@patchstack/connect 0.5.22 → 0.5.23

package/dist/cli.js

@@ -7181,6 +7181,17 @@ function npmPackageOf(spec) {
 // src/map/sinks.ts
 import { createHash as createHash4 } from "crypto";
 
+// src/map/capabilities.ts
+var PACKAGE_SINK_MODELS = [
+  {
+    package: "node-serialize",
+    api: "unserialize",
+    sinkKind: "eval",
+    argumentRole: "code",
+    candidateFamily: "code-injection"
+  }
+];
+
 // src/map/scope.ts
 var scopeCache = /* @__PURE__ */ new WeakMap();
 function declarationOf(id, ts) {
@@ -7300,9 +7311,10 @@ var FS_PACKAGES = ["fs-extra", "graceful-fs", "memfs"];
 var isFsPackage = (pkg) => /^node:fs(\/promises)?$/.test(pkg) || FS_PACKAGES.includes(pkg);
 var EXEC_PACKAGES = ["execa", "cross-spawn", "shelljs", "zx"];
 var isExecPackage = (pkg) => pkg === "node:child_process" || EXEC_PACKAGES.includes(pkg);
-var DESERIALIZE_CALLS = /^unserialize$/;
-var DESERIALIZE_PACKAGES = ["node-serialize"];
-var isDeserializePackage = (pkg) => DESERIALIZE_PACKAGES.includes(pkg);
+var deserializeModel = (pkg, api) => PACKAGE_SINK_MODELS.find(
+  (model) => model.sinkKind === "eval" && model.package === pkg && (api === void 0 || model.api === api)
+);
+var isDeserializePackage = (pkg) => deserializeModel(pkg) !== void 0;
 function recognizedSinkKinds(pkg) {
   const kinds = [];
   if (isDbPackage(pkg)) kinds.push("db");
@@ -7449,7 +7461,7 @@ function directSinks(node, ts, bindings, ctx) {
           if (EXEC_CALLS.test(method) && b.pkg && isExecPackage(b.pkg)) {
             push({ kind: "exec", package: b.pkg, op: method, attribution: "import", ...spanOf(n) });
           }
-          if (DESERIALIZE_CALLS.test(method) && b.pkg && isDeserializePackage(b.pkg)) {
+          if (b.pkg && deserializeModel(b.pkg, method)) {
             push({ kind: "eval", provider: b.root, package: b.pkg, op: method, attribution: "import", ...spanOf(n) });
           }
           if (HTTP_MEMBER_METHODS.has(method)) {
@@ -7479,7 +7491,7 @@ function directSinks(node, ts, bindings, ctx) {
           push({ kind: "exec", package: pkg, op: name, attribution: "import", ...spanOf(n) });
         }
         if (name === "eval" && trueGlobal) push({ kind: "eval", op: "eval", attribution: "global", ...spanOf(n) });
-        if (DESERIALIZE_CALLS.test(name) && pkg && isDeserializePackage(pkg)) {
+        if (pkg && deserializeModel(pkg, name)) {
           push({ kind: "eval", package: pkg, op: name, attribution: "import", ...spanOf(n) });
         }
       }
@@ -7558,7 +7570,10 @@ var CANDIDATE_FAMILIES = {
 };
 function argumentRoleOf(sinkKind, method, index, total = 0) {
   if (sinkKind === "eval" && method === "Function") return index === total - 1 ? "code" : "args";
-  if (sinkKind === "eval" && method === "unserialize") return index === 0 ? "code" : "unknown";
+  const packageModel = PACKAGE_SINK_MODELS.find(
+    (model) => model.sinkKind === sinkKind && model.api === method
+  );
+  if (packageModel) return index === 0 ? packageModel.argumentRole : "unknown";
   const table = method ? ARGUMENT_ROLES[sinkKind]?.[method] : void 0;
   return table?.[index] ?? "unknown";
 }