jscrambler 8.5.1 → 8.6.1

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # jscrambler
 
+## 8.6.1
+
+### Patch Changes
+
+- [bf31071]: bump glob dependency version as 8.1.0 is no longer supported
+- [dadea38]: remove unused dependencies, and bump others, specially due to vulnerabilites
+
+## 8.6.0
+
+### Minor Changes
+
+- [051fda1]: Added --save-src flag to control sources storage behavior.
+
 ## 8.5.1
 
 ### Patch Changes

package/dist/bin/jscrambler.js

@@ -117,7 +117,7 @@ const validateBeforeProtection = function () {
   });
   return beforeProtectionArray;
 };
-_commander.default.version(require('../../package.json').version).usage('[options] <file ...>').option('-a, --access-key <accessKey>', 'Access key').option('-c, --config <config>', 'Jscrambler configuration options').option('-H, --host <host>', 'Hostname').option('-i, --application-id <id>', 'Application ID').option('-o, --output-dir <dir>', 'Output directory').option('-p, --port <port>', 'Port').option('--base-path <path>', 'Base Path').option('--protocol <protocol>', 'Protocol (http or https)').option('--cafile <path>', 'Internal certificate authority').option('-C, --cwd <dir>', 'Current Working Directory').option('-s, --secret-key <secretKey>', 'Secret key').option('-m, --source-maps <id>', 'Download source maps').option('-R, --randomization-seed <seed>', 'Set randomization seed').option('--instrument', 'Instrument file(s) before start profiling. ATTENTION: previous profiling information will be deleted').option('--start-profiling', 'Starts profiling (assumes an already instrumented application)').option('--stop-profiling', 'Stops profiling').option('--code-hardening-threshold <threshold>', 'Set code hardening file size threshold. Format: {value}{unit="b,kb,mb"}. Example: 200kb', validateCodeHardeningThreshold).option('--recommended-order <bool>', 'Use recommended order', validateBool('recommended-order')).option('-W, --werror <bool>', 'Set werror flag value (default: true)', validateBool('werror')).option('--utc <bool>', 'Set UTC as the request time zone. Otherwise it uses the local time zone (default: true)', validateBool('utc')).option('--tolerate-minification <bool>', "Don't detect minification as malicious tampering (default: true)", validateBool('tolerate-minification')).option('--use-profiling-data <bool>', "(version 6.2 only) Protection should use the existing profiling data (default: true)", validateBool('use-profiling-data')).option('--profiling-data-mode <mode>', "(version 6.3 and above) Select profiling mode (default: automatic)", validateProfilingDataMode).option('--remove-profiling-data', "Removes the current application profiling information").option('--use-app-classification <bool>', '(version 6.3 and above) Protection should use Application Classification metadata when protecting (default: true)', validateBool('--use-app-classification')).option('--input-symbol-table <file>', '(version 6.3 and above) Protection should use symbol table when protecting. (default: no file)').option('--output-symbol-table <id>', '(version 6.3 and above) Download output symbol table (json)').option('--jscramblerVersion <version>', 'Use a specific Jscrambler version').option('--debugMode', 'Protect in debug mode').option('--skip-sources', 'Prevent source files from being updated').option('--force-app-environment <environment>', "(version 7.1 and above) Override application's environment detected automatically. Possible values: ".concat(availableEnvironments.toString()), validateForceAppEnvironment).option('--ensure-code-annotation <bool>', "(version 7.3 and above) Fail protection if no annotations are found on the source code (default: false)", validateBool('ensure-code-annotation')).option('-n <number>', "(version 7.2 and above) Create multiple protections at once.").option('--delete-protection-on-success <bool>', 'Deletes the protection files after they have been protected and downloaded (default: false)', validateBool('--delete-protection-on-success')).option('--mode <mode>', "(version 8.4 and above) Define protection mode. Possible values: automatic, manual (default: manual)", validateMode).parse(process.argv);
+_commander.default.version(require('../../package.json').version).usage('[options] <file ...>').option('-a, --access-key <accessKey>', 'Access key').option('-c, --config <config>', 'Jscrambler configuration options').option('-H, --host <host>', 'Hostname').option('-i, --application-id <id>', 'Application ID').option('-o, --output-dir <dir>', 'Output directory').option('-p, --port <port>', 'Port').option('--base-path <path>', 'Base Path').option('--protocol <protocol>', 'Protocol (http or https)').option('--cafile <path>', 'Internal certificate authority').option('-C, --cwd <dir>', 'Current Working Directory').option('-s, --secret-key <secretKey>', 'Secret key').option('-m, --source-maps <id>', 'Download source maps').option('-R, --randomization-seed <seed>', 'Set randomization seed').option('--instrument', 'Instrument file(s) before start profiling. ATTENTION: previous profiling information will be deleted').option('--start-profiling', 'Starts profiling (assumes an already instrumented application)').option('--stop-profiling', 'Stops profiling').option('--code-hardening-threshold <threshold>', 'Set code hardening file size threshold. Format: {value}{unit="b,kb,mb"}. Example: 200kb', validateCodeHardeningThreshold).option('--recommended-order <bool>', 'Use recommended order', validateBool('recommended-order')).option('-W, --werror <bool>', 'Set werror flag value (default: true)', validateBool('werror')).option('--utc <bool>', 'Set UTC as the request time zone. Otherwise it uses the local time zone (default: true)', validateBool('utc')).option('--tolerate-minification <bool>', "Don't detect minification as malicious tampering (default: true)", validateBool('tolerate-minification')).option('--use-profiling-data <bool>', "(version 6.2 only) Protection should use the existing profiling data (default: true)", validateBool('use-profiling-data')).option('--profiling-data-mode <mode>', "(version 6.3 and above) Select profiling mode (default: automatic)", validateProfilingDataMode).option('--remove-profiling-data', "Removes the current application profiling information").option('--use-app-classification <bool>', '(version 6.3 and above) Protection should use Application Classification metadata when protecting (default: true)', validateBool('--use-app-classification')).option('--input-symbol-table <file>', '(version 6.3 and above) Protection should use symbol table when protecting. (default: no file)').option('--output-symbol-table <id>', '(version 6.3 and above) Download output symbol table (json)').option('--jscramblerVersion <version>', 'Use a specific Jscrambler version').option('--debugMode', 'Protect in debug mode').option('--skip-sources', 'Prevent source files from being updated').option('--force-app-environment <environment>', "(version 7.1 and above) Override application's environment detected automatically. Possible values: ".concat(availableEnvironments.toString()), validateForceAppEnvironment).option('--ensure-code-annotation <bool>', "(version 7.3 and above) Fail protection if no annotations are found on the source code (default: false)", validateBool('ensure-code-annotation')).option('-n <number>', "(version 7.2 and above) Create multiple protections at once.").option('--delete-protection-on-success <bool>', 'Deletes the protection files after they have been protected and downloaded (default: false)', validateBool('--delete-protection-on-success')).option('--mode <mode>', "(version 8.4 and above) Define protection mode. Possible values: automatic, manual (default: manual)", validateMode).option('--save-src <bool>', 'Protection should save application sources (default: true)', validateBool('--save-src')).parse(process.argv);
 let globSrc, filesSrc, config;
 
 // If -c, --config file was provided
@@ -197,6 +197,11 @@ if (config.beforeProtection) {
 if (_commander.default.deleteProtectionOnSuccess) {
   config.deleteProtectionOnSuccess = _commander.default.deleteProtectionOnSuccess === 'true';
 }
+if (_commander.default.saveSrc) {
+  config.saveSrc = _commander.default.saveSrc !== 'false';
+} else {
+  config.saveSrc = config.saveSrc !== false;
+}
 globSrc = config.filesSrc;
 // If src paths have been provided
 if (_commander.default.args.length > 0) {
@@ -278,7 +283,8 @@ const {
   forceAppEnvironment,
   beforeProtection,
   deleteProtectionOnSuccess,
-  mode
+  mode,
+  saveSrc
 } = config;
 const params = config.params;
 const incompatibleOptions = ['sourceMaps', 'instrument', 'startProfiling', 'stopProfiling'];
@@ -395,7 +401,8 @@ if (_commander.default.sourceMaps) {
       forceAppEnvironment,
       beforeProtection,
       deleteProtectionOnSuccess,
-      mode
+      mode,
+      saveSrc
     });
     try {
       if (typeof werror !== 'undefined') {

package/dist/config.js

@@ -17,6 +17,7 @@ const config = (0, _rc.default)('jscrambler', {
   werror: true,
   clientId: _constants.CLIENT_IDS.CLI,
   utc: true,
-  maxRetries: 5
+  maxRetries: 5,
+  saveSrc: true
 }, []);
 var _default = exports.default = config;

package/dist/index.js

@@ -112,8 +112,9 @@ var _default = exports.default = {
    *  sources: Array.<{filename: string, content: string}>,
    *  filesSrc: Array.<string>,
    *  cwd: string,
+   *  saveSrc: boolean,
    *  appProfiling: ?object,
-   * runBeforeProtection?: Array<{type: string, target: string, source: string }>
+   *  runBeforeProtection?: Array<{type: string, target: string, source: string }>
    * }} opts
    * @returns {Promise<{extension: string, filename: string, content: *}>}
    */
@@ -123,6 +124,7 @@ var _default = exports.default = {
       filesSrc,
       cwd,
       appProfiling,
+      saveSrc = true,
       runBeforeProtection = []
     } = _ref;
     if (sources || filesSrc && filesSrc.length) {
@@ -179,7 +181,9 @@ var _default = exports.default = {
         filename: 'application.zip',
         extension: 'zip'
       };
-      errorHandler(await this.addApplicationSource(client, applicationId, source));
+      if (saveSrc) {
+        errorHandler(await this.addApplicationSource(client, applicationId, source));
+      }
     }
     return source;
   },
@@ -269,7 +273,8 @@ var _default = exports.default = {
       ensureCodeAnnotation,
       forceAppEnvironment,
       deleteProtectionOnSuccess,
-      mode
+      mode,
+      saveSrc
     } = finalConfig;
     const {
       accessKey,
@@ -331,7 +336,8 @@ var _default = exports.default = {
         filesSrc,
         cwd,
         appProfiling,
-        runBeforeProtection
+        runBeforeProtection,
+        saveSrc
       });
     } else {
       console.log('Update source files SKIPPED');
@@ -364,7 +370,7 @@ var _default = exports.default = {
         updateData[prop] = value;
       }
     }
-    if (updateData.parameters || updateData.applicationTypes || updateData.languageSpecifications || updateData.browsers || typeof updateData.areSubscribersOrdered !== 'undefined') {
+    if ((updateData.parameters || updateData.applicationTypes || updateData.languageSpecifications || updateData.browsers || typeof updateData.areSubscribersOrdered !== 'undefined') && saveSrc) {
       if (debug) {
         console.log('Updating parameters of protection');
       }

package/dist/utils.js

@@ -8,7 +8,7 @@ exports.concatenate = concatenate;
 exports.getMatchedFiles = getMatchedFiles;
 exports.isJavascriptFile = isJavascriptFile;
 exports.validateNProtections = validateNProtections;
-var _glob = _interopRequireDefault(require("glob"));
+var _glob = require("glob");
 var _fs = _interopRequireDefault(require("fs"));
 var _path = require("path");
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
@@ -18,7 +18,7 @@ function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { de
  * @returns {string[]}
  */
 function getMatchedFiles(pattern) {
-  let matchedFiles = _glob.default.sync(pattern, {
+  let matchedFiles = _glob.glob.sync(pattern, {
     dot: true
   });
 
@@ -43,7 +43,7 @@ const APPEND_JS_TYPE = exports.APPEND_JS_TYPE = 'append-js';
 const PREPEND_JS_TYPE = exports.PREPEND_JS_TYPE = 'prepend-js';
 
 /**
- * 
+ *
  * @param {*} firstFile if prepending: script file; if appending: target file.
  * @param {*} secondFile if prepending: target file; if appending: script file.
  * @returns first and second files concatenated
@@ -56,7 +56,7 @@ function handleScriptConcatenation(firstFile, secondFile) {
 }
 
 /**
- * 
+ *
  * @param {*} scriptObject the object with the script content: { target: '/path/to/target/file', source: '/path/to/script/file', type: 'append-js' | 'prepend-js' }. Its used for both appending and prepending.
  * @param {*} cwd current working directory, passed by argument
  * @param {*} path file path (file being parsed)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "jscrambler",
   "description": "Jscrambler API client.",
-  "version": "8.5.1",
+  "version": "8.6.1",
   "homepage": "https://github.com/jscrambler/jscrambler",
   "author": "Jscrambler <support@jscrambler.com>",
   "repository": {
@@ -21,23 +21,19 @@
     "node": ">= 12.17.0"
   },
   "dependencies": {
-    "axios": "^1.4.0",
+    "axios": "^1.7.2",
     "commander": "^2.8.1",
-    "core-js": "^3.16.4",
     "filesize-parser": "1.5.0",
-    "glob": "^8.1.0",
+    "glob": "10.4.5",
     "http-proxy-agent": "7.0.2",
     "https-proxy-agent": "7.0.4",
-    "jszip": "^3.7.1",
+    "jszip": "^3.8.0",
     "lodash.clone": "^4.0.3",
     "lodash.clonedeep": "^4.5.0",
     "lodash.defaults": "^4.0.1",
     "lodash.keys": "^4.0.1",
     "lodash.size": "^4.0.1",
-    "q": "^1.4.1",
-    "rc": "^1.1.0",
-    "snake-case": "^2.1.0",
-    "temp": "^0.8.3"
+    "rc": "^1.1.0"
   },
   "devDependencies": {
     "@babel/cli": "^7.23.4",