n8n-nodes-globals-fork-test 1.1.2

package/LICENSE.md

@@ -0,0 +1,21 @@
+Copyright 2022 n8n
+Copyright 2024 Vasily Maslyukov (upstream author of n8n-nodes-globals)
+Copyright 2026 fork-test maintainer (fork)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,36 @@
+n8n-nodes-globals-fork-test
+===========================
+
+This package is a security-hardened fork of the upstream project
+`n8n-nodes-globals` by Vasily Maslyukov (umanamente).
+
+Fork attribution
+----------------
+- Upstream repository : https://github.com/umanamente/n8n-nodes-globals
+- Upstream license    : MIT (preserved unchanged; see LICENSE.md)
+- Upstream version    : 1.1.0
+- Upstream commit SHA : d3e7a4721b7cc74704a3f2395b9eebb9a2fa2848
+- Fork date           : 2026-05-20
+
+Relationship to upstream
+------------------------
+This fork preserves the upstream source code of the n8n node and credential
+implementation verbatim. The fork adds:
+
+- Hardened build / dependency configuration (.npmrc, pinned devDependencies,
+  removed gulp toolchain, replaced with a minimal Node script).
+- Lockfile-pinned, audit-validated dependency tree.
+- CI workflows for build, test, signature verification, SBOM generation,
+  and SAST (CodeQL).
+- Dependabot configuration for controlled dependency updates.
+- Additional documentation covering security posture, deployment, and
+  architecture.
+
+No functional change has been made to the n8n node behaviour relative to
+upstream 1.1.0.
+
+License
+-------
+All rights and copyrights of the upstream authors are preserved.
+The fork is distributed under the same MIT license terms as upstream.
+See LICENSE.md for the full license text.

package/README.md

@@ -0,0 +1,52 @@
+# n8n-nodes-globals-fork-test
+
+> Security-hardened fork of [`n8n-nodes-globals`](https://github.com/umanamente/n8n-nodes-globals) by Vasily Maslyukov ([umanamente](https://github.com/umanamente)).
+>
+> Forked from upstream commit [`d3e7a47`](https://github.com/umanamente/n8n-nodes-globals/commit/d3e7a4721b7cc74704a3f2395b9eebb9a2fa2848) (v1.1.0).
+> **The n8n node behaviour is unchanged** — this fork only hardens the build, dependency, and release pipeline.
+
+This is an n8n community node. It lets you create global constants that can be used in any workflow.
+
+## Installation
+
+In your n8n instance, install the package using the community-node installation flow:
+
+```
+n8n-nodes-globals-fork-test
+```
+
+See the [official n8n community-nodes installation guide](https://docs.n8n.io/integrations/community-nodes/installation/).
+
+## Usage
+
+This node uses an N8N Credential to store the global variables.
+
+1. Add the **Global Constants** node to your workflow.
+2. In the node configuration, either select an existing credential or create a new one.
+3. Select the format for your global constants:
+   - **Key-value pairs** — one `name=value` per line
+   - **JSON** — provide constants as a JSON object
+4. Add your constants according to the chosen format.
+5. Reference the global constants downstream in your workflow.
+
+## Why this fork exists
+
+This fork was created to:
+
+- Lock the dependency tree to specific, audited versions (no floating ranges).
+- Block lifecycle scripts during installation as a defence against malicious devDependency hooks.
+- Add reproducible CI: build, test, `npm audit signatures`, `lockfile-lint`, SBOM, SAST.
+- Provide an SBOM (CycloneDX) describing every dependency.
+- Allow controlled updates via Dependabot rather than untrusted upstream releases.
+
+See [`docs/security.md`](docs/security.md) for the full hardening details.
+
+## Relationship to upstream
+
+The maintainers of this fork are **not affiliated** with the upstream author. All credit for the n8n node implementation goes to [Vasily Maslyukov](https://github.com/umanamente).
+
+This fork tracks upstream selectively: bugfix and security patches are merged after manual review; speculative or feature changes that expand the dependency surface may be deferred or skipped.
+
+## License
+
+MIT — see [`LICENSE.md`](LICENSE.md) and [`NOTICE`](NOTICE).

package/dist/credentials/CredentialsUtils.d.ts

@@ -0,0 +1,3 @@
+export declare function splitConstants(globalConstantsMultiline: string): {
+    [key: string]: string;
+};

package/dist/credentials/CredentialsUtils.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.splitConstants = void 0;
+function splitConstants(globalConstantsMultiline) {
+    try {
+        const jsonObj = JSON.parse(globalConstantsMultiline.trim());
+        return jsonObj;
+    }
+    catch (e) {
+        const lines = globalConstantsMultiline.split('\n');
+        var retArr = {};
+        for (const line of lines) {
+            const constant = line.trim();
+            if (!constant) {
+                continue;
+            }
+            if (!constant.includes('=')) {
+                continue;
+            }
+            const [name, ...value] = constant.split('=');
+            retArr[name.trim()] = value.join('=').trim();
+        }
+        return retArr;
+    }
+}
+exports.splitConstants = splitConstants;
+//# sourceMappingURL=CredentialsUtils.js.map

package/dist/credentials/CredentialsUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialsUtils.js","sourceRoot":"","sources":["../../credentials/CredentialsUtils.ts"],"names":[],"mappings":";;;AAAA,SAAgB,cAAc,CAAC,wBAAgC;IAG7D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,OAAO,OAAoC,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAEX,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM,GAA8B,EAAE,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AA1BD,wCA0BC"}

package/dist/credentials/GlobalConstantsCredentials.credentials.d.ts

@@ -0,0 +1,11 @@
+import { ICredentialType, INodeProperties } from "n8n-workflow";
+export declare const GLOBAL_CONSTANTS_CREDENTIALS_NAME = "globalConstantsApi";
+export declare class GlobalConstantsCredentials implements ICredentialType {
+    name: string;
+    displayName: string;
+    properties: INodeProperties[];
+}
+export interface GlobalConstantsCredentialsData {
+    format: 'string' | 'json';
+    globalConstants: string;
+}

package/dist/credentials/GlobalConstantsCredentials.credentials.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GlobalConstantsCredentials = exports.GLOBAL_CONSTANTS_CREDENTIALS_NAME = void 0;
+exports.GLOBAL_CONSTANTS_CREDENTIALS_NAME = 'globalConstantsApi';
+class GlobalConstantsCredentials {
+    constructor() {
+        this.name = exports.GLOBAL_CONSTANTS_CREDENTIALS_NAME;
+        this.displayName = 'Global Constants';
+        this.properties = [
+            {
+                displayName: 'Format',
+                name: 'format',
+                type: 'options',
+                options: [
+                    {
+                        name: 'Key-value pairs',
+                        value: 'string',
+                    },
+                    {
+                        name: 'JSON',
+                        value: 'json',
+                    },
+                ],
+                default: 'string',
+                description: 'Choose the format for your global constants',
+            },
+            {
+                displayName: 'Global Constants',
+                name: 'globalConstants',
+                type: 'string',
+                default: '',
+                placeholder: 'name1=value1\nname2=value2',
+                hint: 'Use "name=value" format. Separate multiple constants with a new line.',
+                typeOptions: {
+                    rows: 10,
+                },
+                displayOptions: {
+                    show: {
+                        format: ['string'],
+                    },
+                },
+            },
+            {
+                displayName: 'Global Constants',
+                name: 'globalConstants',
+                type: 'json',
+                default: '{}',
+                hint: 'Provide your constants as a JSON object. Example: { "obj": { "key": "value" }, "list": ["value1", "value2"] }',
+                displayOptions: {
+                    show: {
+                        format: ['json'],
+                    },
+                },
+            },
+        ];
+    }
+}
+exports.GlobalConstantsCredentials = GlobalConstantsCredentials;
+//# sourceMappingURL=GlobalConstantsCredentials.credentials.js.map

package/dist/credentials/GlobalConstantsCredentials.credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GlobalConstantsCredentials.credentials.js","sourceRoot":"","sources":["../../credentials/GlobalConstantsCredentials.credentials.ts"],"names":[],"mappings":";;;AAEa,QAAA,iCAAiC,GAAG,oBAAoB,CAAC;AAGtE,MAAa,0BAA0B;IAAvC;QACC,SAAI,GAAG,yCAAiC,CAAC;QAEzC,gBAAW,GAAG,kBAAkB,CAAC;QAEjC,eAAU,GAAsB;YAC/B;gBACC,WAAW,EAAE,QAAQ;gBACrB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,QAAQ;qBACf;oBACD;wBACC,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,MAAM;qBACb;iBACD;gBACD,OAAO,EAAE,QAAQ;gBACjB,WAAW,EAAE,6CAA6C;aAC1D;YACD;gBACC,WAAW,EAAE,kBAAkB;gBAC/B,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,4BAA4B;gBACzC,IAAI,EAAE,uEAAuE;gBAC7E,WAAW,EAAE;oBACZ,IAAI,EAAE,EAAE;iBACR;gBACD,cAAc,EAAE;oBACf,IAAI,EAAE;wBACL,MAAM,EAAE,CAAC,QAAQ,CAAC;qBAClB;iBACD;aACD;YACD;gBACC,WAAW,EAAE,kBAAkB;gBAC/B,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,+GAA+G;gBACrH,cAAc,EAAE;oBACf,IAAI,EAAE;wBACL,MAAM,EAAE,CAAC,MAAM,CAAC;qBAChB;iBACD;aACD;SACD,CAAC;IACH,CAAC;CAAA;AApDD,gEAoDC"}

package/dist/nodes/GlobalConstants/GlobalConstants.node.d.ts

@@ -0,0 +1,5 @@
+import { IExecuteFunctions, INodeExecutionData, INodeType, INodeTypeDescription } from 'n8n-workflow';
+export declare class GlobalConstants implements INodeType {
+    description: INodeTypeDescription;
+    execute(this: IExecuteFunctions): Promise<INodeExecutionData[][]>;
+}

package/dist/nodes/GlobalConstants/GlobalConstants.node.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GlobalConstants = void 0;
+const GlobalConstantsCredentials_credentials_1 = require("../../credentials/GlobalConstantsCredentials.credentials");
+const CredentialsUtils_1 = require("../../credentials/CredentialsUtils");
+class GlobalConstants {
+    constructor() {
+        this.description = {
+            displayName: 'Global Constants',
+            name: 'globalConstants',
+            icon: 'file:globals-icon-60px.png',
+            group: ['transform', 'output'],
+            version: 1,
+            description: 'Global Constants',
+            subtitle: '={{$parameter["resource"]}}',
+            defaults: {
+                name: 'Global Constants',
+            },
+            inputs: ['main'],
+            outputs: ['main'],
+            credentials: [
+                {
+                    name: GlobalConstantsCredentials_credentials_1.GLOBAL_CONSTANTS_CREDENTIALS_NAME,
+                    required: true,
+                }
+            ],
+            properties: [
+                {
+                    displayName: 'Put All Constants in One Key',
+                    name: 'putAllInOneKey',
+                    type: "boolean",
+                    default: true,
+                    description: "Whether to put all constants in one key or use separate keys for each constant",
+                },
+                {
+                    displayName: "Constants Key Name",
+                    name: "constantsKeyName",
+                    type: "string",
+                    default: "constants",
+                    displayOptions: {
+                        show: {
+                            putAllInOneKey: [true],
+                        },
+                    },
+                },
+            ],
+        };
+    }
+    async execute() {
+        const credentials = await this.getCredentials(GlobalConstantsCredentials_credentials_1.GLOBAL_CONSTANTS_CREDENTIALS_NAME);
+        const globalConstants = (0, CredentialsUtils_1.splitConstants)(credentials.globalConstants);
+        var constantsData = {};
+        const putAllInOneKey = this.getNodeParameter('putAllInOneKey', 0);
+        if (putAllInOneKey) {
+            const constantsKeyName = this.getNodeParameter('constantsKeyName', 0);
+            constantsData = {
+                [constantsKeyName]: globalConstants,
+            };
+        }
+        else {
+            constantsData = globalConstants;
+        }
+        const returnData = this.getInputData();
+        if (returnData.length === 0) {
+            returnData.push({ json: constantsData });
+        }
+        else {
+            returnData.forEach((item) => {
+                item.json = {
+                    ...item.json,
+                    ...constantsData,
+                };
+            });
+        }
+        return [returnData];
+    }
+}
+exports.GlobalConstants = GlobalConstants;
+//# sourceMappingURL=GlobalConstants.node.js.map

package/dist/nodes/GlobalConstants/GlobalConstants.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GlobalConstants.node.js","sourceRoot":"","sources":["../../../nodes/GlobalConstants/GlobalConstants.node.ts"],"names":[],"mappings":";;;AACA,qHAA6I;AAC7I,yEAAoE;AAGpE,MAAa,eAAe;IAA5B;QACE,gBAAW,GAAyB;YAClC,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,iBAAiB;YAEvB,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC9B,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,kBAAkB;YAC/B,QAAQ,EAAE,6BAA6B;YACvC,QAAQ,EAAE;gBACR,IAAI,EAAE,kBAAkB;aACzB;YACD,MAAM,EAAE,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,0EAAiC;oBACvC,QAAQ,EAAE,IAAI;iBACf;aACF;YACD,UAAU,EAAE;gBACV;oBACE,WAAW,EAAE,8BAA8B;oBAC3C,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,gFAAgF;iBAC9F;gBACD;oBACE,WAAW,EAAE,oBAAoB;oBACjC,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,WAAW;oBACpB,cAAc,EAAE;wBACd,IAAI,EAAE;4BACJ,cAAc,EAAE,CAAC,IAAI,CAAC;yBACvB;qBACF;iBACF;aACF;SACF,CAAC;IAsCJ,CAAC;IApCC,KAAK,CAAC,OAAO;QACX,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0EAAiC,CAA8C,CAAC;QAC9H,MAAM,eAAe,GAAG,IAAA,iCAAc,EAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAEpE,IAAI,aAAa,GAA0B,EAAE,CAAC;QAE9C,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAY,CAAC;QAE7E,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC,CAAW,CAAC;YAChF,aAAa,GAAG;gBACd,CAAC,gBAAgB,CAAC,EAAE,eAAe;aACpC,CAAC;QACJ,CAAC;aAAM,CAAC;YAEN,aAAa,GAAG,eAAe,CAAC;QAElC,CAAC;QAGD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAE5B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YAEN,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC1B,IAAI,CAAC,IAAI,GAAG;oBACV,GAAG,IAAI,CAAC,IAAI;oBACZ,GAAG,aAAa;iBACjB,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;CACF;AA/ED,0CA+EC"}

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "n8n-nodes-globals-fork-test",
+  "version": "1.1.2",
+  "type": "commonjs",
+  "description": "Security-hardened fork of n8n-nodes-globals — global constants node for n8n",
+  "keywords": [
+    "n8n-community-node-package",
+    "n8n",
+    "globals",
+    "constants"
+  ],
+  "license": "MIT",
+  "author": {
+    "name": "fork-test maintainer"
+  },
+  "repository": {
+    "type": "git",
+    "url": ""
+  },
+  "engines": {
+    "node": ">=20.0.0",
+    "npm": ">=10.0.0"
+  },
+  "files": [
+    "dist",
+    "LICENSE.md",
+    "NOTICE",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc && node scripts/copy-icons.mjs",
+    "dev": "tsc --watch",
+    "format": "prettier nodes credentials --write",
+    "lint": "eslint nodes credentials package.json",
+    "lintfix": "eslint nodes credentials package.json --fix",
+    "test": "jest",
+    "test:coverage": "jest --coverage",
+    "audit:signatures": "npm audit signatures",
+    "audit:lockfile": "lockfile-lint --path package-lock.json --allowed-hosts npm --validate-https --validate-integrity",
+    "audit:pkg": "publint",
+    "sbom": "cyclonedx-npm --output-format JSON --output-file sbom.json --omit dev",
+    "prepublishOnly": "npm run build && npm run lint && npm run test && npm run audit:lockfile && npm run audit:pkg"
+  },
+  "n8n": {
+    "n8nNodesApiVersion": 1,
+    "credentials": [
+      "dist/credentials/GlobalConstantsCredentials.credentials.js"
+    ],
+    "nodes": [
+      "dist/nodes/GlobalConstants/GlobalConstants.node.js"
+    ]
+  },
+  "devDependencies": {
+    "@cyclonedx/cyclonedx-npm": "4.2.1",
+    "@types/jest": "29.5.14",
+    "@typescript-eslint/parser": "6.20.0",
+    "eslint": "8.57.0",
+    "eslint-plugin-n8n-nodes-base": "1.16.1",
+    "jest": "29.7.0",
+    "lockfile-lint": "5.0.0",
+    "n8n-workflow": "2.20.3",
+    "prettier": "3.3.3",
+    "publint": "0.3.21",
+    "ts-jest": "29.4.5",
+    "typescript": "5.3.3"
+  },
+  "peerDependencies": {
+    "n8n-workflow": ">=1.0.0"
+  },
+  "overrides": {
+    "@typescript-eslint/typescript-estree": {
+      "minimatch": "9.0.9"
+    }
+  }
+}