@newrelic/security-agent 3.0.0 → 3.0.2

package/CHANGELOG.md

@@ -1,6 +1,15 @@
+### v3.0.2 (2026-02-17)
+#### Miscellaneous chores
+* refactor: Removed dependence on lodash in lieu of using native javascript
+* refactor: Replace cron module with node-cron. Removed pretty-bytes, js-yaml and jsonschema modules
+
+### v3.0.1 (2026-01-29)
+#### Miscellaneous chores
+* (deps): Updated lodash to v4.17.23 and undici to v7.19.0
+
 ### v3.0.0 (2026-01-06)
 ### ⚠ BREAKING CHANGES
-* Dropped support for Node.js v8
+* Dropped support for Node.js v18
 
 #### Features
 * Dropped support of Node 18.x and added Node 24.x

package/THIRD_PARTY_NOTICES.md

@@ -16,18 +16,14 @@ code, the source code can be found at [https://github.com/newrelic/csec-node-age
 
 * [check-disk-space](#check-disk-space)
 * [content-type](#content-type)
-* [cron](#cron)
 * [fast-safe-stringify](#fast-safe-stringify)
 * [find-package-json](#find-package-json)
 * [hash.js](#hashjs)
 * [html-entities](#html-entities)
 * [https-proxy-agent](#https-proxy-agent)
 * [is-invalid-path](#is-invalid-path)
-* [js-yaml](#js-yaml)
-* [jsonschema](#jsonschema)
-* [lodash](#lodash)
 * [log4js](#log4js)
-* [pretty-bytes](#pretty-bytes)
+* [node-cron](#node-cron)
 * [request-ip](#request-ip)
 * [ringbufferjs](#ringbufferjs)
 * [semver](#semver)
@@ -132,22 +128,6 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ```
 
-### cron
-
-This product includes source derived from [cron](https://github.com/kelektiv/node-cron) ([v3.1.7](https://github.com/kelektiv/node-cron/tree/v3.1.7)), distributed under the [MIT License](https://github.com/kelektiv/node-cron/blob/v3.1.7/LICENSE):
-
-```
-The MIT License (MIT)
-Copyright © 2017 Nicholas Campbell <nicholas.j.campbell@gmail.com>
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-```
-
 ### fast-safe-stringify
 
 This product includes source derived from [fast-safe-stringify](https://github.com/davidmarkclements/fast-safe-stringify) ([v2.1.1](https://github.com/davidmarkclements/fast-safe-stringify/tree/v2.1.1)), distributed under the [MIT License](https://github.com/davidmarkclements/fast-safe-stringify/blob/v2.1.1/LICENSE):
@@ -296,119 +276,6 @@ THE SOFTWARE.
 
 ```
 
-### js-yaml
-
-This product includes source derived from [js-yaml](https://github.com/nodeca/js-yaml) ([v4.1.1](https://github.com/nodeca/js-yaml/tree/v4.1.1)), distributed under the [MIT License](https://github.com/nodeca/js-yaml/blob/v4.1.1/LICENSE):
-
-```
-(The MIT License)
-
-Copyright (C) 2011-2015 by Vitaly Puzrin
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-```
-
-### jsonschema
-
-This product includes source derived from [jsonschema](https://github.com/tdegrunt/jsonschema) ([v1.4.1](https://github.com/tdegrunt/jsonschema/tree/v1.4.1)), distributed under the [MIT License](https://github.com/tdegrunt/jsonschema/blob/v1.4.1/LICENSE):
-
-```
-jsonschema is licensed under MIT license.
-
-Copyright (C) 2012-2015 Tom de Grunt <tom@degrunt.nl>
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of
-this software and associated documentation files (the "Software"), to deal in
-the Software without restriction, including without limitation the rights to
-use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
-of the Software, and to permit persons to whom the Software is furnished to do
-so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-```
-
-### lodash
-
-This product includes source derived from [lodash](https://github.com/lodash/lodash) ([v4.17.21](https://github.com/lodash/lodash/tree/v4.17.21)), distributed under the [MIT License](https://github.com/lodash/lodash/blob/v4.17.21/LICENSE):
-
-```
-Copyright OpenJS Foundation and other contributors <https://openjsf.org/>
-
-Based on Underscore.js, copyright Jeremy Ashkenas,
-DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>
-
-This software consists of voluntary contributions made by many
-individuals. For exact contribution history, see the revision history
-available at https://github.com/lodash/lodash
-
-The following license applies to all parts of this software except as
-documented below:
-
-====
-
-Permission is hereby granted, free of charge, to any person obtaining
-a copy of this software and associated documentation files (the
-"Software"), to deal in the Software without restriction, including
-without limitation the rights to use, copy, modify, merge, publish,
-distribute, sublicense, and/or sell copies of the Software, and to
-permit persons to whom the Software is furnished to do so, subject to
-the following conditions:
-
-The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
-LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
-OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
-WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-====
-
-Copyright and related rights for sample code are waived via CC0. Sample
-code is defined as all source code displayed within the prose of the
-documentation.
-
-CC0: http://creativecommons.org/publicdomain/zero/1.0/
-
-====
-
-Files located in the node_modules and vendor directories are externally
-maintained libraries used by this software which have their own
-licenses; we recommend you read them, as their terms may differ from the
-terms above.
-
-```
-
 ### log4js
 
 This product includes source derived from [log4js](https://github.com/log4js-node/log4js-node) ([v6.9.1](https://github.com/log4js-node/log4js-node/tree/v6.9.1)), distributed under the [Apache-2.0 License](https://github.com/log4js-node/log4js-node/blob/v6.9.1/LICENSE):
@@ -430,20 +297,18 @@ Copyright 2015 Gareth Jones (with contributions from many other people)
 
 ```
 
-### pretty-bytes
+### node-cron
 
-This product includes source derived from [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) ([v5.6.0](https://github.com/sindresorhus/pretty-bytes/tree/v5.6.0)), distributed under the [MIT License](https://github.com/sindresorhus/pretty-bytes/blob/v5.6.0/license):
+This product includes source derived from [node-cron](https://github.com/merencia/node-cron) ([v4.2.1](https://github.com/merencia/node-cron/tree/v4.2.1)), distributed under the [ISC License](https://github.com/merencia/node-cron/blob/v4.2.1/LICENSE.md):
 
 ```
-MIT License
+## ISC License
 
-Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+Copyright (c) 2016, Lucas Merencia \<lucas.merencia@gmail.com\>
 
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
 
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 ```
 
@@ -516,7 +381,7 @@ IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 ### undici
 
-This product includes source derived from [undici](https://github.com/nodejs/undici) ([v7.16.0](https://github.com/nodejs/undici/tree/v7.16.0)), distributed under the [MIT License](https://github.com/nodejs/undici/blob/v7.16.0/LICENSE):
+This product includes source derived from [undici](https://github.com/nodejs/undici) ([v7.19.0](https://github.com/nodejs/undici/tree/v7.19.0)), distributed under the [MIT License](https://github.com/nodejs/undici/blob/v7.19.0/LICENSE):
 
 ```
 MIT License

package/lib/instrumentation-security/hooks/director/nr-director.js

@@ -9,7 +9,6 @@
 const requestManager = require("../../core/request-manager");
 const secUtils = require('../../core/sec-utils');
 const { ATTHERATE, DOUBLE_DOLLAR, COLON } = require('../../core/constants');
-const lodash = require('lodash');
 const routeManager = require('../../core/route-manager');
 const API = require("../../../nr-security-api");
 const logger = API.getLogger();
@@ -50,7 +49,7 @@ module.exports = function initialize(shim, director) {
           const path = "/" + arguments[1].join('/')
           const stakTrace = secUtils.traceElementForRoute();
           const splittedStack = stakTrace[0].split(DOUBLE_DOLLAR);
-          const key = lodash.upperCase(method) + ATTHERATE + path;
+          const key = method.toUpperCase() + ATTHERATE + path;
           routeManager.setRoute(key, splittedStack[0]);
           if (path.includes(COLON)) {
             const dummyKey = key.split(COLON)[0] + ":param_input";
@@ -89,7 +88,7 @@ function extractParams(shim, params) {
       let uri = request.url.split("?")[0];
       const param = Object.values(params)[0];
       if (uri.includes(param)) {
-        uri = lodash.replace(uri, param, ':param_input');
+        uri = uri.replace(param, ':param_input');
         request.uri  = uri;
         requestManager.setRequest(transaction.id, request);
       }

package/lib/instrumentation-security/hooks/express/nr-express.js

@@ -14,7 +14,6 @@
 const requestManager = require("../../core/request-manager");
 const secUtils = require('../../core/sec-utils');
 const { ATTHERATE, DOUBLE_DOLLAR } = require('../../core/constants');
-const lodash = require('lodash');
 const routeManager = require('../../core/route-manager');
 const API = require("../../../nr-security-api");
 const logger = API.getLogger();
@@ -55,7 +54,7 @@ function wrapExpress4(shim, express) {
       try {
         const stakTrace = secUtils.traceElementForRoute();
         const splittedStack = stakTrace[0].split(DOUBLE_DOLLAR);
-        const key = lodash.upperCase(splittedStack[1]) + ATTHERATE + arguments[0];
+        const key = splittedStack[1].toUpperCase() + ATTHERATE + arguments[0];
         routeManager.setRoute(key, splittedStack[0]);
       } catch (error) {
 
@@ -134,7 +133,7 @@ function expressFileHook(shim, mod, fun) {
       const interceptedArgs = [arguments[0]];
       shim.interceptedArgs = interceptedArgs;
       const request = requestManager.getRequest(shim);
-      if (request && typeof arguments[0] === STRING && !lodash.isEmpty(arguments[0])) {
+      if (request && typeof arguments[0] === STRING && arguments[0]) {
         const traceObject = secUtils.getTraceObject(shim);
         try {
           parameters[0] = path.resolve(parameters[0]);
@@ -166,7 +165,7 @@ function wrapExpress5(shim, express) {
       try {
         const stakTrace = secUtils.traceElementForRoute();
         const splittedStack = stakTrace[0].split(DOUBLE_DOLLAR);
-        const key = lodash.upperCase(splittedStack[1]) + ATTHERATE + arguments[0];
+        const key = splittedStack[1].toUpperCase() + ATTHERATE + arguments[0];
         routeManager.setRoute(key, splittedStack[0]);
       } catch (error) {
 

package/lib/instrumentation-security/hooks/fastify/nr-fastify.js

@@ -7,7 +7,6 @@
 const requestManager = require("../../core/request-manager");
 const secUtils = require('../../core/sec-utils');
 const { ATTHERATE, DOUBLE_DOLLAR } = require('../../core/constants');
-const lodash = require('lodash');
 const routeManager = require('../../core/route-manager');
 const semver = require('semver')
 const API = require("../../../nr-security-api");
@@ -44,7 +43,7 @@ const setupRouteHandler = (shim, fastify, moduleName) => {
         try {
           const stakTrace = secUtils.traceElementForRoute();
           const splittedStack = stakTrace[0].split(DOUBLE_DOLLAR);
-          const key = lodash.upperCase(splittedStack[1]) + ATTHERATE + arguments[0];
+          const key = splittedStack[1].toUpperCase() + ATTHERATE + arguments[0];
           routeManager.setRoute(key, splittedStack[0]);
         } catch (error) {
         }
@@ -141,7 +140,8 @@ function extractParams(shim, req) {
           }
         });
       }
-      const txInfo = lodash.get(req, Object.getOwnPropertySymbols(req).find(symbol => symbol.toString() === 'Symbol(fastify.context)'));
+      const symbolKey = Object.getOwnPropertySymbols(req).find(symbol => symbol.toString() === 'Symbol(fastify.context)');
+      const txInfo = symbolKey ? req[symbolKey] : undefined;
       if (request && txInfo && txInfo.config && txInfo.config.url) {
         request.uri = txInfo.config.url;
         requestManager.setRequest(transaction.id, request);

package/lib/instrumentation-security/hooks/fs/nr-fs.js

@@ -16,7 +16,6 @@ const logger = API.getLogger();
 const { STRING, QUESTIONMARK, DOTDOTSLASH, UNDEFINED, SELF_FD_PATH, SLASH, SLASHDOTDOT, NR_CSEC_FUZZ_REQUEST_ID } = require('../../core/constants');
 const fsConsts = process.binding('constants').fs;
 const agentModule = API.getSecAgent();
-const lodash = require('lodash');
 
 const requireHook = require('../require/nr-require');
 
@@ -132,7 +131,7 @@ function openHook(shim, mod, moduleName) {
           parameters[0] = arguments[0];
         }
       }
-      if (request && typeof parameters[0] === STRING && !lodash.isEmpty(parameters[0])) {
+      if (request && typeof parameters[0] === STRING && parameters[0]) {
         const policy = API.getPolicy();
         const dynamicScanningFlag = policy.data ? policy.data.vulnerabilityScan.iastScan.enabled : false;
         const url = request.url;
@@ -187,7 +186,7 @@ function probableToFAHooks(shim, mod, moduleName) {
         const interceptedArgs = [arguments[0]];
         shim.interceptedArgs = interceptedArgs;
         const request = requestManager.getRequest(shim);
-        if (request && typeof arguments[0] === STRING && !lodash.isEmpty(arguments[0])) {
+        if (request && typeof arguments[0] === STRING && arguments[0]) {
           const traceObject = secUtils.getTraceObject(shim);
           let absoluteParameters = [parameters[0]];
           const secMetadata = securityMetaData.getSecurityMetaData(request, absoluteParameters, traceObject, secUtils.getExecutionId(), EVENT_TYPE.FILE_OPERATION, EVENT_CATEGORY.FILE)
@@ -222,7 +221,7 @@ function probableToFIHooks(shim, mod, moduleName) {
         const interceptedArgs = [arguments[0]];
         shim.interceptedArgs = interceptedArgs;
         const request = requestManager.getRequest(shim);
-        if (request && typeof arguments[0] === STRING && !lodash.isEmpty(arguments[0])) {
+        if (request && typeof arguments[0] === STRING && arguments[0]) {
           const traceObject = secUtils.getTraceObject(shim);
           let absoluteParameters = [parameters[0]];
           if (fun === COPY_FILE || fun === RENAME) {
@@ -259,7 +258,7 @@ function probablePromiseToFAHooks(shim, mod, moduleName) {
         const interceptedArgs = [arguments[0]];
         shim.interceptedArgs = interceptedArgs;
         const request = requestManager.getRequest(shim);
-        if (request && typeof arguments[0] === STRING && !lodash.isEmpty(arguments[0])) {
+        if (request && typeof arguments[0] === STRING && arguments[0]) {
           const traceObject = secUtils.getTraceObject(shim);
           let absoluteParameters = [parameters[0]];
           const secMetadata = securityMetaData.getSecurityMetaData(request, absoluteParameters, traceObject, secUtils.getExecutionId(), EVENT_TYPE.FILE_OPERATION, EVENT_CATEGORY.FILE)
@@ -287,7 +286,7 @@ function probablePromiseToFIHooks(shim, mod, moduleName) {
         const interceptedArgs = [arguments[0]];
         shim.interceptedArgs = interceptedArgs;
         const request = requestManager.getRequest(shim);
-        if (request && typeof arguments[0] === STRING && !lodash.isEmpty(arguments[0])) {
+        if (request && typeof arguments[0] === STRING && arguments[0]) {
           const traceObject = secUtils.getTraceObject(shim);
           let absoluteParameters = [parameters[0]];
           if (fun === COPY_FILE || fun === RENAME) {

package/lib/instrumentation-security/hooks/hapi/nr-hapi.js

@@ -15,7 +15,6 @@
 const requestManager = require("../../core/request-manager");
 const secUtils = require('../../core/sec-utils');
 const { ATTHERATE, DOUBLE_DOLLAR } = require('../../core/constants');
-const lodash = require('lodash');
 const routeManager = require('../../core/route-manager');
 const API = require("../../../nr-security-api");
 const logger = API.getLogger();
@@ -58,7 +57,7 @@ function wrapProtoRoute(shim, proto) {
       const obj = args[0];
       for (let i = 0; i < obj.length; i++) {
         try {
-          const method = lodash.upperCase(obj[i].method);
+          const method = obj[i].method.toUpperCase();
           const path = obj[i].path;
           const stakTrace = secUtils.traceElementForRoute();
           const splittedStack = stakTrace[0].split(DOUBLE_DOLLAR);

package/lib/instrumentation-security/hooks/http/nr-http.js

@@ -13,7 +13,6 @@ const UINT8ARRAY_TYPE = 'Uint8Array';
 const OBJECT_TYPE = 'object'
 const unescapeJs = require('unescape-js');
 const ConType = require('content-type');
-const lodash = require('lodash');
 const URL = require('url')
 const secUtils = require('../../core/sec-utils');
 const API = require("../../../nr-security-api");
@@ -69,7 +68,7 @@ function setupRequestMapCleanup() {
   if (NRAgent) {
     NRAgent.on('transactionFinished', function onTransactionFinished(transaction) {
       const requestData = requestManager.getRequestFromId(transaction.id);
-      if (requestData && requestData.tempFiles && !lodash.isEmpty(requestData.tempFiles)) {
+      if (requestData && requestData.tempFiles && requestData.tempFiles.length > 0) {
         const tempFiles = requestData.tempFiles;
         for (let i = 0; i < tempFiles.length; i++) {
           const file = tempFiles[i];
@@ -123,7 +122,7 @@ function outboundHook(shim, mod, method, moduleName) {
       let completeURL = data.protocol + '//' + data.headers.host + (data.port ? (':' + data.port) : '') + data.path;
       completeURL = completeURL.split(QUESTION_MARK)[0];
 
-      if (request && !lodash.isEmpty(data.headers.host) && !lodash.isEmpty(data.path)) {
+      if (request && data.headers.host && data.path) {
         const appUUID = API.getSecAgent().applicationInfo.applicationUUID;
         const id = secUtils.getExecutionId().toString();
         let generateFlag = false;
@@ -181,7 +180,7 @@ function parseFuzzheaders(requestData, transactionId) {
         let encryptedData = additionalData[6].trim();
         let hashVerifier = additionalData[7].trim();
 
-        if (lodash.isEmpty(encryptedData) || lodash.isEmpty(hashVerifier)) {
+        if (!encryptedData || !hashVerifier) {
           return;
         }
         let decryptedData = secUtils.decryptData(encryptedData);
@@ -427,7 +426,8 @@ function responseHook(resp, req, shim) {
     return function wrappedEnd() {
       const response = this;
       const request = requestManager.getRequest(shim);
-      const txInfo = lodash.get(response, Object.getOwnPropertySymbols(response).find(symbol => symbol.toString() === 'Symbol(transactionInfo)'));
+      const symbolKey = Object.getOwnPropertySymbols(response).find(symbol => symbol.toString() === 'Symbol(transactionInfo)');
+      const txInfo = symbolKey ? response[symbolKey] : undefined;
       try {
         if (txInfo && txInfo.error && request) {
           ExceptionReporting.generateExceptionReportingEvent(txInfo.error, request);
@@ -756,7 +756,7 @@ function trustBoundaryCheck(sessionObject, shim) {
         params.push(String(sessionObject[key]));
       }
     });
-    if (!lodash.isEmpty(params)) {
+    if (params.length > 0) {
       const traceObject = secUtils.getTraceObject(shim);
       const secMetadata = securityMetaData.getSecurityMetaData(request, params, traceObject, secUtils.getExecutionId(), EVENT_TYPE.TRUSTBOUNDARY, EVENT_CATEGORY.TRUSTBOUNDARY)
       const secEvent = API.generateSecEvent(secMetadata);

package/lib/instrumentation-security/hooks/koa/@koa/nr-@koa-router.js

@@ -7,7 +7,6 @@ module.exports = initialize
 const requestManager = require('../../../core/request-manager');
 const secUtils = require('../../../core/sec-utils');
 const { ATTHERATE, DOUBLE_DOLLAR } = require('../../../core/constants');
-const lodash = require('lodash');
 const routeManager = require('../../../core/route-manager');
 const url = require('url');
 const API = require("../../../../nr-security-api");
@@ -34,7 +33,7 @@ function initialize(shim, mod, moduleName) {
                 try {
                     const stakTrace = secUtils.traceElementForRoute();
                     const splittedStack = stakTrace[0].split(DOUBLE_DOLLAR);
-                    const key = lodash.upperCase(splittedStack[1]) + ATTHERATE + arguments[0];
+                    const key = splittedStack[1].toUpperCase() + ATTHERATE + arguments[0];
                     routeManager.setRoute(key, splittedStack[0]);
                 } catch (error) {
                 }
@@ -88,7 +87,7 @@ function paramHook(shim, mod, moduleName) {
                         });
                     }
                     // logic to get path param
-                    if (!lodash.isEmpty(result)) {
+                    if (!!result) {
                         Object.keys(result).forEach(function (key) {
                             if (result[key]) {
                                 if (!request.parameterMap[key]) {

package/lib/instrumentation-security/hooks/nextjs/nr-next.js

@@ -8,7 +8,6 @@ const requestManager = require("../../core/request-manager");
 const API = require("../../../nr-security-api");
 const routeManager = require('../../core/route-manager');
 const logger = API.getLogger();
-const lodash = require('lodash');
 const { ATTHERATE, DOUBLE_DOLLAR, EMPTY_STR } = require('../../core/constants');
 
 const semver = require('semver')

package/lib/instrumentation-security/hooks/restify/nr-restify.js

@@ -7,7 +7,6 @@ module.exports = initialize
 const requestManager = require('../../core/request-manager');
 const secUtils = require('../../core/sec-utils');
 const { ATTHERATE, DOUBLE_DOLLAR } = require('../../core/constants');
-const lodash = require('lodash');
 const routeManager = require('../../core/route-manager');
 const url = require('url');
 const API = require("../../../nr-security-api");
@@ -31,7 +30,7 @@ function initialize(shim, mod, moduleName) {
             return function wrapper() {
                 if (arguments[0]) {
                     try {
-                        const method = lodash.upperCase(arguments[0].method);
+                        const method = arguments[0].method.toUpperCase();
                         const path = arguments[0].path;
                         const key = method + ATTHERATE + path;
                         const stakTrace = secUtils.traceElementForRoute();

package/lib/instrumentation-security/hooks/undici/nr-undici.js

@@ -7,7 +7,6 @@ module.exports = initialize
 const requestManager = require('../../core/request-manager');
 const secUtils = require("../../core/sec-utils");
 const API = require("../../../nr-security-api");
-const lodash = require('lodash');
 const securityMetaData = require('../../core/security-metadata');
 const { EVENT_TYPE, EVENT_CATEGORY } = require('../../core/event-constants');
 const { NR_CSEC_FUZZ_REQUEST_ID, QUESTION_MARK, EMPTY_STRING, COLON, SLASH } = require('../../core/constants');
@@ -103,7 +102,7 @@ function fetchHook(shim, mod, methodName) {
         data.port = parsedUrl.port ? parsedUrl.port : parsedUrl.port;
 
         shim.interceptedArgs = data;
-        if (request && !lodash.isEmpty(data.headers.host) && !lodash.isEmpty(data.path)) {
+        if (request && data.headers.host && data.path) {
           const appUUID = API.getSecAgent().applicationInfo.applicationUUID;
           const traceObject = secUtils.getTraceObject(shim);
           const secMetadata = securityMetaData.getSecurityMetaData(request, data, traceObject, secUtils.getExecutionId(), EVENT_TYPE.HTTP_REQUEST, EVENT_CATEGORY.HTTP)

package/lib/nr-security-agent/lib/core/Auth-headers.js

@@ -11,7 +11,6 @@ const logger = logs.getLogger();
 const initLogger = logs.getInitLogger();
 const LinkingMetaData = require('./LinkingMetadata');
 const LogMessage = require('./LogMessage');
-const lodash = require('lodash');
 
 
 /* eslint-disable camelcase */
@@ -47,7 +46,7 @@ function AuthHeaders() {
             instanceCount = 0;
         }
         authHeaders['NR-CSEC-IAST-SCAN-INSTANCE-COUNT'] = instanceCount ? instanceCount : 0
-        if ((NRAgent.config.security.iast_test_identifier && !lodash.isEmpty(NRAgent.config.security.iast_test_identifier)) || process.env.NEW_RELIC_SECURITY_IAST_TEST_IDENTIFIER) {
+        if ((NRAgent.config.security.iast_test_identifier && NRAgent.config.security.iast_test_identifier) || process.env.NEW_RELIC_SECURITY_IAST_TEST_IDENTIFIER) {
             let iast_test_identifier = NRAgent.config.security.iast_test_identifier || process.env.NEW_RELIC_SECURITY_IAST_TEST_IDENTIFIER
             authHeaders['NR-CSEC-IAST-TEST-IDENTIFIER'] = iast_test_identifier;
             logger.debug("iast_test_identifier is:", iast_test_identifier);

package/lib/nr-security-agent/lib/core/Policy.js

@@ -6,17 +6,12 @@
 
 const API = require('../../../nr-security-api');
 const NRAgent = API.getNRAgent();
-const { Agent } = require('./agent');
-
 let policy;
-const path = require('path');
-const fs = require('fs');
-const yaml = require('js-yaml');
 const logs = require('./logging');
 const logger = logs.getLogger();
 const initLogger = logs.getInitLogger();
-const jsonValidator = require('./jsonValidator');
 const LOG_MESSAGES = require('./sec-agent-constants').LOG_MESSAGES;
+const default_policy = {"version":"DEFAULT","logLevel":"INFO","policyPull":true,"policyPullInterval":60,"vulnerabilityScan":{"enabled":false,"cveScan":{"enabled":false,"enableEnvScan":false,"cveDefinitionUpdateInterval":360},"iastScan":{"enabled":false,"probing":{"interval":1,"batchSize":17}}},"protectionMode":{"enabled":false,"ipBlocking":{"enabled":false,"attackerIpBlocking":false,"ipDetectViaXFF":false,"timeout":2},"apiBlocking":{"enabled":false,"protectAllApis":false,"protectKnownVulnerableApis":false,"protectAttackedApis":false}},"sendCompleteStackTrace":false,"enableHTTPRequestPrinting":false,"policyParameters":{"allowedIps":[],"blockedIps":[],"allowedApis":[],"blockedApis":[],"allowedRequests":[]}}
 
 function Policy() {
     this.data = {};
@@ -40,12 +35,6 @@ function getInstance() {
 // sets up policy data to use globally.
 function setPolicyData(data) {
     policy = getInstance();
-    const jsonValidationResult = jsonValidator.validate(data);
-    if (jsonValidationResult && jsonValidationResult.errors && jsonValidationResult.errors.length > 0) {
-        logger.error(LOG_MESSAGES.EXP_RAISE_POL, JSON.stringify(jsonValidationResult.errors));
-        logger.info(LOG_MESSAGES.FALLBACK_TO_CURR_POLICY, JSON.stringify(policy.data));
-        return false;
-    }
     if (policy.data.version !== data.version) {
         policy.data = data;
         appInfoVersionUpdate(policy, data);
@@ -59,13 +48,7 @@ function setPolicyData(data) {
 
 // function to setup default policy provided in resources directory
 function setDefaultPolicy() {
-    let default_policy_file = path.resolve(__dirname, '../../resources/default-policy.yaml');
-    if(process.platform == 'win32'){
-        default_policy_file = path.resolve(__dirname, '..\\..\\resources\\default-policy.yaml');
-    }
-    // Get document, or throw exception on error
     try {
-        const default_policy = yaml.load(fs.readFileSync(default_policy_file, 'utf8'));
         policy = getInstance();
         policy.data = default_policy;
         logger.info(LOG_MESSAGES.DEFAULT_POL_SET, JSON.stringify(policy.data));
@@ -76,8 +59,8 @@ function setDefaultPolicy() {
 
 /**
  * Function to set applicationInfo with updated policy version
- * @param {*} policy 
- * @param {*} data 
+ * @param {*} policy
+ * @param {*} data
  */
 function appInfoVersionUpdate(policy, data) {
     const appInfo = require('./applicationinfo').getInstance();

package/lib/nr-security-agent/lib/core/applicationinfo.js

@@ -9,7 +9,6 @@ const { BasicInfo } = require('./event');
 const { JsonHandler } = require('./json-file-handler');
 const fs = require('fs');
 const shaSizeUtil = require('./sha-size-util');
-const _ = require('lodash');
 const OS = require('os');
 const { Agent } = require('./agent');
 const commonUtils = require('./commonUtils');
@@ -115,7 +114,7 @@ function ApplicationInfo () {
     this.identifier.envInfo.name = getHostName();
     this.identifier.envInfo.ipaddress = localIpAddress();
 
-    if (!_.isEmpty(containerId)) {
+    if (containerId) {
         this.identifier.id = containerId;
         this.identifier.kind = "CONTAINER";
         const containerProps = setContainerProperties(this.identifier);
@@ -131,10 +130,10 @@ function ApplicationInfo () {
     } else if (isLambda) {
         const lambdaARN = process.env[AWS_LAMBDA_QUALIFIED_ARN_ENV_IDENTIFIER];
         const lambdaVersion = process.env[AWS_LAMBDA_FUNCTION_VERSION_ENV_IDENTIFIER];
-        this.applicationUUID = _.isEmpty(lambdaARN) ? ApplicationInfo.Constants.EMPTY_UUID : `${lambdaARN}:${lambdaVersion}`;
+        this.applicationUUID = !lambdaARN ? ApplicationInfo.Constants.EMPTY_UUID : `${lambdaARN}:${lambdaVersion}`;
         this.identifier.isHost = true;
         this.identifier.isLambda = isLambda;
-        this.identifier.lambdaFunctionARN = _.isEmpty(lambdaARN)
+        this.identifier.lambdaFunctionARN = !lambdaARN
             ? `${process.env[AWS_LAMBDA_FUNCTION_NAME_ENV_IDENTIFIER]}:${lambdaVersion}`
             : `${lambdaARN}:${lambdaVersion}`;
         this.identifier.lambdaAWSSessionToken = process.env[AWS_SESSION_TOKEN_ENV_IDENTIFIER];
@@ -347,7 +346,7 @@ function getContainerID () {
         // podman
         if (st.indexOf(LIBPOD) > -1 && st.indexOf(SCOPE_IDENTIFIER) > -1) {
             const containerId = st.split(LIBPOD).pop().split(SCOPE_IDENTIFIER)[0];
-            if (!_.isEmpty(containerId)) {
+            if (containerId) {
                 return containerId;
             }
         }

package/lib/nr-security-agent/lib/core/commonUtils.js

@@ -17,16 +17,14 @@ const { CSEC_HOME, SLASH, EMPTY_STR } = require('./sec-agent-constants');
 const njsAgentConstants = require('./sec-agent-constants');
 const API = require('../../../nr-security-api');
 const NRAgent = API.getNRAgent();
-const lodash = require('lodash')
 const backupLogFileRegex = /.log.\d/gm;
 let websocketHealth;
 
 const ringBuffer = require('ringbufferjs');
 const bufferedLogEvents = new ringBuffer(10);
-const { CronJob } = require('cron');
+const nodeCron = require('node-cron');
 let scanStartTime = 0;
 let trafficStartedTime = 0;
-const cron = require('cron');
 
 const skip_detection_category_map = {
     insecure_settings: ['CRYPTO', 'HASH', 'RANDOM', 'SECURE_COOKIE', 'TRUSTBOUNDARY'],
@@ -72,7 +70,7 @@ function getKindIdPair(identifier, hostId) {
 
 /**
  * Utility to check worker thread support
- * @returns 
+ * @returns
  */
 function hasWorker() {
     let workerFlag = false;
@@ -109,7 +107,7 @@ function runtimeSupportsAsyncFunctionGenerators() {
 
 /**
  * Utility to create directory and set permissions
- * @param {*} dir 
+ * @param {*} dir
  */
 function createPathIfNotExist(dir) {
     try {
@@ -131,7 +129,7 @@ function createPathIfNotExist(dir) {
 
 /**
  * Utility to get OS
- * @returns 
+ * @returns
  */
 function getOS() {
     if (process.platform === 'darwin') {
@@ -351,11 +349,11 @@ function logRollOver() {
 
 /**
  * Utility to get validator service endpoint
- * @returns 
+ * @returns
  */
 function getValidatorServiceEndpointURL() {
     let validatorServiceEndpointURL = NRAgent ? NRAgent.config.security.validator_service_url : "wss://csec.nr-data.net";
-    if (lodash.isEmpty(validatorServiceEndpointURL)) {
+    if (!validatorServiceEndpointURL) {
         validatorServiceEndpointURL = "wss://csec.nr-data.net";
     }
     return validatorServiceEndpointURL
@@ -363,7 +361,7 @@ function getValidatorServiceEndpointURL() {
 
 /**
  * Utility to get security mode
- * @returns 
+ * @returns
  */
 function getCSECmode() {
     const mode = NRAgent ? NRAgent.config.security.mode : 'IAST';
@@ -372,7 +370,7 @@ function getCSECmode() {
 
 /**
  * Utility to get path of CA Cert
- * @returns 
+ * @returns
  */
 function getPathOfCACert() {
     let relativePath = path.resolve(__dirname, '../../resources/cert.pem');
@@ -384,7 +382,7 @@ function getPathOfCACert() {
 }
 /**
  * Setting ws health status
- * @param {*} status 
+ * @param {*} status
  */
 function setWSHealthStatus(status) {
     websocketHealth = status;
@@ -424,7 +422,7 @@ function addLogEventtoBuffer(logMessage) {
 }
 /**
  * Utility to get framework from APM
- * @returns 
+ * @returns
  */
 function getFramework() {
     let framework = EMPTY_STR;
@@ -451,6 +449,8 @@ function listSkipDetectionCategory() {
     return skipList;
 }
 
+let cronJobInstance = null;
+
 function refreshAgent() {
     const { Agent } = require('./agent');
     if (Agent.getAgent().status.getStatus() == 'disabled' || Agent.getAgent().delayed) {
@@ -465,22 +465,32 @@ function refreshAgent() {
 function executeCronSchedule() {
     try {
         let schedule = NRAgent.config.security.scan_schedule.schedule;
-        if (lodash.isEmpty(schedule)) {
+        if (!schedule) {
+            return;
+        }
+
+        // Prevent creating multiple cron jobs
+        if (cronJobInstance) {
             return;
         }
+
         logger.debug("Schedule config is set to:", schedule);
         schedule = schedule.replace(/\?/g, '*');
-        logger.info("Security Agent scheduled time is set to:", getScheduledScanTime(Math.ceil(cron.timeout(schedule) / 60000)))
-        const job = new cron.CronJob(
-            schedule, // cronTime
-            function () {
-                logger.debug('Cron schedule invoked');
-                logger.info("Security Agent scheduled time is set to:", getScheduledScanTime(Math.ceil(cron.timeout(schedule) / 60000)))
-                refreshAgent()
-            }, // onTick
-            null, // onComplete
-            true, // start
+        logger.info("Security Agent scheduled time is set to:", schedule);
+        const { Agent } = require('./agent');
+        Agent.getAgent().delayed = true
+        cronJobInstance = nodeCron.schedule(
+            schedule,
+            () => {
+                logger.info('Cron schedule invoked at the schedule:',schedule);
+                refreshAgent();
+             },
+             {
+                 scheduled: true,
+                 runOnInit: false,
+             }
         );
+        logger.debug("Cron job instance created successfully");
     } catch (error) {
         logger.error("Error while processing schedule. Please check schedule cron expression", error);
         shutDownAgent();
@@ -506,7 +516,7 @@ function honourDurationConfiguration() {
 }
 /**
  * Utility to send error to error inbox of APM
- * @param {*} error 
+ * @param {*} error
  */
 function sendErrorToErrorInbox(error) {
     API.newrelic.noticeError(error);

package/lib/nr-security-agent/lib/core/connections/aws-lambda-client.js

@@ -3,8 +3,6 @@
  * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
-const _ = require('lodash');
-
 const logger = require('../logging').getLogger();
 
 let lambdaClient;
@@ -21,7 +19,7 @@ function invokeLambda (arn, version, data) {
     if (!lambdaClient) {
         throw new Error('Cannot invoke lambda, client not initialized');
     }
-    if (_.isEmpty(arn) || _.isEmpty(version)) {
+    if (!arn || !version) {
         throw new Error('Cannot invoke lambda, invalid ARN specified');
     }
     const dataString = JSON.stringify(data);

package/lib/nr-security-agent/lib/core/connections/websocket/response/index.js

@@ -3,8 +3,6 @@
  * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
-const _ = require('lodash');
-
 const { SERVER_COMMAND, SEVERE } = require('../../../sec-agent-constants');
 const UnsupportedAgentHandler = require('./unsupported-agent-handler');
 const StartupHandshakeHandler = require('./startup-handshake-handler');
@@ -47,7 +45,7 @@ const handle = function handle (json) {
 };
 
 const setLogger = function setLogger (logger) {
-    _.forEach(commandHandlerMap, (handler) => {
+    Object.values(commandHandlerMap).forEach((handler) => {
         handler.setLogger(logger);
     });
     NoOpHandler.setLogger(logger);

package/lib/nr-security-agent/lib/core/event.js

@@ -10,7 +10,6 @@ const policyManager = require('./Policy');
 const LinkingMetaData = require('./LinkingMetadata');
 const API = require('../../../nr-security-api');
 const NRAgent = API.getNRAgent();
-const lodash = require('lodash');
 const commonUtils = require('./commonUtils');
 const crypto = require('crypto');
 /**
@@ -32,7 +31,8 @@ function BasicInfo() {
         this.framework = EMPTY_STR;
     }
     this.groupName = commonUtils.getCSECmode();
-    this.policyVersion = (!lodash.isEmpty(policyManager.getInstance().data)) ? policyManager.getInstance().data.version : 'DEFAULT';
+    const policyData = policyManager.getInstance().data;
+    this.policyVersion = (policyData && Object.keys(policyData).length > 0) ? policyData.version : 'DEFAULT';
 
     if (NRAgent && NRAgent.config) {
         this.appAccountId = NRAgent.config.account_id;

package/lib/nr-security-agent/lib/core/xss-utils.js

@@ -3,7 +3,6 @@
  * SPDX-License-Identifier: New Relic Software License v1.0
  */
 
-const _ = require('lodash');
 const decode = require('unescape');
 const querystring = require('querystring');
 
@@ -178,7 +177,7 @@ function getXSSConstructs (data) {
                 return constructs;
             }
 
-            if (_.isEmpty(tagName)) {
+            if (!tagName) {
                 return constructs;
             }
 
@@ -206,7 +205,7 @@ function getXSSConstructs (data) {
                 attribRegex.lastIndex++;
             }
 
-            let attribData = _.trim(attribMatcher[0]);
+            let attribData = attribMatcher[0].trim();
 
             currPos = attribRegex.lastIndex - 1;
             tmpCurrPos = data.indexOf(ANGLE_END, tmpStartPos);
@@ -214,7 +213,7 @@ function getXSSConstructs (data) {
             if ((tmpCurrPos === -1 || attribMatcher.index < tmpCurrPos)) {
                 tmpStartPos = tmpCurrPos = attribRegex.lastIndex - 1;
                 tmpStartPos++;
-                if (_.isEmpty(attribMatcher[3]) && attribRegex.lastIndex >= tmpCurrPos) {
+                if (!attribMatcher[3] && attribRegex.lastIndex >= tmpCurrPos) {
                     tmpStartPos = tmpCurrPos = data.indexOf(ANGLE_END, attribMatcher.index);
                     if (tmpStartPos > -1) {
                         attribData = attribData.substring(0, tmpStartPos);
@@ -224,7 +223,7 @@ function getXSSConstructs (data) {
                 const val = attribData.split(EQUALS)[1];
                 const upperCaseAttribKey = key.toUpperCase();
 
-                if (!_.isEmpty(key) && (upperCaseAttribKey.startsWith('ON') || upperCaseAttribKey === 'SRC' || upperCaseAttribKey === 'HREF' ||
+                if (key && (upperCaseAttribKey.startsWith('ON') || upperCaseAttribKey === 'SRC' || upperCaseAttribKey === 'HREF' ||
                     upperCaseAttribKey === 'ACTION' || upperCaseAttribKey === 'FORMACTION' || upperCaseAttribKey === 'SRCDOC' ||
                     upperCaseAttribKey === 'DATA' || decode(val).toUpperCase().replace(/\s/g, '').includes('JAVASCRIPT:') ||
                     htmlEntities.decode(val).toUpperCase().replace(/\s/g, '').includes('JAVASCRIPT:'))) {
@@ -259,7 +258,7 @@ function getXSSConstructs (data) {
                 let body = data.substring(currPos + 1);
                 const tagEnd = body.indexOf(ANGLE_END);
 
-                if (!_.isEmpty(body) && tagEnd !== -1) {
+                if (body && tagEnd !== -1) {
                     body = data.substring(tagEnd);
                     constructs.add(data.substring(startPos, currPos + 1) + body);
                     break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@newrelic/security-agent",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "description": "New Relic Security Agent for Node.js",
   "main": "index.js",
   "jsonVersion": "1.2.9",
@@ -41,22 +41,18 @@
   "dependencies": {
     "check-disk-space": "^3.4.0",
     "content-type": "^1.0.5",
-    "cron": "^3.1.7",
     "fast-safe-stringify": "^2.1.1",
     "find-package-json": "^1.2.0",
     "hash.js": "^1.1.7",
     "html-entities": "^2.3.6",
     "https-proxy-agent": "^7.0.4",
     "is-invalid-path": "^1.0.2",
-    "js-yaml": "^4.1.1",
-    "jsonschema": "^1.4.1",
-    "lodash": "^4.17.21",
     "log4js": "^6.9.1",
-    "pretty-bytes": "^5.6.0",
+    "node-cron": "^4.2.1",
     "request-ip": "^3.3.0",
     "ringbufferjs": "^2.0.0",
     "semver": "^7.5.4",
-    "undici": "^7.16.0",
+    "undici": "^7.19.0",
     "unescape": "^1.0.1",
     "unescape-js": "^1.1.4",
     "uuid": "^9.0.1",

package/lib/nr-security-agent/lib/core/jsonValidator.js

@@ -1,149 +0,0 @@
-/*
- * Copyright 2023 New Relic Corporation. All rights reserved.
- * SPDX-License-Identifier: New Relic Software License v1.0
- */
-
-const Validator = require('jsonschema').Validator;
-const v = new Validator();
-const schema = {
-    title: 'LCPolicy',
-    description: 'A policy for language collectors',
-    type: 'object',
-    properties: {
-        version: {
-            type: 'string',
-            minLength: 1
-        },
-        policyPull: {
-            type: 'boolean'
-        },
-        policyPullInterval: {
-            type: 'integer',
-            minimum: 0,
-            maximum: 2678400
-        },
-        vulnerabilityScan: {
-            type: 'object',
-            properties: {
-                enabled: {
-                    type: 'boolean'
-                },
-                iastScan: {
-                    type: 'object',
-                    properties: {
-                        enabled: {
-                            type: 'boolean'
-                        },
-                        probing: {
-                            type: 'object',
-                            properties: {
-                                interval: {
-                                    type: 'integer',
-                                    minimum: 1,
-                                    maximum: 60
-                                },
-                                batchSize: {
-                                    type: 'integer',
-                                    minimum: 1,
-                                    maximum: 300
-                                }
-                            },
-                            required: [
-                                'interval',
-                                'batchSize'
-                            ]
-                        }
-                    },
-                    required: [
-                        'enabled',
-                        'probing'
-                    ]
-                }
-            },
-            required: [
-                'enabled',
-                'iastScan'
-            ]
-        },
-        protectionMode: {
-            type: 'object',
-            properties: {
-                enabled: {
-                    type: 'boolean'
-                },
-                ipBlocking: {
-                    type: 'object',
-                    properties: {
-                        enabled: {
-                            type: 'boolean'
-                        },
-                        attackerIpBlocking: {
-                            type: 'boolean'
-                        },
-                        ipDetectViaXFF: {
-                            type: 'boolean'
-                        }
-                    },
-                    required: [
-                        'enabled',
-                        'attackerIpBlocking',
-                        'ipDetectViaXFF'
-                    ]
-                },
-                apiBlocking: {
-                    type: 'object',
-                    properties: {
-                        enabled: {
-                            type: 'boolean'
-                        },
-                        protectAllApis: {
-                            type: 'boolean'
-                        },
-                        protectKnownVulnerableApis: {
-                            type: 'boolean'
-                        },
-                        protectAttackedApis: {
-                            type: 'boolean'
-                        }
-                    },
-                    required: [
-                        'enabled',
-                        'protectAllApis',
-                        'protectKnownVulnerableApis',
-                        'protectAttackedApis'
-                    ]
-                }
-            },
-            required: [
-                'enabled',
-                'ipBlocking',
-                'apiBlocking'
-            ]
-        },
-        sendCompleteStackTrace: {
-            type: 'boolean'
-        },
-        enableHTTPRequestPrinting: {
-            type: 'boolean'
-        }
-    },
-    required: [
-        'version',
-        'policyPull',
-        'policyPullInterval',
-        'vulnerabilityScan',
-        'protectionMode',
-        'sendCompleteStackTrace',
-        'enableHTTPRequestPrinting'
-    ]
-};
-
-function validate (data) {
-    const result = v.validate(data, schema);
-    return result;
-}
-
-
-module.exports = {
-    validate
-};