@quantiya/codevibe-claude-plugin 1.0.37 → 1.0.39

package/node_modules/qs/test/utils.js

@@ -31,6 +31,7 @@ test('merge()', function (t) {
     t.deepEqual(noOptionsNonObjectSource, { foo: 'baz', bar: true });
 
     var func = function f() {};
+    func();
     t.deepEqual(
         utils.merge(func, { foo: 'bar' }),
         [func, { foo: 'bar' }],
@@ -68,6 +69,93 @@ test('merge()', function (t) {
         }
     );
 
+    t.test('with overflow objects (from arrayLimit)', function (st) {
+        // arrayLimit is max index, so with limit 0, max index 0 is allowed (1 element)
+        // To create overflow, need 2+ elements with limit 0, or 3+ with limit 1, etc.
+        st.test('merges primitive into overflow object at next index', function (s2t) {
+            // Create an overflow object via combine: 3 elements (indices 0-2) with limit 0
+            var overflow = utils.combine(['a', 'b'], 'c', 0, false);
+            s2t.ok(utils.isOverflow(overflow), 'overflow object is marked');
+            var merged = utils.merge(overflow, 'd');
+            s2t.deepEqual(merged, { 0: 'a', 1: 'b', 2: 'c', 3: 'd' }, 'adds primitive at next numeric index');
+            s2t.end();
+        });
+
+        st.test('merges primitive into regular object with numeric keys normally', function (s2t) {
+            var obj = { 0: 'a', 1: 'b' };
+            s2t.notOk(utils.isOverflow(obj), 'plain object is not marked as overflow');
+            var merged = utils.merge(obj, 'c');
+            s2t.deepEqual(merged, { 0: 'a', 1: 'b', c: true }, 'adds primitive as key (not at next index)');
+            s2t.end();
+        });
+
+        st.test('merges primitive into object with non-numeric keys normally', function (s2t) {
+            var obj = { foo: 'bar' };
+            var merged = utils.merge(obj, 'baz');
+            s2t.deepEqual(merged, { foo: 'bar', baz: true }, 'adds primitive as key with value true');
+            s2t.end();
+        });
+
+        st.test('with strictMerge, wraps object and primitive in array', function (s2t) {
+            var obj = { foo: 'bar' };
+            var merged = utils.merge(obj, 'baz', { strictMerge: true });
+            s2t.deepEqual(merged, [{ foo: 'bar' }, 'baz'], 'wraps in array with strictMerge');
+            s2t.end();
+        });
+
+        st.test('merges overflow object into primitive', function (s2t) {
+            // Create an overflow object via combine: 2 elements (indices 0-1) with limit 0
+            var overflow = utils.combine(['a'], 'b', 0, false);
+            s2t.ok(utils.isOverflow(overflow), 'overflow object is marked');
+            var merged = utils.merge('c', overflow);
+            s2t.ok(utils.isOverflow(merged), 'result is also marked as overflow');
+            s2t.deepEqual(merged, { 0: 'c', 1: 'a', 2: 'b' }, 'creates object with primitive at 0, source values shifted');
+            s2t.end();
+        });
+
+        st.test('merges overflow object into primitive with plainObjects', function (s2t) {
+            var overflow = utils.combine(['a'], 'b', 0, false);
+            s2t.ok(utils.isOverflow(overflow), 'overflow object is marked');
+            var merged = utils.merge('c', overflow, { plainObjects: true });
+            s2t.ok(utils.isOverflow(merged), 'result is also marked as overflow');
+            s2t.deepEqual(merged, { __proto__: null, 0: 'c', 1: 'a', 2: 'b' }, 'creates null-proto object with primitive at 0');
+            s2t.end();
+        });
+
+        st.test('merges overflow object with multiple values into primitive', function (s2t) {
+            // Create an overflow object via combine: 3 elements (indices 0-2) with limit 0
+            var overflow = utils.combine(['b', 'c'], 'd', 0, false);
+            s2t.ok(utils.isOverflow(overflow), 'overflow object is marked');
+            var merged = utils.merge('a', overflow);
+            s2t.deepEqual(merged, { 0: 'a', 1: 'b', 2: 'c', 3: 'd' }, 'shifts all source indices by 1');
+            s2t.end();
+        });
+
+        st.test('merges regular object into primitive as array', function (s2t) {
+            var obj = { foo: 'bar' };
+            var merged = utils.merge('a', obj);
+            s2t.deepEqual(merged, ['a', { foo: 'bar' }], 'creates array with primitive and object');
+            s2t.end();
+        });
+
+        st.test('merges primitive into array that exceeds arrayLimit', function (s2t) {
+            var arr = ['a', 'b', 'c'];
+            var merged = utils.merge(arr, 'd', { arrayLimit: 1 });
+            s2t.ok(utils.isOverflow(merged), 'result is marked as overflow');
+            s2t.deepEqual(merged, { 0: 'a', 1: 'b', 2: 'c', 3: 'd' }, 'converts to overflow object with primitive appended');
+            s2t.end();
+        });
+
+        st.test('merges array into primitive that exceeds arrayLimit', function (s2t) {
+            var merged = utils.merge('a', ['b', 'c'], { arrayLimit: 1 });
+            s2t.ok(utils.isOverflow(merged), 'result is marked as overflow');
+            s2t.deepEqual(merged, { 0: 'a', 1: 'b', 2: 'c' }, 'converts to overflow object');
+            s2t.end();
+        });
+
+        st.end();
+    });
+
     t.end();
 });
 
@@ -132,6 +220,85 @@ test('combine()', function (t) {
         st.end();
     });
 
+    t.test('with arrayLimit', function (st) {
+        st.test('under the limit', function (s2t) {
+            var combined = utils.combine(['a', 'b'], 'c', 10, false);
+            s2t.deepEqual(combined, ['a', 'b', 'c'], 'returns array when under limit');
+            s2t.ok(Array.isArray(combined), 'result is an array');
+            s2t.end();
+        });
+
+        st.test('exactly at the limit stays as array', function (s2t) {
+            var combined = utils.combine(['a', 'b'], 'c', 3, false);
+            s2t.deepEqual(combined, ['a', 'b', 'c'], 'stays as array when count equals limit');
+            s2t.ok(Array.isArray(combined), 'result is an array');
+            s2t.end();
+        });
+
+        st.test('over the limit', function (s2t) {
+            var combined = utils.combine(['a', 'b', 'c'], 'd', 3, false);
+            s2t.deepEqual(combined, { 0: 'a', 1: 'b', 2: 'c', 3: 'd' }, 'converts to object when over limit');
+            s2t.notOk(Array.isArray(combined), 'result is not an array');
+            s2t.end();
+        });
+
+        st.test('with arrayLimit 1', function (s2t) {
+            var combined = utils.combine([], 'a', 1, false);
+            s2t.deepEqual(combined, ['a'], 'stays as array when count equals limit');
+            s2t.ok(Array.isArray(combined), 'result is an array');
+            s2t.end();
+        });
+
+        st.test('with arrayLimit 0 converts single element to object', function (s2t) {
+            var combined = utils.combine([], 'a', 0, false);
+            s2t.deepEqual(combined, { 0: 'a' }, 'converts to object when count exceeds limit');
+            s2t.notOk(Array.isArray(combined), 'result is not an array');
+            s2t.end();
+        });
+
+        st.test('with arrayLimit 0 and two elements converts to object', function (s2t) {
+            var combined = utils.combine(['a'], 'b', 0, false);
+            s2t.deepEqual(combined, { 0: 'a', 1: 'b' }, 'converts to object when count exceeds limit');
+            s2t.notOk(Array.isArray(combined), 'result is not an array');
+            s2t.end();
+        });
+
+        st.test('with plainObjects option', function (s2t) {
+            var combined = utils.combine(['a', 'b'], 'c', 1, true);
+            var expected = { __proto__: null, 0: 'a', 1: 'b', 2: 'c' };
+            s2t.deepEqual(combined, expected, 'converts to object with null prototype');
+            s2t.equal(Object.getPrototypeOf(combined), null, 'result has null prototype when plainObjects is true');
+            s2t.end();
+        });
+
+        st.end();
+    });
+
+    t.test('with existing overflow object', function (st) {
+        st.test('adds to existing overflow object at next index', function (s2t) {
+            // Create overflow object first via combine: 3 elements (indices 0-2) with limit 0
+            var overflow = utils.combine(['a', 'b'], 'c', 0, false);
+            s2t.ok(utils.isOverflow(overflow), 'initial object is marked as overflow');
+
+            var combined = utils.combine(overflow, 'd', 10, false);
+            s2t.equal(combined, overflow, 'returns the same object (mutated)');
+            s2t.deepEqual(combined, { 0: 'a', 1: 'b', 2: 'c', 3: 'd' }, 'adds value at next numeric index');
+            s2t.end();
+        });
+
+        st.test('does not treat plain object with numeric keys as overflow', function (s2t) {
+            var plainObj = { 0: 'a', 1: 'b' };
+            s2t.notOk(utils.isOverflow(plainObj), 'plain object is not marked as overflow');
+
+            // combine treats this as a regular value, not an overflow object to append to
+            var combined = utils.combine(plainObj, 'c', 10, false);
+            s2t.deepEqual(combined, [{ 0: 'a', 1: 'b' }, 'c'], 'concatenates as regular values');
+            s2t.end();
+        });
+
+        st.end();
+    });
+
     t.end();
 });
 
@@ -234,7 +401,9 @@ test('encode', function (t) {
 });
 
 test('isBuffer()', function (t) {
-    forEach([null, undefined, true, false, '', 'abc', 42, 0, NaN, {}, [], function () {}, /a/g], function (x) {
+    var fn = function () {};
+    fn();
+    forEach([null, undefined, true, false, '', 'abc', 42, 0, NaN, {}, [], fn, /a/g], function (x) {
         t.equal(utils.isBuffer(x), false, inspect(x) + ' is not a buffer');
     });
 
@@ -244,8 +413,9 @@ test('isBuffer()', function (t) {
     var saferBuffer = SaferBuffer.from('abc');
     t.equal(utils.isBuffer(saferBuffer), true, 'SaferBuffer instance is a buffer');
 
-    var buffer = Buffer.from && Buffer.alloc ? Buffer.from('abc') : new Buffer('abc');
-    t.equal(utils.isBuffer(buffer), true, 'real Buffer instance is a buffer');
+    var buffer = SaferBuffer.from('abc');
+    t.notEqual(saferBuffer, buffer, 'different buffer instances');
+    t.equal(utils.isBuffer(buffer), true, 'another Buffer instance is a buffer');
     t.end();
 });
 

package/node_modules/send/package.json

@@ -1,7 +1,7 @@
 {
   "name": "send",
   "description": "Better streaming static file server with Range and conditional-GET support",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "author": "TJ Holowaychuk <tj@vision-media.ca>",
   "contributors": [
     "Douglas Christopher Wilson <doug@somethingdoug.com>",
@@ -10,39 +10,42 @@
   ],
   "license": "MIT",
   "repository": "pillarjs/send",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/express"
+  },
   "keywords": [
     "static",
     "file",
     "server"
   ],
   "dependencies": {
-    "debug": "^4.3.5",
+    "debug": "^4.4.3",
     "encodeurl": "^2.0.0",
     "escape-html": "^1.0.3",
     "etag": "^1.8.1",
     "fresh": "^2.0.0",
-    "http-errors": "^2.0.0",
-    "mime-types": "^3.0.1",
+    "http-errors": "^2.0.1",
+    "mime-types": "^3.0.2",
     "ms": "^2.1.3",
     "on-finished": "^2.4.1",
     "range-parser": "^1.2.1",
-    "statuses": "^2.0.1"
+    "statuses": "^2.0.2"
   },
   "devDependencies": {
     "after": "^0.8.2",
     "eslint": "7.32.0",
     "eslint-config-standard": "14.1.1",
-    "eslint-plugin-import": "2.25.4",
+    "eslint-plugin-import": "2.32.0",
     "eslint-plugin-markdown": "2.2.1",
     "eslint-plugin-node": "11.1.0",
     "eslint-plugin-promise": "5.2.0",
     "eslint-plugin-standard": "4.1.0",
     "mocha": "^10.7.0",
     "nyc": "^17.0.0",
-    "supertest": "6.2.2"
+    "supertest": "6.3.4"
   },
   "files": [
-    "HISTORY.md",
     "LICENSE",
     "README.md",
     "index.js"

package/node_modules/serve-static/README.md

@@ -18,7 +18,7 @@ $ npm install serve-static
 ## API
 
 ```js
-var serveStatic = require('serve-static')
+const serveStatic = require('serve-static')
 ```
 
 ### serveStatic(root, options)
@@ -132,15 +132,15 @@ the arguments are:
 ### Serve files with vanilla node.js http server
 
 ```js
-var finalhandler = require('finalhandler')
-var http = require('http')
-var serveStatic = require('serve-static')
+const finalhandler = require('finalhandler')
+const http = require('http')
+const serveStatic = require('serve-static')
 
 // Serve up public/ftp folder
-var serve = serveStatic('public/ftp', { index: ['index.html', 'index.htm'] })
+const serve = serveStatic('public/ftp', { index: ['index.html', 'index.htm'] })
 
 // Create server
-var server = http.createServer(function onRequest (req, res) {
+const server = http.createServer((req, res) => {
   serve(req, res, finalhandler(req, res))
 })
 
@@ -151,13 +151,13 @@ server.listen(3000)
 ### Serve all files as downloads
 
 ```js
-var contentDisposition = require('content-disposition')
-var finalhandler = require('finalhandler')
-var http = require('http')
-var serveStatic = require('serve-static')
+const contentDisposition = require('content-disposition')
+const finalhandler = require('finalhandler')
+const http = require('http')
+const serveStatic = require('serve-static')
 
 // Serve up public/ftp folder
-var serve = serveStatic('public/ftp', {
+const serve = serveStatic('public/ftp', {
   index: false,
   setHeaders: setHeaders
 })
@@ -168,7 +168,7 @@ function setHeaders (res, path) {
 }
 
 // Create server
-var server = http.createServer(function onRequest (req, res) {
+const server = http.createServer((req, res) => {
   serve(req, res, finalhandler(req, res))
 })
 
@@ -183,10 +183,10 @@ server.listen(3000)
 This is a simple example of using Express.
 
 ```js
-var express = require('express')
-var serveStatic = require('serve-static')
+const express = require('express')
+const serveStatic = require('serve-static')
 
-var app = express()
+const app = express()
 
 app.use(serveStatic('public/ftp', { index: ['default.html', 'default.htm'] }))
 app.listen(3000)
@@ -199,11 +199,11 @@ Files are searched for in `public-optimized/` first, then `public/` second
 as a fallback.
 
 ```js
-var express = require('express')
-var path = require('path')
-var serveStatic = require('serve-static')
+const express = require('express')
+const path = require('path')
+const serveStatic = require('serve-static')
 
-var app = express()
+const app = express()
 
 app.use(serveStatic(path.join(__dirname, 'public-optimized')))
 app.use(serveStatic(path.join(__dirname, 'public')))
@@ -217,11 +217,11 @@ file. In this example, HTML files are not cached, while everything else
 is for 1 day.
 
 ```js
-var express = require('express')
-var path = require('path')
-var serveStatic = require('serve-static')
+const express = require('express')
+const path = require('path')
+const serveStatic = require('serve-static')
 
-var app = express()
+const app = express()
 
 app.use(serveStatic(path.join(__dirname, 'public'), {
   maxAge: '1d',

package/node_modules/serve-static/package.json

@@ -1,10 +1,14 @@
 {
   "name": "serve-static",
   "description": "Serve static files",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
   "license": "MIT",
   "repository": "expressjs/serve-static",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/express"
+  },
   "dependencies": {
     "encodeurl": "^2.0.0",
     "escape-html": "^1.0.3",
@@ -14,7 +18,7 @@
   "devDependencies": {
     "eslint": "7.32.0",
     "eslint-config-standard": "14.1.1",
-    "eslint-plugin-import": "2.25.4",
+    "eslint-plugin-import": "2.32.0",
     "eslint-plugin-markdown": "2.2.1",
     "eslint-plugin-node": "11.1.0",
     "eslint-plugin-promise": "5.2.0",
@@ -25,7 +29,6 @@
   },
   "files": [
     "LICENSE",
-    "HISTORY.md",
     "index.js"
   ],
   "engines": {

package/node_modules/side-channel-list/CHANGELOG.md

@@ -5,11 +5,32 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v1.0.1](https://github.com/ljharb/side-channel-list.git
+/compare/v1.0.0...v1.0.1) - 2026-04-08
+
+### Fixed
+
+- [Fix] `delete`: do not reset the list when deleting the head node of a multi-node list [`#3`](https://github.com/ljharb/side-channel-list.git
+/issues/3)
+
+### Commits
+
+- [actions] update workflows [`9e79e6b`](https://github.com/ljharb/side-channel-list.git
+/commit/9e79e6bf845532fafbf03b547429fe4f737214a3)
+- [Deps] update `@arethetypeswrong/cli`, `@ljharb/eslint-config`, `@ljharb/tsconfig`, `@types/tape`, `eslint`, `npmignore` [`babf3ca`](https://github.com/ljharb/side-channel-list.git
+/commit/babf3ca4849d2fd893a470a6b82c62a80ccc9307)
+- [Deps] update `object-inspect` [`9f0f4b8`](https://github.com/ljharb/side-channel-list.git
+/commit/9f0f4b88ff2aa8b7b7c9e589ac1513f133d64b9f)
+
 ## v1.0.0 - 2024-12-10
 
 ### Commits
 
-- Initial implementation, tests, readme, types [`5d6baee`](https://github.com/ljharb/side-channel-list/commit/5d6baee5c9054a1238007f5a1dfc109a7a816251)
-- Initial commit [`3ae784c`](https://github.com/ljharb/side-channel-list/commit/3ae784c63a47895fbaeed2a91ab54a8029a7a100)
-- npm init [`07055a4`](https://github.com/ljharb/side-channel-list/commit/07055a4d139895565b199dba5fe2479c1a1b9e28)
-- Only apps should have lockfiles [`9573058`](https://github.com/ljharb/side-channel-list/commit/9573058a47494e2d68f8c6c77b5d7fbe441949c1)
+- Initial implementation, tests, readme, types [`5d6baee`](https://github.com/ljharb/side-channel-list.git
+/commit/5d6baee5c9054a1238007f5a1dfc109a7a816251)
+- Initial commit [`3ae784c`](https://github.com/ljharb/side-channel-list.git
+/commit/3ae784c63a47895fbaeed2a91ab54a8029a7a100)
+- npm init [`07055a4`](https://github.com/ljharb/side-channel-list.git
+/commit/07055a4d139895565b199dba5fe2479c1a1b9e28)
+- Only apps should have lockfiles [`9573058`](https://github.com/ljharb/side-channel-list.git
+/commit/9573058a47494e2d68f8c6c77b5d7fbe441949c1)

package/node_modules/side-channel-list/index.js

@@ -84,9 +84,8 @@ module.exports = function getSideChannelList() {
 			}
 		},
 		'delete': function (key) {
-			var root = $o && $o.next;
 			var deletedNode = listDelete($o, key);
-			if (deletedNode && root && root === deletedNode) {
+			if (deletedNode && $o && !$o.next) {
 				$o = void undefined;
 			}
 			return !!deletedNode;
@@ -108,6 +107,5 @@ module.exports = function getSideChannelList() {
 			listSet(/** @type {NonNullable<typeof $o>} */ ($o), key, value);
 		}
 	};
-	// @ts-expect-error TODO: figure out why this is erroring
 	return channel;
 };

package/node_modules/side-channel-list/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "side-channel-list",
-	"version": "1.0.0",
+	"version": "1.0.1",
 	"description": "Store information about any JS value in a side channel, using a linked list",
 	"main": "index.js",
 	"exports": {
@@ -38,21 +38,21 @@
 	"homepage": "https://github.com/ljharb/side-channel-list#readme",
 	"dependencies": {
 		"es-errors": "^1.3.0",
-		"object-inspect": "^1.13.3"
+		"object-inspect": "^1.13.4"
 	},
 	"devDependencies": {
-		"@arethetypeswrong/cli": "^0.17.1",
-		"@ljharb/eslint-config": "^21.1.1",
-		"@ljharb/tsconfig": "^0.2.2",
+		"@arethetypeswrong/cli": "^0.18.2",
+		"@ljharb/eslint-config": "^22.2.2",
+		"@ljharb/tsconfig": "^0.3.2",
 		"@types/object-inspect": "^1.13.0",
-		"@types/tape": "^5.6.5",
+		"@types/tape": "^5.8.1",
 		"auto-changelog": "^2.5.0",
 		"eclint": "^2.8.1",
 		"encoding": "^0.1.13",
-		"eslint": "=8.8.0",
+		"eslint": "^8.57.1",
 		"evalmd": "^0.0.19",
 		"in-publish": "^2.0.1",
-		"npmignore": "^0.3.1",
+		"npmignore": "^0.3.5",
 		"nyc": "^10.3.2",
 		"safe-publish-latest": "^2.0.0",
 		"tape": "^5.9.0",

package/node_modules/side-channel-list/test/index.js

@@ -100,5 +100,55 @@ test('getSideChannelList', function (t) {
 		st.end();
 	});
 
+	t.test('delete: first node in a multi-node list', function (st) {
+		var channel = getSideChannelList();
+
+		channel.set('a', 1);
+		channel.set('b', 2);
+
+		st.equal(channel['delete']('b'), true, 'deleting first data node yields true');
+
+		st.equal(channel.has('a'), true, 'second node is still present after deleting first');
+		st.equal(channel.get('a'), 1, 'second node value is intact after deleting first');
+		st.equal(channel.has('b'), false, 'deleted node is gone');
+
+		st.end();
+	});
+
+	t.test('delete: last remaining node empties the list', function (st) {
+		var channel = getSideChannelList();
+
+		channel.set('a', 1);
+		channel.set('b', 2);
+
+		st.equal(channel['delete']('b'), true, 'delete first node');
+		st.equal(channel['delete']('a'), true, 'delete second (last) node');
+
+		st.equal(channel.has('a'), false, 'a is gone');
+		st.equal(channel.has('b'), false, 'b is gone');
+		st.equal(channel.get('a'), undefined, 'get a yields undefined');
+
+		channel.set('c', 3);
+		st.equal(channel.get('c'), 3, 'can set new values after emptying');
+
+		st.end();
+	});
+
+	t.test('delete: middle node in a multi-node list', function (st) {
+		var channel = getSideChannelList();
+
+		channel.set('a', 1);
+		channel.set('b', 2);
+		channel.set('c', 3);
+
+		st.equal(channel['delete']('b'), true, 'deleting middle node yields true');
+
+		st.equal(channel.get('a'), 1, 'first node still intact');
+		st.equal(channel.has('b'), false, 'middle node is gone');
+		st.equal(channel.get('c'), 3, 'last node still intact');
+
+		st.end();
+	});
+
 	t.end();
 });

package/node_modules/uuid/dist/v35.js

@@ -27,6 +27,9 @@ export default function v35(version, hash, value, namespace, buf, offset) {
     bytes[8] = (bytes[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = bytes[i];
         }

package/node_modules/uuid/dist/v6.js

@@ -7,6 +7,9 @@ function v6(options, buf, offset) {
     let bytes = v1({ ...options, _v6: true }, new Uint8Array(16));
     bytes = v1ToV6(bytes);
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
             buf[offset + i] = bytes[i];
         }

package/node_modules/uuid/dist-node/v35.js

@@ -27,6 +27,9 @@ export default function v35(version, hash, value, namespace, buf, offset) {
     bytes[8] = (bytes[8] & 0x3f) | 0x80;
     if (buf) {
         offset = offset || 0;
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; ++i) {
             buf[offset + i] = bytes[i];
         }

package/node_modules/uuid/dist-node/v6.js

@@ -7,6 +7,9 @@ function v6(options, buf, offset) {
     let bytes = v1({ ...options, _v6: true }, new Uint8Array(16));
     bytes = v1ToV6(bytes);
     if (buf) {
+        if (offset < 0 || offset + 16 > buf.length) {
+            throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
+        }
         for (let i = 0; i < 16; i++) {
             buf[offset + i] = bytes[i];
         }

package/node_modules/uuid/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uuid",
-  "version": "13.0.0",
+  "version": "13.0.2",
   "description": "RFC9562 UUIDs",
   "type": "module",
   "funding": [

package/node_modules/ws/index.js

@@ -1,13 +1,22 @@
 'use strict';
 
+const createWebSocketStream = require('./lib/stream');
+const extension = require('./lib/extension');
+const PerMessageDeflate = require('./lib/permessage-deflate');
+const Receiver = require('./lib/receiver');
+const Sender = require('./lib/sender');
+const subprotocol = require('./lib/subprotocol');
 const WebSocket = require('./lib/websocket');
+const WebSocketServer = require('./lib/websocket-server');
 
-WebSocket.createWebSocketStream = require('./lib/stream');
-WebSocket.Server = require('./lib/websocket-server');
-WebSocket.Receiver = require('./lib/receiver');
-WebSocket.Sender = require('./lib/sender');
-
+WebSocket.createWebSocketStream = createWebSocketStream;
+WebSocket.extension = extension;
+WebSocket.PerMessageDeflate = PerMessageDeflate;
+WebSocket.Receiver = Receiver;
+WebSocket.Sender = Sender;
+WebSocket.Server = WebSocketServer;
+WebSocket.subprotocol = subprotocol;
 WebSocket.WebSocket = WebSocket;
-WebSocket.WebSocketServer = WebSocket.Server;
+WebSocket.WebSocketServer = WebSocketServer;
 
 module.exports = WebSocket;

package/node_modules/ws/lib/constants.js

@@ -7,6 +7,7 @@ if (hasBlob) BINARY_TYPES.push('blob');
 
 module.exports = {
   BINARY_TYPES,
+  CLOSE_TIMEOUT: 30000,
   EMPTY_BUFFER: Buffer.alloc(0),
   GUID: '258EAFA5-E914-47DA-95CA-C5AB0DC85B11',
   hasBlob,