAE5B,MAAM,MAAM,GAAG,IAAI,gBAAM,CAAC,MAAM,EAAE,CAAC;AACnC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAkBtC,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE;IACnC,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;CAC7E;KAAM;IACL,YAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,aAAa,EAAE,IAAI;QACrD,IAAI,aAAa,EAAE;YACjB,OAAO,CAAC,KAAK,CAAC,kBAAkB,YAAY,KAAK,aAAa,EAAE,CAAC,CAAC;SACnE;aAAM;YAEL,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,cAAmB,EAAE,SAAmB,EAAE,EAAE;gBACpE,IAAI,cAAc,EAAE;oBAClB,OAAO,CAAC,KAAK,CAAC,mBAAmB,YAAY,KAAK,cAAc,EAAE,CAAC,CAAC;iBACrE;qBAAM;oBAEL,MAAM,MAAM,GAA2B,EAAE,CAAC;oBAE1C,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;wBAE3D,MAAM,eAAe,GAAG,gBAAC,CAAC,KAAK,CAC7B,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,EAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CACnC,CAAC;wBACF,IAAI,eAAe,EAAE;4BACnB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;yBAChD;6BAAM;4BACL,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;yBAC7D;oBACH,CAAC,CAAC,CAAC;oBACH,YAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;iBACzD;YACH,CAAC,CAAC,CAAC;SACJ;IACH,CAAC,CAAC,CAAC;CACJ"}
+{"version":3,"file":"xml2json.js","sourceRoot":"","sources":["../../../data/converters/xml2json.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAoB;AACpB,0CAA4B;AAC5B,oDAA4B;AAE5B,MAAM,MAAM,GAAG,IAAI,gBAAM,CAAC,MAAM,EAAE,CAAC;AACnC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAkBtC,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE;IACnC,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;CAC7E;KAAM;IACL,YAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,aAAa,EAAE,IAAI;QACrD,IAAI,aAAa,EAAE;YACjB,OAAO,CAAC,KAAK,CAAC,kBAAkB,YAAY,KAAK,aAAa,EAAE,CAAC,CAAC;SACnE;aAAM;YAEL,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,cAAmB,EAAE,SAAmB,EAAE,EAAE;gBACpE,IAAI,cAAc,EAAE;oBAClB,OAAO,CAAC,KAAK,CAAC,mBAAmB,YAAY,KAAK,cAAc,EAAE,CAAC,CAAC;iBACrE;qBAAM;oBAEL,MAAM,MAAM,GAA2B,EAAE,CAAC;oBAE1C,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;wBAE3D,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAC7B,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,EAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CACnC,CAAC;wBACF,IAAI,eAAe,EAAE;4BACnB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;yBAChD;6BAAM;4BACL,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;yBAC7D;oBACH,CAAC,CAAC,CAAC;oBACH,YAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;iBACzD;YACH,CAAC,CAAC,CAAC;SACJ;IACH,CAAC,CAAC,CAAC;CACJ"}

package/lib/data/converters/xml2json.ts

@@ -1,5 +1,5 @@
 import fs from 'fs';
-import _ from 'lodash';
+import * as _ from 'lodash';
 import xml2js from 'xml2js';
 
 const parser = new xml2js.Parser();

package/lib/index.d.ts

@@ -3,6 +3,8 @@ export * from './src/aws-config-mapper';
 export * from './src/burpsuite-mapper';
 export * from './src/ckl-mapper/checklist-mapper';
 export * from './src/converters-from-hdf/asff/reverse-asff-mapper';
+export * from './src/converters-from-hdf/caat/reverse-caat-mapper';
+export * from './src/converters-from-hdf/html/reverse-html-mapper';
 export * from './src/converters-from-hdf/splunk/reverse-splunk-mapper';
 export * from './src/converters-from-hdf/xccdf/reverse-xccdf-mapper';
 export * from './src/conveyor-mapper';
@@ -30,6 +32,7 @@ export * from './src/sonarqube-mapper';
 export * from './src/splunk-mapper';
 export * from './src/twistlock-mapper';
 export * from './src/utils/attestations';
+export * from './src/utils/compliance';
 export * from './src/utils/fingerprinting';
 export * from './src/veracode-mapper';
 export * from './src/xccdf-results-mapper';

package/lib/index.js

@@ -33,6 +33,8 @@ __exportStar(require("./src/aws-config-mapper"), exports);
 __exportStar(require("./src/burpsuite-mapper"), exports);
 __exportStar(require("./src/ckl-mapper/checklist-mapper"), exports);
 __exportStar(require("./src/converters-from-hdf/asff/reverse-asff-mapper"), exports);
+__exportStar(require("./src/converters-from-hdf/caat/reverse-caat-mapper"), exports);
+__exportStar(require("./src/converters-from-hdf/html/reverse-html-mapper"), exports);
 __exportStar(require("./src/converters-from-hdf/splunk/reverse-splunk-mapper"), exports);
 __exportStar(require("./src/converters-from-hdf/xccdf/reverse-xccdf-mapper"), exports);
 __exportStar(require("./src/conveyor-mapper"), exports);
@@ -60,6 +62,7 @@ __exportStar(require("./src/sonarqube-mapper"), exports);
 __exportStar(require("./src/splunk-mapper"), exports);
 __exportStar(require("./src/twistlock-mapper"), exports);
 __exportStar(require("./src/utils/attestations"), exports);
+__exportStar(require("./src/utils/compliance"), exports);
 __exportStar(require("./src/utils/fingerprinting"), exports);
 __exportStar(require("./src/veracode-mapper"), exports);
 __exportStar(require("./src/xccdf-results-mapper"), exports);

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,0DAAwC;AACxC,yDAAuC;AACvC,oEAAkD;AAClD,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,4FAA4E;AAC5E,wFAAwE;AACxE,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,sDAAoC;AACpC,0DAAwC;AACxC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,yDAAuC;AACvC,2DAAyC;AACzC,6DAA2C;AAC3C,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,0DAAwC;AACxC,yDAAuC;AACvC,oEAAkD;AAClD,qFAAmE;AACnE,qFAAmE;AACnE,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,4FAA4E;AAC5E,wFAAwE;AACxE,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,sDAAoC;AACpC,0DAAwC;AACxC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,yDAAuC;AACvC,2DAAyC;AACzC,yDAAuC;AACvC,6DAA2C;AAC3C,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC"}

package/lib/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@mitre/hdf-converters",
-    "version": "2.7.0",
+    "version": "2.8.1",
     "license": "Apache-2.0",
     "description": "Converter util library used to transform various scan results into HDF format",
     "files": [
@@ -26,7 +26,9 @@
     },
     "dependencies": {
         "@aws-sdk/client-config-service": "^3.95.0",
-        "@mitre/jsonix": "^3.0.6",
+        "@e965/xlsx": "^0.20.0",
+        "@mdi/js": "^7.0.96",
+        "@mitre/jsonix": "^3.0.7",
         "@types/csv2json": "^1.4.2",
         "@types/ms": "^0.7.31",
         "@types/mustache": "^4.1.2",
@@ -40,15 +42,16 @@
         "fast-xml-parser": "^4.2.0",
         "html-entities": "^2.3.2",
         "htmlparser2": "^6.1.0",
-        "inspecjs": "^2.6.58",
+        "inspecjs": "^2.8.1",
         "lodash": "^4.17.21",
         "moment": "^2.29.1",
         "ms": "^2.1.3",
         "mustache": "^4.2.0",
         "papaparse": "^5.3.1",
         "run-script-os": "^1.1.6",
+        "tailwindcss": "^3.3.3",
+        "tw-elements": "^1.0.0-beta2",
         "winston": "^3.6.0",
-        "xlsx": "^0.18.5",
         "xml2js": "^0.6.0",
         "yaml": "^2.1.1"
     },
@@ -60,7 +63,7 @@
         "quicktype": "^15.0.260",
         "ts-jest": "^29.1.0",
         "ts-node": "^10.0.0",
-        "typedoc": "^0.24.1"
+        "typedoc": "^0.25.0"
     },
     "jest": {
         "moduleNameMapper": {

package/lib/src/asff-mapper/asff-mapper.js

@@ -1,13 +1,33 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ASFFResults = exports.ASFFMapper = exports.consolidate = exports.SpecialCasing = void 0;
 const compare_versions_1 = require("compare-versions");
 const html_entities_1 = require("html-entities");
 const inspecjs_1 = require("inspecjs");
-const lodash_1 = __importDefault(require("lodash"));
+const _ = __importStar(require("lodash"));
 const package_json_1 = require("../../package.json");
 const base_converter_1 = require("../base-converter");
 const global_1 = require("../utils/global");
@@ -41,9 +61,9 @@ var SpecialCasing;
     SpecialCasing["Default"] = "Default";
 })(SpecialCasing = exports.SpecialCasing || (exports.SpecialCasing = {}));
 function whichSpecialCase(finding) {
-    const productArn = lodash_1.default.get(finding, 'ProductArn');
-    if (lodash_1.default.get(finding, 'ProductName') === 'Default' &&
-        lodash_1.default.get(finding, 'GeneratorId') === 'cms.Chef Inspec') {
+    const productArn = _.get(finding, 'ProductArn');
+    if (_.get(finding, 'ProductName') === 'Default' &&
+        _.get(finding, 'GeneratorId') === 'cms.Chef Inspec') {
         return SpecialCasing.CMSInSpec;
     }
     else if (productArn.match(/^arn:[^:]+:securityhub:[^:]+:[^:]*:product\/aws\/firewall-manager$/)) {
@@ -52,9 +72,9 @@ function whichSpecialCase(finding) {
     else if (productArn.match(/^arn:[^:]+:securityhub:[^:]+:[^:]*:product\/aws\/guardduty$/)) {
         return SpecialCasing.GuardDuty;
     }
-    else if (lodash_1.default.some(lodash_1.default.get(finding, 'FindingProviderFields.Types'), (type) => {
+    else if (_.some(_.get(finding, 'FindingProviderFields.Types'), (type) => {
         var _a, _b;
-        if (!lodash_1.default.startsWith(type, 'MITRE/SAF/')) {
+        if (!_.startsWith(type, 'MITRE/SAF/')) {
             return false;
         }
         const version = (_b = (_a = type.split('/').pop()) === null || _a === void 0 ? void 0 : _a.split('-')[0]) !== null && _b !== void 0 ? _b : '';
@@ -91,12 +111,12 @@ const SPECIAL_CASE_MAPPING = new Map([
 function externalProductHandler(context, product, data, func, defaultVal) {
     var _a;
     if (product !== SpecialCasing.Default &&
-        lodash_1.default.has(SPECIAL_CASE_MAPPING.get(product), func)) {
+        _.has(SPECIAL_CASE_MAPPING.get(product), func)) {
         let keywords = {};
         if (context.supportingDocs.has(product)) {
             keywords = { ...context.supportingDocs.get(product) };
         }
-        return (_a = lodash_1.default.get(SPECIAL_CASE_MAPPING.get(product), func)) === null || _a === void 0 ? void 0 : _a.apply(context, [
+        return (_a = _.get(SPECIAL_CASE_MAPPING.get(product), func)) === null || _a === void 0 ? void 0 : _a.apply(context, [
             data,
             keywords
         ]);
@@ -114,7 +134,7 @@ function handleIdGroup(context, idGroup) {
     const [id, data] = idGroup;
     const group = data.map((d) => d[0]);
     const findings = data.map((d) => d[1]);
-    const productInfo = lodash_1.default.get(findings[0], 'ProductArn')
+    const productInfo = _.get(findings[0], 'ProductArn')
         .split(':')
         .slice(-1)[0]
         .split('/');
@@ -123,19 +143,19 @@ function handleIdGroup(context, idGroup) {
     const waiverData = externalProductHandler(context, whichSpecialCase(findings[0]), group, 'waiverData', {});
     return {
         id: id,
-        title: `${titlePrefix}${lodash_1.default.uniq(group.map((d) => d.title)).join(';')}`,
-        tags: lodash_1.default.mergeWith({}, ...group.map((d) => d.tags), (acc, cur) => {
+        title: `${titlePrefix}${_.uniq(group.map((d) => d.title)).join(';')}`,
+        tags: _.mergeWith({}, ...group.map((d) => d.tags), (acc, cur) => {
             if (acc === undefined || cur === undefined) {
                 return acc || cur;
             }
             else {
                 return Array.isArray(acc) || Array.isArray(cur)
-                    ? lodash_1.default.uniq(lodash_1.default.concat([], acc, cur))
+                    ? _.uniq(_.concat([], acc, cur))
                     : acc;
             }
         }),
         impact: Math.max(...group.map((d) => d.impact)),
-        desc: externalProductHandler(context, whichSpecialCase(findings[0]), group, 'desc', lodash_1.default.uniq(group.map((d) => d.desc)).join('\n')),
+        desc: externalProductHandler(context, whichSpecialCase(findings[0]), group, 'desc', _.uniq(group.map((d) => d.desc)).join('\n')),
         descriptions: group
             .map((d) => d.descriptions)
             .flat()
@@ -146,9 +166,9 @@ function handleIdGroup(context, idGroup) {
         refs: group
             .map((d) => d.refs)
             .flat()
-            .filter((element) => lodash_1.default.get(element, 'url') !== undefined),
+            .filter((element) => _.get(element, 'url') !== undefined),
         source_location: (() => {
-            const locs = lodash_1.default.uniq(group.map((d) => d.source_location)).filter((loc) => Object.keys(loc || {}).length !== 0);
+            const locs = _.uniq(group.map((d) => d.source_location)).filter((loc) => Object.keys(loc || {}).length !== 0);
             if (locs.length === 0) {
                 return {};
             }
@@ -167,19 +187,19 @@ function handleIdGroup(context, idGroup) {
     };
 }
 function consolidate(context, input, file) {
-    const allFindings = lodash_1.default.get(file, 'Findings');
+    const allFindings = _.get(file, 'Findings');
     if (input.length !== allFindings.length) {
         throw new Error('The number of generated controls should be the same as the number of findings while consolidating.');
     }
-    const idGroups = lodash_1.default.groupBy(lodash_1.default.zip(input, allFindings), (value) => {
+    const idGroups = _.groupBy(_.zip(input, allFindings), (value) => {
         const [hdfControl, asffFinding] = value;
-        return externalProductHandler(context, whichSpecialCase(asffFinding), asffFinding, 'subfindingsId', lodash_1.default.get(hdfControl, 'id'));
+        return externalProductHandler(context, whichSpecialCase(asffFinding), asffFinding, 'subfindingsId', _.get(hdfControl, 'id'));
     });
     return Object.entries(idGroups || {}).map((idGroup) => handleIdGroup(context, idGroup));
 }
 exports.consolidate = consolidate;
 function wrapWithFindingsObject(output) {
-    if (!lodash_1.default.has(output, 'Findings')) {
+    if (!_.has(output, 'Findings')) {
         if (Array.isArray(output)) {
             output = { Findings: output };
         }
@@ -204,6 +224,25 @@ function fixFileInput(asffJson) {
     return wrapWithFindingsObject(output);
 }
 class ASFFMapper extends base_converter_1.BaseConverter {
+    statusReason(finding) {
+        const statusReasons = _.get(finding, 'Compliance.StatusReasons');
+        if (statusReasons !== undefined &&
+            statusReasons !== null &&
+            _.isArray(statusReasons)) {
+            return statusReasons
+                .map((reason) => Object.entries(reason || {}).map(([key, value]) => {
+                return `${(0, html_entities_1.encode)(key)}: ${(0, html_entities_1.encode)(value)}`;
+            }))
+                .flat()
+                .join('\n');
+        }
+        else {
+            return undefined;
+        }
+    }
+    setMappings() {
+        this.mappings = externalProductHandler(this, whichSpecialCase(_.get(this.data, 'Findings[0]')), this, 'mapping', this.defaultMappings);
+    }
     constructor(asff, supportingDocs, meta = undefined) {
         super(asff);
         this.defaultMappings = {
@@ -212,12 +251,12 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                 release: package_json_1.version,
                 target_id: {
                     transformer: (record) => {
-                        const productInfo = lodash_1.default.get(record, 'Findings[0].ProductArn')
+                        const productInfo = _.get(record, 'Findings[0].ProductArn')
                             .split(':')
                             .slice(-1)[0]
                             .split('/');
                         const defaultTargetId = `${productInfo[1]} - ${productInfo[2]}`;
-                        return externalProductHandler(this, whichSpecialCase(lodash_1.default.get(record, 'Findings[0]')), [lodash_1.default.get(record, 'Findings[0]'), record.Findings], 'productName', (0, html_entities_1.encode)(defaultTargetId));
+                        return externalProductHandler(this, whichSpecialCase(_.get(record, 'Findings[0]')), [_.get(record, 'Findings[0]'), record.Findings], 'productName', (0, html_entities_1.encode)(defaultTargetId));
                     }
                 }
             },
@@ -236,7 +275,7 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                     version: '',
                     title: {
                         transformer: () => {
-                            return lodash_1.default.get(this.meta, 'title') || 'ASFF Findings';
+                            return _.get(this.meta, 'title') || 'ASFF Findings';
                         }
                     },
                     maintainer: null,
@@ -255,24 +294,24 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                             key: 'id',
                             arrayTransformer: consolidate.bind(this, this),
                             id: {
-                                transformer: (finding) => externalProductHandler(this, whichSpecialCase(finding), finding, 'findingId', (0, html_entities_1.encode)(lodash_1.default.get(finding, 'GeneratorId')))
+                                transformer: (finding) => externalProductHandler(this, whichSpecialCase(finding), finding, 'findingId', (0, html_entities_1.encode)(_.get(finding, 'GeneratorId')))
                             },
                             title: {
-                                transformer: (finding) => externalProductHandler(this, whichSpecialCase(finding), finding, 'findingTitle', (0, html_entities_1.encode)(lodash_1.default.get(finding, 'Title')))
+                                transformer: (finding) => externalProductHandler(this, whichSpecialCase(finding), finding, 'findingTitle', (0, html_entities_1.encode)(_.get(finding, 'Title')))
                             },
                             desc: {
-                                transformer: (finding) => externalProductHandler(this, whichSpecialCase(finding), finding, 'findingDescription', (0, html_entities_1.encode)(lodash_1.default.get(finding, 'Description')))
+                                transformer: (finding) => externalProductHandler(this, whichSpecialCase(finding), finding, 'findingDescription', (0, html_entities_1.encode)(_.get(finding, 'Description')))
                             },
                             impact: {
                                 transformer: (finding) => {
                                     let impact;
-                                    if (lodash_1.default.get(finding, 'Workflow.Status') === 'SUPPRESSED') {
+                                    if (_.get(finding, 'Workflow.Status') === 'SUPPRESSED') {
                                         impact = 'INFORMATIONAL';
                                     }
                                     else {
-                                        const defaultFunc = () => lodash_1.default.get(finding, SEVERITY_LABEL)
-                                            ? lodash_1.default.get(finding, SEVERITY_LABEL)
-                                            : lodash_1.default.get(finding, 'Severity.Normalized') /
+                                        const defaultFunc = () => _.get(finding, SEVERITY_LABEL)
+                                            ? _.get(finding, SEVERITY_LABEL)
+                                            : _.get(finding, 'Severity.Normalized') /
                                                 100.0;
                                         impact = externalProductHandler(this, whichSpecialCase(finding), finding, 'findingImpact', defaultFunc);
                                     }
@@ -312,11 +351,11 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                                         path: 'Remediation.Recommendation',
                                         transformer: (input) => {
                                             const data = [];
-                                            if (lodash_1.default.has(input, 'Text')) {
-                                                data.push(lodash_1.default.get(input, 'Text'));
+                                            if (_.has(input, 'Text')) {
+                                                data.push(_.get(input, 'Text'));
                                             }
-                                            if (lodash_1.default.has(input, 'Url')) {
-                                                data.push(lodash_1.default.get(input, 'Url'));
+                                            if (_.has(input, 'Url')) {
+                                                data.push(_.get(input, 'Url'));
                                             }
                                             return data.join('\n');
                                         }
@@ -328,8 +367,8 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                                 {
                                     transformer: (finding) => {
                                         return {
-                                            ...(lodash_1.default.has(finding, 'SourceUrl') && {
-                                                url: lodash_1.default.get(finding, 'SourceUrl')
+                                            ...(_.has(finding, 'SourceUrl') && {
+                                                url: _.get(finding, 'SourceUrl')
                                             })
                                         };
                                     }
@@ -342,8 +381,8 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                                     status: {
                                         transformer: (finding) => {
                                             const defaultFunc = () => {
-                                                if (lodash_1.default.has(finding, COMPLIANCE_STATUS)) {
-                                                    switch (lodash_1.default.get(finding, COMPLIANCE_STATUS)) {
+                                                if (_.has(finding, COMPLIANCE_STATUS)) {
+                                                    switch (_.get(finding, COMPLIANCE_STATUS)) {
                                                         case 'PASSED':
                                                             return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
                                                         case 'WARNING':
@@ -369,14 +408,14 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                                             if (output) {
                                                 output += '; ';
                                             }
-                                            const resources = lodash_1.default.get(finding, 'Resources')
+                                            const resources = _.get(finding, 'Resources')
                                                 .map((resource) => {
-                                                let hash = `Type: ${(0, html_entities_1.encode)(lodash_1.default.get(resource, 'Type'))}, Id: ${(0, html_entities_1.encode)(lodash_1.default.get(resource, 'Id'))}`;
-                                                if (lodash_1.default.has(resource, 'Partition')) {
-                                                    hash += `, Partition: ${(0, html_entities_1.encode)(lodash_1.default.get(resource, 'Partition'))}`;
+                                                let hash = `Type: ${(0, html_entities_1.encode)(_.get(resource, 'Type'))}, Id: ${(0, html_entities_1.encode)(_.get(resource, 'Id'))}`;
+                                                if (_.has(resource, 'Partition')) {
+                                                    hash += `, Partition: ${(0, html_entities_1.encode)(_.get(resource, 'Partition'))}`;
                                                 }
-                                                if (lodash_1.default.has(resource, 'Region')) {
-                                                    hash += `, Region: ${(0, html_entities_1.encode)(lodash_1.default.get(resource, 'Region'))}`;
+                                                if (_.has(resource, 'Region')) {
+                                                    hash += `, Region: ${(0, html_entities_1.encode)(_.get(resource, 'Region'))}`;
                                                 }
                                                 return hash;
                                             })
@@ -389,7 +428,7 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                                         const message = (() => {
                                             const defaultFunc = () => {
                                                 const statusReason = this.statusReason(finding);
-                                                switch (lodash_1.default.get(finding, COMPLIANCE_STATUS)) {
+                                                switch (_.get(finding, COMPLIANCE_STATUS)) {
                                                     case undefined:
                                                         return undefined;
                                                     case 'PASSED':
@@ -408,7 +447,7 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                                         })();
                                         const skipMessage = (() => {
                                             const statusReason = this.statusReason(finding);
-                                            switch (lodash_1.default.get(finding, COMPLIANCE_STATUS)) {
+                                            switch (_.get(finding, COMPLIANCE_STATUS)) {
                                                 case undefined:
                                                     return statusReason;
                                                 case 'PASSED':
@@ -431,8 +470,8 @@ class ASFFMapper extends base_converter_1.BaseConverter {
                                         };
                                     },
                                     start_time: {
-                                        transformer: (finding) => lodash_1.default.get(finding, 'LastObservedAt') ||
-                                            lodash_1.default.get(finding, 'UpdatedAt')
+                                        transformer: (finding) => _.get(finding, 'LastObservedAt') ||
+                                            _.get(finding, 'UpdatedAt')
                                     }
                                 }
                             ]
@@ -446,37 +485,18 @@ class ASFFMapper extends base_converter_1.BaseConverter {
         this.supportingDocs = supportingDocs;
         this.setMappings();
     }
-    statusReason(finding) {
-        const statusReasons = lodash_1.default.get(finding, 'Compliance.StatusReasons');
-        if (statusReasons !== undefined &&
-            statusReasons !== null &&
-            lodash_1.default.isArray(statusReasons)) {
-            return statusReasons
-                .map((reason) => Object.entries(reason || {}).map(([key, value]) => {
-                return `${(0, html_entities_1.encode)(key)}: ${(0, html_entities_1.encode)(value)}`;
-            }))
-                .flat()
-                .join('\n');
-        }
-        else {
-            return undefined;
-        }
-    }
-    setMappings() {
-        this.mappings = externalProductHandler(this, whichSpecialCase(lodash_1.default.get(this.data, 'Findings[0]')), this, 'mapping', this.defaultMappings);
-    }
 }
 exports.ASFFMapper = ASFFMapper;
 class ASFFResults {
     constructor(asffJson, securityhubStandardsJsonArray = undefined, meta = undefined) {
         this.meta = meta;
         this.supportingDocs = new Map();
-        this.supportingDocs.set(SpecialCasing.SecurityHub, lodash_1.default.get(SPECIAL_CASE_MAPPING.get(SpecialCasing.SecurityHub), 'securityhubSupportingDocs', (standards) => {
+        this.supportingDocs.set(SpecialCasing.SecurityHub, _.get(SPECIAL_CASE_MAPPING.get(SpecialCasing.SecurityHub), 'securityhubSupportingDocs', (standards) => {
             throw new Error(`supportingDocs function should've been defined: ${standards}`);
         })(securityhubStandardsJsonArray));
-        const findings = lodash_1.default.get(fixFileInput(asffJson), 'Findings');
-        this.data = lodash_1.default.groupBy(findings, (finding) => {
-            const productInfo = lodash_1.default.get(finding, 'ProductArn')
+        const findings = _.get(fixFileInput(asffJson), 'Findings');
+        this.data = _.groupBy(findings, (finding) => {
+            const productInfo = _.get(finding, 'ProductArn')
                 .split(':')
                 .slice(-1)[0]
                 .split('/');
@@ -485,9 +505,9 @@ class ASFFResults {
         });
     }
     toHdf() {
-        return lodash_1.default.mapValues(this.data, (val) => {
+        return _.mapValues(this.data, (val) => {
             const wrapped = wrapWithFindingsObject(val);
-            return new ASFFMapper(externalProductHandler(this, whichSpecialCase(lodash_1.default.get(wrapped, 'Findings[0]')), wrapped, 'preprocessingASFF', wrapped), externalProductHandler(this, whichSpecialCase(lodash_1.default.get(wrapped, 'Findings[0]')), [wrapped, this.supportingDocs], 'supportingDocs', this.supportingDocs), externalProductHandler(this, whichSpecialCase(lodash_1.default.get(wrapped, 'Findings[0]')), undefined, 'meta', this.meta)).toHdf();
+            return new ASFFMapper(externalProductHandler(this, whichSpecialCase(_.get(wrapped, 'Findings[0]')), wrapped, 'preprocessingASFF', wrapped), externalProductHandler(this, whichSpecialCase(_.get(wrapped, 'Findings[0]')), [wrapped, this.supportingDocs], 'supportingDocs', this.supportingDocs), externalProductHandler(this, whichSpecialCase(_.get(wrapped, 'Findings[0]')), undefined, 'meta', this.meta)).toHdf();
         });
     }
 }