step-node-agent 3.19.0 → 3.20.1

package/node_modules/body-parser/HISTORY.md

@@ -1,3 +1,9 @@
+1.20.1 / 2022-10-06
+===================
+
+  * deps: qs@6.11.0
+  * perf: remove unnecessary object clone
+
 1.20.0 / 2022-04-02
 ===================
 

package/node_modules/body-parser/README.md

@@ -346,7 +346,7 @@ call `req.setEncoding` when using this module. The `status` property is set to
 
 This error will occur when the request is no longer readable when this middleware
 attempts to read it. This typically means something other than a middleware from
-this module read the reqest body already and the middleware was also configured to
+this module read the request body already and the middleware was also configured to
 read the same request. The `status` property is set to `500` and the `type`
 property is set to `'stream.not.readable'`.
 

package/node_modules/body-parser/index.js

@@ -91,16 +91,15 @@ Object.defineProperty(exports, 'urlencoded', {
  */
 
 function bodyParser (options) {
-  var opts = {}
-
-  // exclude type option
-  if (options) {
-    for (var prop in options) {
-      if (prop !== 'type') {
-        opts[prop] = options[prop]
-      }
+  // use default type for parsers
+  var opts = Object.create(options || null, {
+    type: {
+      configurable: true,
+      enumerable: true,
+      value: undefined,
+      writable: true
     }
-  }
+  })
 
   var _urlencoded = exports.urlencoded(opts)
   var _json = exports.json(opts)

package/node_modules/body-parser/package.json

@@ -1,7 +1,7 @@
 {
   "name": "body-parser",
   "description": "Node.js body parsing middleware",
-  "version": "1.20.0",
+  "version": "1.20.1",
   "contributors": [
     "Douglas Christopher Wilson <doug@somethingdoug.com>",
     "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
@@ -17,24 +17,24 @@
     "http-errors": "2.0.0",
     "iconv-lite": "0.4.24",
     "on-finished": "2.4.1",
-    "qs": "6.10.3",
+    "qs": "6.11.0",
     "raw-body": "2.5.1",
     "type-is": "~1.6.18",
     "unpipe": "1.0.0"
   },
   "devDependencies": {
-    "eslint": "7.32.0",
+    "eslint": "8.24.0",
     "eslint-config-standard": "14.1.1",
-    "eslint-plugin-import": "2.25.4",
-    "eslint-plugin-markdown": "2.2.1",
+    "eslint-plugin-import": "2.26.0",
+    "eslint-plugin-markdown": "3.0.0",
     "eslint-plugin-node": "11.1.0",
-    "eslint-plugin-promise": "5.2.0",
+    "eslint-plugin-promise": "6.0.1",
     "eslint-plugin-standard": "4.1.0",
     "methods": "1.1.2",
-    "mocha": "9.2.2",
+    "mocha": "10.0.0",
     "nyc": "15.1.0",
     "safe-buffer": "5.2.1",
-    "supertest": "6.2.2"
+    "supertest": "6.3.0"
   },
   "files": [
     "lib/",

package/node_modules/capture-stack-trace/license

@@ -1,6 +1,7 @@
 The MIT License (MIT)
 
-Copyright (c) Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+Copyright (c) Vsevolod Strukchinsky <floatdrop@gmail.com> (https://github.com/floatdrop)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/node_modules/capture-stack-trace/package.json

@@ -1,29 +1,30 @@
 {
-  "name": "capture-stack-trace",
-  "version": "1.0.1",
-  "description": "Error.captureStackTrace ponyfill",
-  "license": "MIT",
-  "repository": "floatdrop/capture-stack-trace",
-  "author": {
-    "name": "Vsevolod Strukchinsky",
-    "email": "floatdrop@gmail.com",
-    "url": "github.com/floatdrop"
-  },
-  "engines": {
-    "node": ">=0.10.0"
-  },
-  "scripts": {
-    "test": "mocha"
-  },
-  "files": [
-    "index.js"
-  ],
-  "keywords": [
-    "Error",
-    "captureStackTrace"
-  ],
-  "dependencies": {},
-  "devDependencies": {
-    "mocha": "*"
-  }
+	"name": "capture-stack-trace",
+	"version": "1.0.2",
+	"description": "Error.captureStackTrace ponyfill",
+	"license": "MIT",
+	"repository": "sindresorhus/capture-stack-trace",
+	"funding": "https://github.com/sponsors/sindresorhus",
+	"author": {
+		"name": "Vsevolod Strukchinsky",
+		"email": "floatdrop@gmail.com",
+		"url": "https://github.com/floatdrop"
+	},
+	"engines": {
+		"node": ">=0.10.0"
+	},
+	"scripts": {
+		"test": "mocha"
+	},
+	"files": [
+		"index.js"
+	],
+	"keywords": [
+		"error",
+		"captureStackTrace"
+	],
+	"dependencies": {},
+	"devDependencies": {
+		"mocha": "*"
+	}
 }

package/node_modules/capture-stack-trace/readme.md

@@ -1,4 +1,4 @@
-# capture-stack-trace [![Build Status](https://travis-ci.org/floatdrop/capture-stack-trace.svg?branch=master)](https://travis-ci.org/floatdrop/capture-stack-trace)
+# capture-stack-trace
 
 > Ponyfill for Error.captureStackTrace
 
@@ -30,7 +30,3 @@ captureStackTrace({});
 Type: `Object`
 
 Target Object, that will recieve stack property.
-
-## License
-
-MIT © [Vsevolod Strukchinsky](http://github.com/floatdrop)

package/node_modules/duplexer3/license

@@ -0,0 +1,10 @@
+Copyright (c) 2022, Sindre Sorhus.
+Copyright (c) 2020, Vsevolod Strukchinsky.
+Copyright (c) 2013, Deoxxa Development.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/node_modules/duplexer3/package.json

@@ -1,28 +1,27 @@
 {
-  "name": "duplexer3",
-  "version": "0.1.4",
-  "description": "Like duplexer but using streams3",
-  "engine": {
-      "node": ">=4"
-  },
-  "files": [
-    "index.js"
-  ],
-  "scripts": {
-    "test": "mocha -R tap"
-  },
-  "repository": "floatdrop/duplexer3",
-  "keywords": [
-    "duplex",
-    "duplexer",
-    "stream",
-    "stream3",
-    "join",
-    "combine"
-  ],
-  "author": "Conrad Pankoff <deoxxa@fknsrs.biz> (http://www.fknsrs.biz/)",
-  "license": "BSD-3-Clause",
-  "devDependencies": {
-    "mocha": "^2.2.5"
-  }
+	"name": "duplexer3",
+	"version": "0.1.5",
+	"description": "Like duplexer but using streams3",
+	"engine": {
+		"node": ">=4"
+	},
+	"files": [
+		"index.js"
+	],
+	"scripts": {
+		"test": "mocha -R tap"
+	},
+	"repository": "sindresorhus/duplexer3",
+	"keywords": [
+		"duplex",
+		"duplexer",
+		"stream",
+		"stream3",
+		"join",
+		"combine"
+	],
+	"license": "BSD-3-Clause",
+	"devDependencies": {
+		"mocha": "^2.2.5"
+	}
 }

package/node_modules/duplexer3/{README.md → readme.md}

@@ -1,54 +1,53 @@
-# duplexer3 [![Build Status](https://travis-ci.org/floatdrop/duplexer3.svg?branch=master)](https://travis-ci.org/floatdrop/duplexer3) [![Coverage Status](https://coveralls.io/repos/floatdrop/duplexer3/badge.svg?branch=master&service=github)](https://coveralls.io/github/floatdrop/duplexer3?branch=master)
+# duplexer3
 
-Like [duplexer2](https://github.com/deoxxa/duplexer2) but using Streams3 without readable-stream dependency
+Like [`duplexer2`](https://github.com/deoxxa/duplexer2) but using Streams3 without readable-stream dependency
 
-```javascript
+```js
 var stream = require("stream");
-
 var duplexer3 = require("duplexer3");
 
 var writable = new stream.Writable({objectMode: true}),
-    readable = new stream.Readable({objectMode: true});
+		readable = new stream.Readable({objectMode: true});
 
 writable._write = function _write(input, encoding, done) {
-  if (readable.push(input)) {
-    return done();
-  } else {
-    readable.once("drain", done);
-  }
+	if (readable.push(input)) {
+		return done();
+	} else {
+		readable.once("drain", done);
+	}
 };
 
 readable._read = function _read(n) {
-  // no-op
+	// no-op
 };
 
 // simulate the readable thing closing after a bit
 writable.once("finish", function() {
-  setTimeout(function() {
-    readable.push(null);
-  }, 500);
+	setTimeout(function() {
+		readable.push(null);
+	}, 500);
 });
 
 var duplex = duplexer3(writable, readable);
 
 duplex.on("data", function(e) {
-  console.log("got data", JSON.stringify(e));
+	console.log("got data", JSON.stringify(e));
 });
 
 duplex.on("finish", function() {
-  console.log("got finish event");
+	console.log("got finish event");
 });
 
 duplex.on("end", function() {
-  console.log("got end event");
+	console.log("got end event");
 });
 
 duplex.write("oh, hi there", function() {
-  console.log("finished writing");
+	console.log("finished writing");
 });
 
 duplex.end(function() {
-  console.log("finished ending");
+	console.log("finished ending");
 });
 ```
 
@@ -66,14 +65,10 @@ This is a reimplementation of [duplexer](https://www.npmjs.com/package/duplexer)
 Streams3 API which is standard in Node as of v4. Everything largely
 works the same.
 
+## Install
 
-
-## Installation
-
-[Available via `npm`](https://docs.npmjs.com/cli/install):
-
-```
-$ npm i duplexer3
+```sh
+npm install duplexer3
 ```
 
 ## API
@@ -83,33 +78,22 @@ $ npm i duplexer3
 Creates a new `DuplexWrapper` object, which is the actual class that implements
 most of the fun stuff. All that fun stuff is hidden. DON'T LOOK.
 
-```javascript
+```js
 duplexer3([options], writable, readable)
 ```
 
-```javascript
+```js
 const duplex = duplexer3(new stream.Writable(), new stream.Readable());
 ```
 
 Arguments
 
 * __options__ - an object specifying the regular `stream.Duplex` options, as
-  well as the properties described below.
+	well as the properties described below.
 * __writable__ - a writable stream
 * __readable__ - a readable stream
 
 Options
 
 * __bubbleErrors__ - a boolean value that specifies whether to bubble errors
-  from the underlying readable/writable streams. Default is `true`.
-
-
-## License
-
-3-clause BSD. [A copy](./LICENSE) is included with the source.
-
-## Contact
-
-* GitHub ([deoxxa](http://github.com/deoxxa))
-* Twitter ([@deoxxa](http://twitter.com/deoxxa))
-* Email ([deoxxa@fknsrs.biz](mailto:deoxxa@fknsrs.biz))
+	from the underlying readable/writable streams. Default is `true`.

package/node_modules/express/History.md

@@ -1,3 +1,12 @@
+4.18.2 / 2022-10-08
+===================
+
+  * Fix regression routing a large stack in a single route
+  * deps: body-parser@1.20.1
+    - deps: qs@6.11.0
+    - perf: remove unnecessary object clone
+  * deps: qs@6.11.0
+
 4.18.1 / 2022-04-29
 ===================
 

package/node_modules/express/Readme.md

@@ -1,6 +1,6 @@
 [![Express Logo](https://i.cloudup.com/zfY6lL7eFa-3000x3000.png)](http://expressjs.com/)
 
-  Fast, unopinionated, minimalist web framework for [node](http://nodejs.org).
+  Fast, unopinionated, minimalist web framework for [Node.js](http://nodejs.org).
 
   [![NPM Version][npm-version-image]][npm-url]
   [![NPM Install Size][npm-install-size-image]][npm-install-size-url]
@@ -51,7 +51,7 @@ for more information.
 ## Docs & Community
 
   * [Website and Documentation](http://expressjs.com/) - [[website repo](https://github.com/expressjs/expressjs.com)]
-  * [#express](https://webchat.freenode.net/?channels=express) on freenode IRC
+  * [#express](https://web.libera.chat/#express) on [Libera Chat](https://libera.chat) IRC
   * [GitHub Organization](https://github.com/expressjs) for Official Middleware & Modules
   * Visit the [Wiki](https://github.com/expressjs/express/wiki)
   * [Google Group](https://groups.google.com/group/express-js) for discussion

package/node_modules/express/lib/router/route.js

@@ -124,21 +124,21 @@ Route.prototype.dispatch = function dispatch(req, res, done) {
       return done(err)
     }
 
-    var layer = stack[idx++];
-    if (!layer) {
-      return done(err);
-    }
-
     // max sync stack
     if (++sync > 100) {
       return setImmediate(next, err)
     }
 
-    if (layer.method && layer.method !== method) {
-      return next(err);
+    var layer = stack[idx++]
+
+    // end of layers
+    if (!layer) {
+      return done(err)
     }
 
-    if (err) {
+    if (layer.method && layer.method !== method) {
+      next(err)
+    } else if (err) {
       layer.handle_error(err, req, res, next);
     } else {
       layer.handle_request(req, res, next);

package/node_modules/express/package.json

@@ -1,7 +1,7 @@
 {
   "name": "express",
   "description": "Fast, unopinionated, minimalist web framework",
-  "version": "4.18.1",
+  "version": "4.18.2",
   "author": "TJ Holowaychuk <tj@vision-media.ca>",
   "contributors": [
     "Aaron Heckmann <aaron.heckmann+github@gmail.com>",
@@ -30,7 +30,7 @@
   "dependencies": {
     "accepts": "~1.3.8",
     "array-flatten": "1.1.1",
-    "body-parser": "1.20.0",
+    "body-parser": "1.20.1",
     "content-disposition": "0.5.4",
     "content-type": "~1.0.4",
     "cookie": "0.5.0",
@@ -49,7 +49,7 @@
     "parseurl": "~1.3.3",
     "path-to-regexp": "0.1.7",
     "proxy-addr": "~2.0.7",
-    "qs": "6.10.3",
+    "qs": "6.11.0",
     "range-parser": "~1.2.1",
     "safe-buffer": "5.2.1",
     "send": "0.18.0",
@@ -65,18 +65,18 @@
     "connect-redis": "3.4.2",
     "cookie-parser": "1.4.6",
     "cookie-session": "2.0.0",
-    "ejs": "3.1.7",
-    "eslint": "7.32.0",
+    "ejs": "3.1.8",
+    "eslint": "8.24.0",
     "express-session": "1.17.2",
     "hbs": "4.2.0",
     "marked": "0.7.0",
     "method-override": "3.0.0",
-    "mocha": "9.2.2",
+    "mocha": "10.0.0",
     "morgan": "1.10.0",
     "multiparty": "4.2.3",
     "nyc": "15.1.0",
     "pbkdf2-password": "1.2.1",
-    "supertest": "6.2.3",
+    "supertest": "6.3.0",
     "vhost": "~3.0.2"
   },
   "engines": {

package/node_modules/get-intrinsic/.eslintrc

@@ -8,26 +8,21 @@
 		"es2017": true,
 		"es2020": true,
 		"es2021": true,
-	},
-
-	"globals": {
-		"AggregateError": false,
+		"es2022": true,
 	},
 
 	"rules": {
 		"array-bracket-newline": 0,
-		"array-element-newline": 0,
 		"complexity": 0,
 		"eqeqeq": [2, "allow-null"],
 		"func-name-matching": 0,
 		"id-length": 0,
-		"max-lines-per-function": [2, 80],
+		"max-lines-per-function": [2, 90],
 		"max-params": [2, 4],
 		"max-statements": 0,
 		"max-statements-per-line": [2, { "max": 2 }],
 		"multiline-comment-style": 0,
 		"no-magic-numbers": 0,
-		"operator-linebreak": [2, "before"],
 		"sort-keys": 0,
 	},
 
@@ -35,7 +30,6 @@
 		{
 			"files": "test/**",
 			"rules": {
-				"max-lines-per-function": 0,
 				"new-cap": 0,
 			},
 		},

package/node_modules/get-intrinsic/.nycrc

@@ -2,10 +2,6 @@
 	"all": true,
 	"check-coverage": false,
 	"reporter": ["text-summary", "text", "html", "json"],
-	"lines": 86,
-	"statements": 85.93,
-	"functions": 82.43,
-	"branches": 76.06,
 	"exclude": [
 		"coverage",
 		"test"

package/node_modules/get-intrinsic/CHANGELOG.md

@@ -5,6 +5,40 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v1.1.3](https://github.com/ljharb/get-intrinsic/compare/v1.1.2...v1.1.3) - 2022-09-12
+
+### Commits
+
+- [Dev Deps] update `es-abstract`, `es-value-fixtures`, `tape` [`07ff291`](https://github.com/ljharb/get-intrinsic/commit/07ff291816406ebe5a12d7f16965bde0942dd688)
+- [Fix] properly check for % signs [`50ac176`](https://github.com/ljharb/get-intrinsic/commit/50ac1760fe99c227e64eabde76e9c0e44cd881b5)
+
+## [v1.1.2](https://github.com/ljharb/get-intrinsic/compare/v1.1.1...v1.1.2) - 2022-06-08
+
+### Fixed
+
+- [Fix] properly validate against extra % signs [`#16`](https://github.com/ljharb/get-intrinsic/issues/16)
+
+### Commits
+
+- [actions] reuse common workflows [`0972547`](https://github.com/ljharb/get-intrinsic/commit/0972547efd0abc863fe4c445a6ca7eb4f8c6901d)
+- [meta] use `npmignore` to autogenerate an npmignore file [`5ba0b51`](https://github.com/ljharb/get-intrinsic/commit/5ba0b51d8d8d4f1c31d426d74abc0770fd106bad)
+- [actions] use `node/install` instead of `node/run`; use `codecov` action [`c364492`](https://github.com/ljharb/get-intrinsic/commit/c364492af4af51333e6f81c0bf21fd3d602c3661)
+- [Dev Deps] update `eslint`, `@ljharb/eslint-config`, `aud`, `auto-changelog`, `es-abstract`, `object-inspect`, `tape` [`dc04dad`](https://github.com/ljharb/get-intrinsic/commit/dc04dad86f6e5608775a2640cb0db5927ae29ed9)
+- [Dev Deps] update `eslint`, `@ljharb/eslint-config`, `es-abstract`, `object-inspect`, `safe-publish-latest`, `tape` [`1c14059`](https://github.com/ljharb/get-intrinsic/commit/1c1405984e86dd2dc9366c15d8a0294a96a146a5)
+- [Tests] use `mock-property` [`b396ef0`](https://github.com/ljharb/get-intrinsic/commit/b396ef05bb73b1d699811abd64b0d9b97997fdda)
+- [Dev Deps] update `eslint`, `@ljharb/eslint-config`, `aud`, `auto-changelog`, `object-inspect`, `tape` [`c2c758d`](https://github.com/ljharb/get-intrinsic/commit/c2c758d3b90af4fef0a76910d8d3c292ec8d1d3e)
+- [Dev Deps] update `eslint`, `@ljharb/eslint-config`, `aud`, `es-abstract`, `es-value-fixtures`, `object-inspect`, `tape` [`29e3c09`](https://github.com/ljharb/get-intrinsic/commit/29e3c091c2bf3e17099969847e8729d0e46896de)
+- [actions] update codecov uploader [`8cbc141`](https://github.com/ljharb/get-intrinsic/commit/8cbc1418940d7a8941f3a7985cbc4ac095c5e13d)
+- [Dev Deps] update `@ljharb/eslint-config`, `es-abstract`, `es-value-fixtures`, `object-inspect`, `tape` [`10b6f5c`](https://github.com/ljharb/get-intrinsic/commit/10b6f5c02593fb3680c581d696ac124e30652932)
+- [readme] add github actions/codecov badges [`4e25400`](https://github.com/ljharb/get-intrinsic/commit/4e25400d9f51ae9eb059cbe22d9144e70ea214e8)
+- [Tests] use `for-each` instead of `foreach` [`c05b957`](https://github.com/ljharb/get-intrinsic/commit/c05b957ad9a7bc7721af7cc9e9be1edbfe057496)
+- [Dev Deps] update `es-abstract` [`29b05ae`](https://github.com/ljharb/get-intrinsic/commit/29b05aec3e7330e9ad0b8e0f685a9112c20cdd97)
+- [meta] use `prepublishOnly` script for npm 7+ [`95c285d`](https://github.com/ljharb/get-intrinsic/commit/95c285da810516057d3bbfa871176031af38f05d)
+- [Deps] update `has-symbols` [`593cb4f`](https://github.com/ljharb/get-intrinsic/commit/593cb4fb38e7922e40e42c183f45274b636424cd)
+- [readme] fix repo URLs [`1c8305b`](https://github.com/ljharb/get-intrinsic/commit/1c8305b5365827c9b6fc785434aac0e1328ff2f5)
+- [Deps] update `has-symbols` [`c7138b6`](https://github.com/ljharb/get-intrinsic/commit/c7138b6c6d73132d859471fb8c13304e1e7c8b20)
+- [Dev Deps] remove unused `has-bigints` [`bd63aff`](https://github.com/ljharb/get-intrinsic/commit/bd63aff6ad8f3a986c557fcda2914187bdaab359)
+
 ## [v1.1.1](https://github.com/ljharb/get-intrinsic/compare/v1.1.0...v1.1.1) - 2021-02-03
 
 ### Fixed

package/node_modules/get-intrinsic/README.md

@@ -1,5 +1,7 @@
 # get-intrinsic <sup>[![Version Badge][npm-version-svg]][package-url]</sup>
 
+[![github actions][actions-image]][actions-url]
+[![coverage][codecov-image]][codecov-url]
 [![dependency status][deps-svg]][deps-url]
 [![dev dependency status][dev-deps-svg]][dev-deps-url]
 [![License][license-image]][license-url]
@@ -53,7 +55,7 @@ Simply clone the repo, `npm install`, and run `npm test`
 Please email [@ljharb](https://github.com/ljharb) or see https://tidelift.com/security if you have a potential security vulnerability to report.
 
 [package-url]: https://npmjs.org/package/get-intrinsic
-[npm-version-svg]: http://versionbadg.es/ljharb/get-intrinsic.svg
+[npm-version-svg]: https://versionbadg.es/ljharb/get-intrinsic.svg
 [deps-svg]: https://david-dm.org/ljharb/get-intrinsic.svg
 [deps-url]: https://david-dm.org/ljharb/get-intrinsic
 [dev-deps-svg]: https://david-dm.org/ljharb/get-intrinsic/dev-status.svg
@@ -63,3 +65,7 @@ Please email [@ljharb](https://github.com/ljharb) or see https://tidelift.com/se
 [license-url]: LICENSE
 [downloads-image]: https://img.shields.io/npm/dm/get-intrinsic.svg
 [downloads-url]: https://npm-stat.com/charts.html?package=get-intrinsic
+[codecov-image]: https://codecov.io/gh/ljharb/get-intrinsic/branch/main/graphs/badge.svg
+[codecov-url]: https://app.codecov.io/gh/ljharb/get-intrinsic/
+[actions-image]: https://img.shields.io/endpoint?url=https://github-actions-badge-u3jn4tfpocch.runkit.sh/ljharb/get-intrinsic
+[actions-url]: https://github.com/ljharb/get-intrinsic/actions

package/node_modules/get-intrinsic/index.js

@@ -202,6 +202,7 @@ var $concat = bind.call(Function.call, Array.prototype.concat);
 var $spliceApply = bind.call(Function.apply, Array.prototype.splice);
 var $replace = bind.call(Function.call, String.prototype.replace);
 var $strSlice = bind.call(Function.call, String.prototype.slice);
+var $exec = bind.call(Function.call, RegExp.prototype.exec);
 
 /* adapted from https://github.com/lodash/lodash/blob/4.17.15/dist/lodash.js#L6735-L6744 */
 var rePropName = /[^%.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|%$))/g;
@@ -257,6 +258,9 @@ module.exports = function GetIntrinsic(name, allowMissing) {
 		throw new $TypeError('"allowMissing" argument must be a boolean');
 	}
 
+	if ($exec(/^%?[^%]*%?$/, name) === null) {
+		throw new $SyntaxError('`%` may not be present anywhere but at the beginning and end of the intrinsic name');
+	}
 	var parts = stringToPath(name);
 	var intrinsicBaseName = parts.length > 0 ? parts[0] : '';