@stordata/vsphere-soapify 1.0.20250624140830 → 1.0.20250723071028

package/gl-sast-report.json

@@ -55,7 +55,7 @@
       "vendor": {
         "name": "GitLab"
       },
-      "version": "6.3.2"
+      "version": "6.5.0"
     },
     "scanner": {
       "id": "semgrep",
@@ -64,7 +64,7 @@
       "vendor": {
         "name": "GitLab"
       },
-      "version": "1.110.0"
+      "version": "1.118.0"
     },
     "primary_identifiers": [
       {
@@ -620,12 +620,14 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-buffer-noassert-read",
-        "value": "eslint.detect-buffer-noassert-read"
+        "value": "eslint.detect-buffer-noassert-read",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-buffer-noassert.js"
       },
       {
         "type": "semgrep_id",
         "name": "eslint.detect-buffer-noassert-write",
-        "value": "eslint.detect-buffer-noassert-write"
+        "value": "eslint.detect-buffer-noassert-write",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-buffer-noassert.js"
       },
       {
         "type": "semgrep_id",
@@ -635,12 +637,14 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-eval-with-expression",
-        "value": "eslint.detect-eval-with-expression"
+        "value": "eslint.detect-eval-with-expression",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-eval-with-expression.js"
       },
       {
         "type": "semgrep_id",
         "name": "eslint.detect-new-buffer",
-        "value": "eslint.detect-new-buffer"
+        "value": "eslint.detect-new-buffer",
+        "url": "https://github.com/eslint-community/eslint-plugin-security/blob/main/rules/detect-new-buffer.js"
       },
       {
         "type": "semgrep_id",
@@ -655,7 +659,8 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-non-literal-require",
-        "value": "eslint.detect-non-literal-require"
+        "value": "eslint.detect-non-literal-require",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-non-literal-require.js"
       },
       {
         "type": "semgrep_id",
@@ -665,7 +670,8 @@
       {
         "type": "semgrep_id",
         "name": "eslint.detect-pseudoRandomBytes",
-        "value": "eslint.detect-pseudoRandomBytes"
+        "value": "eslint.detect-pseudoRandomBytes",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-pseudoRandomBytes.js"
       },
       {
         "type": "semgrep_id",
@@ -2190,12 +2196,14 @@
       {
         "type": "semgrep_id",
         "name": "java_crypto_rule_JwtDecodeWithoutVerify",
-        "value": "java_crypto_rule_JwtDecodeWithoutVerify"
+        "value": "java_crypto_rule_JwtDecodeWithoutVerify",
+        "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/"
       },
       {
         "type": "semgrep_id",
         "name": "java_crypto_rule_JwtNoneAlgorithm",
-        "value": "java_crypto_rule_JwtNoneAlgorithm"
+        "value": "java_crypto_rule_JwtNoneAlgorithm",
+        "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/"
       },
       {
         "type": "semgrep_id",
@@ -2205,7 +2213,8 @@
       {
         "type": "semgrep_id",
         "name": "java_csrf_rule-UnrestrictedRequestMapping",
-        "value": "java_csrf_rule-UnrestrictedRequestMapping"
+        "value": "java_csrf_rule-UnrestrictedRequestMapping",
+        "url": "https://find-sec-bugs.github.io/bugs.htm#SPRING_CSRF_UNRESTRICTED_REQUEST_MAPPING"
       },
       {
         "type": "semgrep_id",
@@ -2240,7 +2249,8 @@
       {
         "type": "semgrep_id",
         "name": "java_file_rule-FilePathTraversalHttpServlet",
-        "value": "java_file_rule-FilePathTraversalHttpServlet"
+        "value": "java_file_rule-FilePathTraversalHttpServlet",
+        "url": "https://find-sec-bugs.github.io/bugs.htm#PATH_TRAVERSAL_IN"
       },
       {
         "type": "semgrep_id",
@@ -2250,7 +2260,8 @@
       {
         "type": "semgrep_id",
         "name": "java_inject_rule-DangerousGroovyShell",
-        "value": "java_inject_rule-DangerousGroovyShell"
+        "value": "java_inject_rule-DangerousGroovyShell",
+        "url": "https://find-sec-bugs.github.io/bugs.htm#GROOVY_SHELL"
       },
       {
         "type": "semgrep_id",
@@ -2330,7 +2341,13 @@
       {
         "type": "semgrep_id",
         "name": "javascript_exec_rule-child-process",
-        "value": "javascript_exec_rule-child-process"
+        "value": "javascript_exec_rule-child-process",
+        "url": "https://github.com/nodesecurity/eslint-plugin-security/blob/master/rules/detect-child-process.js"
+      },
+      {
+        "type": "semgrep_id",
+        "name": "kotlin_pathtraversal_rule-FilePathTraversal",
+        "value": "kotlin_pathtraversal_rule-FilePathTraversal"
       },
       {
         "type": "semgrep_id",
@@ -2895,7 +2912,8 @@
       {
         "type": "semgrep_id",
         "name": "python_jwt_rule-jwt-none-alg",
-        "value": "python_jwt_rule-jwt-none-alg"
+        "value": "python_jwt_rule-jwt-none-alg",
+        "url": "https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/"
       },
       {
         "type": "semgrep_id",
@@ -3024,17 +3042,17 @@
       }
     ],
     "type": "sast",
-    "start_time": "2025-06-24T14:07:18",
-    "end_time": "2025-06-24T14:07:34",
+    "start_time": "2025-07-23T07:10:05",
+    "end_time": "2025-07-23T07:10:21",
     "status": "success",
     "observability": {
       "events": [
         {
           "event": "collect_sast_scan_metrics_from_pipeline",
-          "property": "becd775d-582f-423d-b2f6-6f3395f738c8",
+          "property": "fb019085-d05f-4779-acc8-6bff32506b32",
           "label": "semgrep",
           "value": 0,
-          "version": "6.3.2",
+          "version": "6.5.0",
           "exit_code": 0,
           "override_count": 0,
           "passthrough_count": 0,

package/gl-sbom-npm-npm.cdx.json

@@ -1,15 +1,15 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.4",
-  "serialNumber": "urn:uuid:29a2b57b-45a7-459c-8aa4-6b12525e3b56",
+  "serialNumber": "urn:uuid:d12de1e6-eded-4818-8544-ddacf49e8b71",
   "version": 1,
   "metadata": {
-    "timestamp": "2025-06-24T14:08:19Z",
+    "timestamp": "2025-07-23T07:10:06Z",
     "tools": [
       {
         "vendor": "GitLab",
         "name": "Gemnasium",
-        "version": "6.1.3"
+        "version": "6.1.8"
       }
     ],
     "authors": [
@@ -323,10 +323,10 @@
     },
     {
       "name": "axios",
-      "version": "1.10.0",
-      "purl": "pkg:npm/axios@1.10.0",
+      "version": "1.11.0",
+      "purl": "pkg:npm/axios@1.11.0",
       "type": "library",
-      "bom-ref": "pkg:npm/axios@1.10.0"
+      "bom-ref": "pkg:npm/axios@1.11.0"
     },
     {
       "name": "axios-ntlm",
@@ -384,6 +384,13 @@
       "type": "library",
       "bom-ref": "pkg:npm/call-bind@1.0.2"
     },
+    {
+      "name": "call-bind-apply-helpers",
+      "version": "1.0.2",
+      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
+      "type": "library",
+      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2"
+    },
     {
       "name": "callsites",
       "version": "3.1.0",
@@ -573,6 +580,13 @@
       "type": "library",
       "bom-ref": "pkg:npm/doctrine@3.0.0"
     },
+    {
+      "name": "dunder-proto",
+      "version": "1.0.1",
+      "purl": "pkg:npm/dunder-proto@1.0.1",
+      "type": "library",
+      "bom-ref": "pkg:npm/dunder-proto@1.0.1"
+    },
     {
       "name": "eastasianwidth",
       "version": "0.2.0",
@@ -601,12 +615,33 @@
       "type": "library",
       "bom-ref": "pkg:npm/es-abstract@1.22.1"
     },
+    {
+      "name": "es-define-property",
+      "version": "1.0.1",
+      "purl": "pkg:npm/es-define-property@1.0.1",
+      "type": "library",
+      "bom-ref": "pkg:npm/es-define-property@1.0.1"
+    },
+    {
+      "name": "es-errors",
+      "version": "1.3.0",
+      "purl": "pkg:npm/es-errors@1.3.0",
+      "type": "library",
+      "bom-ref": "pkg:npm/es-errors@1.3.0"
+    },
+    {
+      "name": "es-object-atoms",
+      "version": "1.1.1",
+      "purl": "pkg:npm/es-object-atoms@1.1.1",
+      "type": "library",
+      "bom-ref": "pkg:npm/es-object-atoms@1.1.1"
+    },
     {
       "name": "es-set-tostringtag",
-      "version": "2.0.1",
-      "purl": "pkg:npm/es-set-tostringtag@2.0.1",
+      "version": "2.1.0",
+      "purl": "pkg:npm/es-set-tostringtag@2.1.0",
       "type": "library",
-      "bom-ref": "pkg:npm/es-set-tostringtag@2.0.1"
+      "bom-ref": "pkg:npm/es-set-tostringtag@2.1.0"
     },
     {
       "name": "es-shim-unscopables",
@@ -855,10 +890,10 @@
     },
     {
       "name": "form-data",
-      "version": "4.0.0",
-      "purl": "pkg:npm/form-data@4.0.0",
+      "version": "4.0.4",
+      "purl": "pkg:npm/form-data@4.0.4",
       "type": "library",
-      "bom-ref": "pkg:npm/form-data@4.0.0"
+      "bom-ref": "pkg:npm/form-data@4.0.4"
     },
     {
       "name": "formidable",
@@ -911,10 +946,17 @@
     },
     {
       "name": "get-intrinsic",
-      "version": "1.2.1",
-      "purl": "pkg:npm/get-intrinsic@1.2.1",
+      "version": "1.3.0",
+      "purl": "pkg:npm/get-intrinsic@1.3.0",
+      "type": "library",
+      "bom-ref": "pkg:npm/get-intrinsic@1.3.0"
+    },
+    {
+      "name": "get-proto",
+      "version": "1.0.1",
+      "purl": "pkg:npm/get-proto@1.0.1",
       "type": "library",
-      "bom-ref": "pkg:npm/get-intrinsic@1.2.1"
+      "bom-ref": "pkg:npm/get-proto@1.0.1"
     },
     {
       "name": "get-stream",
@@ -974,10 +1016,10 @@
     },
     {
       "name": "gopd",
-      "version": "1.0.1",
-      "purl": "pkg:npm/gopd@1.0.1",
+      "version": "1.2.0",
+      "purl": "pkg:npm/gopd@1.2.0",
       "type": "library",
-      "bom-ref": "pkg:npm/gopd@1.0.1"
+      "bom-ref": "pkg:npm/gopd@1.2.0"
     },
     {
       "name": "graphemer",
@@ -1023,24 +1065,24 @@
     },
     {
       "name": "has-symbols",
-      "version": "1.0.3",
-      "purl": "pkg:npm/has-symbols@1.0.3",
+      "version": "1.1.0",
+      "purl": "pkg:npm/has-symbols@1.1.0",
       "type": "library",
-      "bom-ref": "pkg:npm/has-symbols@1.0.3"
+      "bom-ref": "pkg:npm/has-symbols@1.1.0"
     },
     {
       "name": "has-tostringtag",
-      "version": "1.0.0",
-      "purl": "pkg:npm/has-tostringtag@1.0.0",
+      "version": "1.0.2",
+      "purl": "pkg:npm/has-tostringtag@1.0.2",
       "type": "library",
-      "bom-ref": "pkg:npm/has-tostringtag@1.0.0"
+      "bom-ref": "pkg:npm/has-tostringtag@1.0.2"
     },
     {
       "name": "hasown",
-      "version": "2.0.0",
-      "purl": "pkg:npm/hasown@2.0.0",
+      "version": "2.0.2",
+      "purl": "pkg:npm/hasown@2.0.2",
       "type": "library",
-      "bom-ref": "pkg:npm/hasown@2.0.0"
+      "bom-ref": "pkg:npm/hasown@2.0.2"
     },
     {
       "name": "he",
@@ -1371,6 +1413,13 @@
       "type": "library",
       "bom-ref": "pkg:npm/lru-cache@6.0.0"
     },
+    {
+      "name": "math-intrinsics",
+      "version": "1.1.0",
+      "purl": "pkg:npm/math-intrinsics@1.1.0",
+      "type": "library",
+      "bom-ref": "pkg:npm/math-intrinsics@1.1.0"
+    },
     {
       "name": "mime-db",
       "version": "1.42.0",
@@ -1807,10 +1856,10 @@
     },
     {
       "name": "soap",
-      "version": "1.1.12",
-      "purl": "pkg:npm/soap@1.1.12",
+      "version": "1.2.0",
+      "purl": "pkg:npm/soap@1.2.0",
       "type": "library",
-      "bom-ref": "pkg:npm/soap@1.1.12"
+      "bom-ref": "pkg:npm/soap@1.2.0"
     },
     {
       "name": "string-width",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stordata/vsphere-soapify",
-  "version":"1.0.20250624140830",
+  "version":"1.0.20250723071028",
   "description": "A NodeJS abstraction layer for the vSphere SOAP API",
   "main": "index.js",
   "scripts": {
@@ -27,10 +27,10 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "axios": "1.10.0",
+    "axios": "1.11.0",
     "debug": "4.4.1",
     "lodash": "4.17.21",
-    "soap": "1.1.12",
+    "soap": "1.2.0",
     "tough-cookie": "5.1.2"
   },
   "devDependencies": {