is-antibot 1.5.0 → 1.6.0

package/README.md

@@ -60,7 +60,7 @@ $ npm install is-antibot --save
 
 ## Usage
 
-Just pass `headers`, `html`, and `url` from any HTTP response:
+Just pass `headers`, `html`, `url`, and `statusCode` from any HTTP response:
 
 ```js
 const isAntibot = require('is-antibot')
@@ -70,6 +70,7 @@ const html = await response.text()
 
 const { detected, provider, detection } = isAntibot({
   headers: response.headers,
+  statusCode: response.status,
   html,
   url: response.url
 })
@@ -96,7 +97,7 @@ The library returns an object with the following properties:
 
 - `detected` (boolean): Whether an antibot challenge was detected
 - `provider` (string|null): The name of the detected provider (e.g., 'cloudflare', 'recaptcha')
-- `detection` (string|null): Where the signal came from: `'headers'`, `'cookies'`, `'html'`, or `'url'`
+- `detection` (string|null): Where the signal came from: `'headers'`, `'cookies'`, `'html'`, `'url'`, or `'statusCode'`
 
 ## License
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "is-antibot",
   "description": "Identify if a response is an antibot challenge from CloudFlare, Akamai, DataDome, Vercel, PerimeterX, Shape Security, and more, including CAPTCHA providers like reCAPTCHA and hCaptcha.",
   "homepage": "https://github.com/microlinkhq/is-antibot",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "exports": {
     ".": "./src/index.js"
   },
@@ -82,6 +82,22 @@
   "files": [
     "src"
   ],
+  "scripts": {
+    "clean": "rm -rf node_modules",
+    "contributors": "(npx git-authors-cli && npx finepack && git add package.json && git commit -m 'build: contributors' --no-verify) || true",
+    "coverage": "c8 report --reporter=text-lcov > coverage/lcov.info",
+    "lint": "standard",
+    "postrelease": "npm run release:tags && npm run release:github && (ci-publish || npm publish --access=public)",
+    "pretest": "npm run lint",
+    "release": "pnpm run release:version && pnpm run release:changelog && pnpm run release:commit && pnpm run release:tag",
+    "release:changelog": "conventional-changelog -p conventionalcommits -i CHANGELOG.md -s",
+    "release:commit": "git add package.json CHANGELOG.md && git commit -m \"chore(release): $(node -p \"require('./package.json').version\")\"",
+    "release:github": "github-generate-release",
+    "release:tag": "git tag -a v$(node -p \"require('./package.json').version\") -m \"v$(node -p \"require('./package.json').version\")\"",
+    "release:tags": "git push origin HEAD:master --follow-tags",
+    "release:version": "standard-version --skip.changelog --skip.commit --skip.tag",
+    "test": "c8 ava"
+  },
   "license": "MIT",
   "ava": {
     "files": [
@@ -111,21 +127,5 @@
   "simple-git-hooks": {
     "commit-msg": "npx commitlint --edit",
     "pre-commit": "npx nano-staged"
-  },
-  "scripts": {
-    "clean": "rm -rf node_modules",
-    "contributors": "(npx git-authors-cli && npx finepack && git add package.json && git commit -m 'build: contributors' --no-verify) || true",
-    "coverage": "c8 report --reporter=text-lcov > coverage/lcov.info",
-    "lint": "standard",
-    "postrelease": "npm run release:tags && npm run release:github && (ci-publish || npm publish --access=public)",
-    "pretest": "npm run lint",
-    "release": "pnpm run release:version && pnpm run release:changelog && pnpm run release:commit && pnpm run release:tag",
-    "release:changelog": "conventional-changelog -p conventionalcommits -i CHANGELOG.md -s",
-    "release:commit": "git add package.json CHANGELOG.md && git commit -m \"chore(release): $(node -p \"require('./package.json').version\")\"",
-    "release:github": "github-generate-release",
-    "release:tag": "git tag -a v$(node -p \"require('./package.json').version\") -m \"v$(node -p \"require('./package.json').version\")\"",
-    "release:tags": "git push origin HEAD:master --follow-tags",
-    "release:version": "standard-version --skip.changelog --skip.commit --skip.tag",
-    "test": "c8 ava"
   }
-}
+}

package/src/index.js

@@ -8,7 +8,8 @@ const DETECTION = {
   HEADERS: 'headers',
   COOKIES: 'cookies',
   HTML: 'html',
-  URL: 'url'
+  URL: 'url',
+  STATUS_CODE: 'statusCode'
 }
 
 const createGetHeader = headers =>
@@ -57,7 +58,7 @@ const getHeaderNames = headers =>
     ? Array.from(headers.keys())
     : Object.keys(headers)
 
-const detect = ({ headers = {}, html = '', url = '' } = {}) => {
+const detect = ({ headers = {}, html = '', url = '', statusCode } = {}) => {
   const getHeader = createGetHeader(headers)
   const hasCookie = createHasCookie(headers)
   const htmlHas = createTestPattern(html)
@@ -81,6 +82,9 @@ const detect = ({ headers = {}, html = '', url = '' } = {}) => {
 
   const byUrl = provider => createResult(true, provider, DETECTION.URL)
 
+  const byStatusCode = provider =>
+    createResult(true, provider, DETECTION.STATUS_CODE)
+
   // CloudFlare: Check for cf-mitigated header with 'challenge' value
   // Official docs: https://developers.cloudflare.com/cloudflare-challenges/challenge-types/challenge-pages/detect-response/
   if (getHeader('cf-mitigated') === 'challenge') {
@@ -397,9 +401,9 @@ const detect = ({ headers = {}, html = '', url = '' } = {}) => {
     return byHtml('reddit')
   }
 
-  // LinkedIn: trkCode=bf cookie ("bot filter") is set when LinkedIn blocks a request
-  if (hasAnyCookie(['trkCode=bf'])) {
-    return byCookies('linkedin')
+  // LinkedIn: status 999 is LinkedIn's dedicated bot-detection response
+  if (parseUrl(url).domain === 'linkedin.com' && statusCode === 999) {
+    return byStatusCode('linkedin')
   }
 
   // YouTube: empty title pattern indicates a degraded response requiring BotGuard JS attestation
@@ -428,8 +432,13 @@ const detect = ({ headers = {}, html = '', url = '' } = {}) => {
 }
 
 const isAntibot = (input = {}) => {
-  const { headers, html, body, url } = input
-  return detect({ headers, html: html || body, url })
+  const { headers, html, body, url, statusCode, status } = input
+  return detect({
+    headers,
+    html: html || body,
+    url,
+    statusCode: statusCode ?? status
+  })
 }
 
 module.exports = isAntibot