cognium-dev 3.23.4 → 3.25.0

package/dist/cli.js

@@ -3325,8 +3325,7 @@ async function loadLanguage(language, wasmPath) {
   if (loading) {
     return loading;
   }
-  const grammarName = language === "typescript" ? "javascript" : language;
-  const wasmModule = configuredLanguageModules[language] ?? configuredLanguageModules[grammarName];
+  const wasmModule = configuredLanguageModules[language];
   if (wasmModule) {
     const loadPromise2 = (async () => {
       const lang = await Language.load(wasmModule);
@@ -3425,20 +3424,19 @@ async function getDefaultWasmPath() {
   return "node_modules/web-tree-sitter/web-tree-sitter.wasm";
 }
 async function getDefaultLanguagePath(language) {
-  const grammarName = language === "typescript" ? "javascript" : language;
   const mods = await getNodeModules();
   if (mods && moduleDir) {
     const packageRoot = mods.join(moduleDir, "..", "..");
-    const distWasmPath = mods.join(packageRoot, "dist", "wasm", `tree-sitter-${grammarName}.wasm`);
+    const distWasmPath = mods.join(packageRoot, "dist", "wasm", `tree-sitter-${language}.wasm`);
     if (mods.existsSync(distWasmPath)) {
       return distWasmPath;
     }
-    const packageWasmPath = mods.join(packageRoot, "wasm", `tree-sitter-${grammarName}.wasm`);
+    const packageWasmPath = mods.join(packageRoot, "wasm", `tree-sitter-${language}.wasm`);
     if (mods.existsSync(packageWasmPath)) {
       return packageWasmPath;
     }
   }
-  return `wasm/tree-sitter-${grammarName}.wasm`;
+  return `wasm/tree-sitter-${language}.wasm`;
 }
 // ../circle-ir/dist/core/extractors/meta.js
 function extractMeta(code, tree, filePath, language) {
@@ -4162,6 +4160,32 @@ function extractJSParameters(params) {
         annotations: [],
         line: child.startPosition.row + 1
       });
+    } else if (child.type === "required_parameter" || child.type === "optional_parameter") {
+      const patternNode = child.childForFieldName("pattern");
+      if (!patternNode)
+        continue;
+      let paramName;
+      if (patternNode.type === "identifier") {
+        paramName = getNodeText(patternNode);
+      } else if (patternNode.type === "rest_pattern" || patternNode.type === "rest_element") {
+        const inner = patternNode.namedChildCount > 0 ? patternNode.namedChild(0) : null;
+        if (!inner)
+          continue;
+        paramName = "..." + getNodeText(inner);
+      } else {
+        paramName = getNodeText(patternNode);
+      }
+      const typeNode = child.childForFieldName("type");
+      let paramType = null;
+      if (typeNode) {
+        paramType = getNodeText(typeNode).replace(/^:\s*/, "");
+      }
+      parameters.push({
+        name: paramName,
+        type: paramType,
+        annotations: [],
+        line: child.startPosition.row + 1
+      });
     }
   }
   return parameters;
@@ -17343,16 +17367,23 @@ class PythonPlugin extends BaseLanguagePlugin {
         argPositions: [0]
       },
       {
-        method: "safe_load",
+        method: "load",
         class: "yaml",
         type: "deserialization",
         cwe: "CWE-502",
-        severity: "high",
-        argPositions: [0],
-        sanitizes: ["yaml_unsafe"]
+        severity: "critical",
+        argPositions: [0]
       },
       {
-        method: "load",
+        method: "unsafe_load",
+        class: "yaml",
+        type: "deserialization",
+        cwe: "CWE-502",
+        severity: "critical",
+        argPositions: [0]
+      },
+      {
+        method: "full_load",
         class: "yaml",
         type: "deserialization",
         cwe: "CWE-502",
@@ -25735,7 +25766,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.23.4";
+var version = "3.25.0";
 
 // src/formatters.ts
 var SINK_SEVERITY = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.23.4",
+  "version": "3.25.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -65,7 +65,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "circle-ir": "^3.23.4"
+    "circle-ir": "^3.25.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",