@schmock/faker 1.9.1 → 1.9.2

package/dist/jsf-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jsf-config.d.ts","sourceRoot":"","sources":["../src/jsf-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAM,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,GAAG,MAAM,mBAAmB,CAAC;AAEpC;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM,SAMhD;AAoBD,wBAAgB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,CAqBhD"}
+{"version":3,"file":"jsf-config.d.ts","sourceRoot":"","sources":["../src/jsf-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAM,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,GAAG,MAAM,mBAAmB,CAAC;AAEpC;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM,SAMhD;AAoBD,wBAAgB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,CAuBhD"}

package/dist/jsf-config.js

@@ -48,5 +48,8 @@ export function getJsf(seed) {
         jsf.option({ random: createSeededRandom(seed) });
         jsf.extend("faker", () => createFakerInstance(seed));
     }
+    else {
+        jsf.option({ random: Math.random });
+    }
     return jsf;
 }

package/dist/overrides.d.ts

@@ -6,7 +6,7 @@ import type { JSONSchema7 } from "json-schema";
  * @param explicitCount - Explicit count override from plugin options
  * @returns Number of array items to generate
  */
-export declare function determineArrayCount(schema: JSONSchema7, explicitCount?: number): number;
+export declare function determineArrayCount(schema: JSONSchema7, explicitCount?: number, random?: () => number): number;
 /**
  * Apply overrides to generated data with support for templates
  * Supports nested paths (dot notation), templates with {{params.id}}, and state access

package/dist/overrides.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overrides.d.ts","sourceRoot":"","sources":["../src/overrides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,EACnB,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,CAyBR;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,GAAG,EACT,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,KAAK,CAAC,EAAE,GAAG,EACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,GAAG,CAsCL"}
+{"version":3,"file":"overrides.d.ts","sourceRoot":"","sources":["../src/overrides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,EACnB,aAAa,CAAC,EAAE,MAAM,EACtB,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAyBR;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,GAAG,EACT,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,KAAK,CAAC,EAAE,GAAG,EACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,GAAG,CAuCL"}

package/dist/overrides.js

@@ -1,4 +1,5 @@
 import { DEFAULT_ARRAY_COUNT } from "./constants.js";
+const DANGEROUS_KEYS = new Set(["__proto__", "constructor", "prototype"]);
 /**
  * Determine number of items to generate for array schema
  * Prefers explicit count, then schema minItems/maxItems, with sane defaults
@@ -6,7 +7,7 @@ import { DEFAULT_ARRAY_COUNT } from "./constants.js";
  * @param explicitCount - Explicit count override from plugin options
  * @returns Number of array items to generate
  */
-export function determineArrayCount(schema, explicitCount) {
+export function determineArrayCount(schema, explicitCount, random = Math.random) {
     if (explicitCount !== undefined) {
         // Handle negative or invalid counts
         if (explicitCount < 0) {
@@ -15,7 +16,7 @@ export function determineArrayCount(schema, explicitCount) {
         return explicitCount;
     }
     if (schema.minItems !== undefined && schema.maxItems !== undefined) {
-        return (Math.floor(Math.random() * (schema.maxItems - schema.minItems + 1)) +
+        return (Math.floor(random() * (schema.maxItems - schema.minItems + 1)) +
             schema.minItems);
     }
     if (schema.minItems !== undefined) {
@@ -41,6 +42,8 @@ export function applyOverrides(data, overrides, params, state, query) {
         return data;
     const result = structuredClone(data);
     for (const [key, value] of Object.entries(overrides)) {
+        if (DANGEROUS_KEYS.has(key))
+            continue;
         // Handle nested paths like "data.id" or "pagination.page"
         if (key.includes(".")) {
             setNestedProperty(result, key, value, { params, state, query });
@@ -75,6 +78,8 @@ function setNestedProperty(obj, path, value, context) {
     // Navigate to the parent of the target property
     for (let i = 0; i < parts.length - 1; i++) {
         const part = parts[i];
+        if (DANGEROUS_KEYS.has(part))
+            return;
         if (!(part in current) ||
             typeof current[part] !== "object" ||
             current[part] === null) {
@@ -84,6 +89,8 @@ function setNestedProperty(obj, path, value, context) {
     }
     // Set the final property
     const finalKey = parts[parts.length - 1];
+    if (DANGEROUS_KEYS.has(finalKey))
+        return;
     if (typeof value === "string" && value.includes("{{")) {
         current[finalKey] = processTemplate(value, context);
     }

package/dist/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAU/C,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,SAAM,GAAG,IAAI,CAiJpE;AA+MD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAgC7D"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAY/C,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,SAAM,GAAG,IAAI,CAiJpE;AAwMD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAmC7D"}

package/dist/validation.js

@@ -1,6 +1,7 @@
 import { ResourceLimitError, SchemaValidationError } from "@schmock/core";
 import { DEEP_NESTING_THRESHOLD, DEFAULT_ARRAY_COUNT, LARGE_ARRAY_THRESHOLD, MAX_ARRAY_SIZE, MAX_NESTING_DEPTH, } from "./constants.js";
 import { createFakerInstance } from "./jsf-config.js";
+let validationFaker;
 export function isJSONSchema7(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -103,7 +104,7 @@ export function validateSchema(schema, path = "$") {
         throw new ResourceLimitError("schema_nesting_depth", MAX_NESTING_DEPTH, depth);
     }
     // Check for dangerous combination of deep nesting + large arrays
-    if (depth >= 4) {
+    if (depth >= DEEP_NESTING_THRESHOLD) {
         checkForDeepNestingWithArrays(schema, path);
     }
     // Check for potentially dangerous array sizes in schema definition
@@ -211,24 +212,19 @@ function checkForDeepNestingWithArrays(schema, _path) {
                 const items = Array.isArray(node.items) ? node.items : [node.items];
                 for (const item of items) {
                     if (isJSONSchema7(item)) {
-                        if (findArraysInDeepNesting(item, currentDepth + 1)) {
-                            return true;
-                        }
+                        findArraysInDeepNesting(item, currentDepth + 1);
                     }
                 }
             }
-            return true;
+            return;
         }
         if (schemaType === "object" && node.properties) {
             for (const prop of Object.values(node.properties)) {
                 if (isJSONSchema7(prop)) {
-                    if (findArraysInDeepNesting(prop, currentDepth + 1)) {
-                        return true;
-                    }
+                    findArraysInDeepNesting(prop, currentDepth + 1);
                 }
             }
         }
-        return false;
     }
     findArraysInDeepNesting(schema, 0);
 }
@@ -281,8 +277,11 @@ export function validateFakerMethod(fakerMethod) {
     if (parts.length < 2) {
         throw new SchemaValidationError("$.faker", `Invalid faker method format: "${fakerMethod}"`, "Use format like 'person.firstName' or 'internet.email'");
     }
-    // Validate by resolving the method path on a real faker instance
-    const faker = createFakerInstance();
+    // Validate by resolving the method path on a cached faker instance
+    if (!validationFaker) {
+        validationFaker = createFakerInstance();
+    }
+    const faker = validationFaker;
     let current = faker;
     for (const part of parts) {
         if (current && typeof current === "object" && part in current) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@schmock/faker",
   "description": "Faker-powered automatic data generation for Schmock",
-  "version": "1.9.1",
+  "version": "1.9.2",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -34,12 +34,12 @@
     "json-schema-faker": "^0.5.6"
   },
   "peerDependencies": {
-    "@schmock/core": "^1.9.1"
+    "@schmock/core": "^1.9.2"
   },
   "devDependencies": {
     "@amiceli/vitest-cucumber": "^6.2.0",
     "@types/json-schema": "^7.0.15",
-    "@types/node": "^25.2.3",
+    "@types/node": "^25.3.0",
     "vitest": "^4.0.18"
   }
 }

package/src/index.ts

@@ -30,7 +30,7 @@ export interface FakerPluginOptions {
 }
 
 export function fakerPlugin(options: FakerPluginOptions): Schmock.Plugin {
-  // Validate schema immediately when plugin is created
+  // Validate schema immediately when plugin is created (fail-fast)
   validateSchema(options.schema);
 
   return {
@@ -81,7 +81,6 @@ export function fakerPlugin(options: FakerPluginOptions): Schmock.Plugin {
 export function generateFromSchema(options: SchemaGenerationContext): any {
   const { schema, count, overrides, params, state, query, seed } = options;
 
-  // Validate schema
   validateSchema(schema);
 
   let generated: any;

package/src/jsf-config.ts

@@ -51,6 +51,8 @@ export function getJsf(seed?: number): typeof jsf {
   if (seed !== undefined) {
     jsf.option({ random: createSeededRandom(seed) });
     jsf.extend("faker", () => createFakerInstance(seed));
+  } else {
+    jsf.option({ random: Math.random });
   }
   return jsf;
 }

package/src/overrides.ts

@@ -1,6 +1,8 @@
 import type { JSONSchema7 } from "json-schema";
 import { DEFAULT_ARRAY_COUNT } from "./constants.js";
 
+const DANGEROUS_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+
 /**
  * Determine number of items to generate for array schema
  * Prefers explicit count, then schema minItems/maxItems, with sane defaults
@@ -11,6 +13,7 @@ import { DEFAULT_ARRAY_COUNT } from "./constants.js";
 export function determineArrayCount(
   schema: JSONSchema7,
   explicitCount?: number,
+  random: () => number = Math.random,
 ): number {
   if (explicitCount !== undefined) {
     // Handle negative or invalid counts
@@ -22,7 +25,7 @@ export function determineArrayCount(
 
   if (schema.minItems !== undefined && schema.maxItems !== undefined) {
     return (
-      Math.floor(Math.random() * (schema.maxItems - schema.minItems + 1)) +
+      Math.floor(random() * (schema.maxItems - schema.minItems + 1)) +
       schema.minItems
     );
   }
@@ -60,6 +63,7 @@ export function applyOverrides(
   const result = structuredClone(data);
 
   for (const [key, value] of Object.entries(overrides)) {
+    if (DANGEROUS_KEYS.has(key)) continue;
     // Handle nested paths like "data.id" or "pagination.page"
     if (key.includes(".")) {
       setNestedProperty(result, key, value, { params, state, query });
@@ -110,6 +114,7 @@ function setNestedProperty(
   // Navigate to the parent of the target property
   for (let i = 0; i < parts.length - 1; i++) {
     const part = parts[i];
+    if (DANGEROUS_KEYS.has(part)) return;
     if (
       !(part in current) ||
       typeof current[part] !== "object" ||
@@ -122,6 +127,7 @@ function setNestedProperty(
 
   // Set the final property
   const finalKey = parts[parts.length - 1];
+  if (DANGEROUS_KEYS.has(finalKey)) return;
   if (typeof value === "string" && value.includes("{{")) {
     current[finalKey] = processTemplate(value, context);
   } else {

package/src/validation.ts

@@ -1,3 +1,4 @@
+import type { Faker } from "@faker-js/faker";
 import { ResourceLimitError, SchemaValidationError } from "@schmock/core";
 import type { JSONSchema7 } from "json-schema";
 import {
@@ -9,6 +10,8 @@ import {
 } from "./constants.js";
 import { createFakerInstance } from "./jsf-config.js";
 
+let validationFaker: Faker | undefined;
+
 export function isJSONSchema7(value: unknown): value is JSONSchema7 {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -153,7 +156,7 @@ export function validateSchema(schema: JSONSchema7, path = "$"): void {
   }
 
   // Check for dangerous combination of deep nesting + large arrays
-  if (depth >= 4) {
+  if (depth >= DEEP_NESTING_THRESHOLD) {
     checkForDeepNestingWithArrays(schema, path);
   }
 
@@ -271,7 +274,7 @@ function checkForDeepNestingWithArrays(
   function findArraysInDeepNesting(
     node: JSONSchema7,
     currentDepth: number,
-  ): boolean {
+  ): void {
     const schemaType = node.type;
     const isArray = Array.isArray(schemaType)
       ? schemaType.includes("array")
@@ -296,27 +299,20 @@ function checkForDeepNestingWithArrays(
         const items = Array.isArray(node.items) ? node.items : [node.items];
         for (const item of items) {
           if (isJSONSchema7(item)) {
-            if (findArraysInDeepNesting(item, currentDepth + 1)) {
-              return true;
-            }
+            findArraysInDeepNesting(item, currentDepth + 1);
           }
         }
       }
-
-      return true;
+      return;
     }
 
     if (schemaType === "object" && node.properties) {
       for (const prop of Object.values(node.properties)) {
         if (isJSONSchema7(prop)) {
-          if (findArraysInDeepNesting(prop, currentDepth + 1)) {
-            return true;
-          }
+          findArraysInDeepNesting(prop, currentDepth + 1);
         }
       }
     }
-
-    return false;
   }
 
   findArraysInDeepNesting(schema, 0);
@@ -391,8 +387,11 @@ export function validateFakerMethod(fakerMethod: string): void {
     );
   }
 
-  // Validate by resolving the method path on a real faker instance
-  const faker = createFakerInstance();
+  // Validate by resolving the method path on a cached faker instance
+  if (!validationFaker) {
+    validationFaker = createFakerInstance();
+  }
+  const faker = validationFaker;
   let current: any = faker;
   for (const part of parts) {
     if (current && typeof current === "object" && part in current) {