picata 0.0.6__py3-none-any.whl → 0.0.7__py3-none-any.whl
Sign up to get free protection for your applications and to get access to all the features.
- node_modules/@ampproject/remapping/README.md +218 -0
- node_modules/@babel/code-frame/README.md +19 -0
- node_modules/@babel/compat-data/README.md +19 -0
- node_modules/@babel/core/README.md +19 -0
- node_modules/@babel/generator/README.md +19 -0
- node_modules/@babel/helper-annotate-as-pure/README.md +19 -0
- node_modules/@babel/helper-compilation-targets/README.md +19 -0
- node_modules/@babel/helper-create-class-features-plugin/README.md +19 -0
- node_modules/@babel/helper-create-regexp-features-plugin/README.md +19 -0
- node_modules/@babel/helper-define-polyfill-provider/README.md +15 -0
- node_modules/@babel/helper-member-expression-to-functions/README.md +19 -0
- node_modules/@babel/helper-module-imports/README.md +19 -0
- node_modules/@babel/helper-module-transforms/README.md +19 -0
- node_modules/@babel/helper-optimise-call-expression/README.md +19 -0
- node_modules/@babel/helper-plugin-utils/README.md +19 -0
- node_modules/@babel/helper-remap-async-to-generator/README.md +19 -0
- node_modules/@babel/helper-replace-supers/README.md +19 -0
- node_modules/@babel/helper-skip-transparent-expression-wrappers/README.md +19 -0
- node_modules/@babel/helper-string-parser/README.md +19 -0
- node_modules/@babel/helper-validator-identifier/README.md +19 -0
- node_modules/@babel/helper-validator-option/README.md +19 -0
- node_modules/@babel/helper-wrap-function/README.md +19 -0
- node_modules/@babel/helpers/README.md +19 -0
- node_modules/@babel/parser/README.md +19 -0
- node_modules/@babel/plugin-bugfix-firefox-class-in-computed-class-key/README.md +19 -0
- node_modules/@babel/plugin-bugfix-safari-class-field-initializer-scope/README.md +19 -0
- node_modules/@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression/README.md +19 -0
- node_modules/@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining/README.md +19 -0
- node_modules/@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly/README.md +19 -0
- node_modules/@babel/plugin-proposal-private-property-in-object/README.md +23 -0
- node_modules/@babel/plugin-syntax-import-assertions/README.md +19 -0
- node_modules/@babel/plugin-syntax-import-attributes/README.md +19 -0
- node_modules/@babel/plugin-syntax-jsx/README.md +19 -0
- node_modules/@babel/plugin-syntax-typescript/README.md +19 -0
- node_modules/@babel/plugin-syntax-unicode-sets-regex/README.md +19 -0
- node_modules/@babel/plugin-transform-arrow-functions/README.md +19 -0
- node_modules/@babel/plugin-transform-async-generator-functions/README.md +19 -0
- node_modules/@babel/plugin-transform-async-to-generator/README.md +19 -0
- node_modules/@babel/plugin-transform-block-scoped-functions/README.md +19 -0
- node_modules/@babel/plugin-transform-block-scoping/README.md +19 -0
- node_modules/@babel/plugin-transform-class-properties/README.md +19 -0
- node_modules/@babel/plugin-transform-class-static-block/README.md +19 -0
- node_modules/@babel/plugin-transform-classes/README.md +19 -0
- node_modules/@babel/plugin-transform-computed-properties/README.md +19 -0
- node_modules/@babel/plugin-transform-destructuring/README.md +19 -0
- node_modules/@babel/plugin-transform-dotall-regex/README.md +19 -0
- node_modules/@babel/plugin-transform-duplicate-keys/README.md +19 -0
- node_modules/@babel/plugin-transform-duplicate-named-capturing-groups-regex/README.md +19 -0
- node_modules/@babel/plugin-transform-dynamic-import/README.md +19 -0
- node_modules/@babel/plugin-transform-exponentiation-operator/README.md +19 -0
- node_modules/@babel/plugin-transform-export-namespace-from/README.md +19 -0
- node_modules/@babel/plugin-transform-for-of/README.md +19 -0
- node_modules/@babel/plugin-transform-function-name/README.md +19 -0
- node_modules/@babel/plugin-transform-json-strings/README.md +19 -0
- node_modules/@babel/plugin-transform-literals/README.md +19 -0
- node_modules/@babel/plugin-transform-logical-assignment-operators/README.md +19 -0
- node_modules/@babel/plugin-transform-member-expression-literals/README.md +19 -0
- node_modules/@babel/plugin-transform-modules-amd/README.md +19 -0
- node_modules/@babel/plugin-transform-modules-commonjs/README.md +19 -0
- node_modules/@babel/plugin-transform-modules-systemjs/README.md +19 -0
- node_modules/@babel/plugin-transform-modules-umd/README.md +19 -0
- node_modules/@babel/plugin-transform-named-capturing-groups-regex/README.md +19 -0
- node_modules/@babel/plugin-transform-new-target/README.md +19 -0
- node_modules/@babel/plugin-transform-nullish-coalescing-operator/README.md +19 -0
- node_modules/@babel/plugin-transform-numeric-separator/README.md +19 -0
- node_modules/@babel/plugin-transform-object-rest-spread/README.md +19 -0
- node_modules/@babel/plugin-transform-object-super/README.md +19 -0
- node_modules/@babel/plugin-transform-optional-catch-binding/README.md +19 -0
- node_modules/@babel/plugin-transform-optional-chaining/README.md +19 -0
- node_modules/@babel/plugin-transform-parameters/README.md +19 -0
- node_modules/@babel/plugin-transform-private-methods/README.md +19 -0
- node_modules/@babel/plugin-transform-private-property-in-object/README.md +19 -0
- node_modules/@babel/plugin-transform-property-literals/README.md +19 -0
- node_modules/@babel/plugin-transform-react-display-name/README.md +19 -0
- node_modules/@babel/plugin-transform-react-jsx/README.md +19 -0
- node_modules/@babel/plugin-transform-react-jsx-development/README.md +19 -0
- node_modules/@babel/plugin-transform-react-pure-annotations/README.md +19 -0
- node_modules/@babel/plugin-transform-regenerator/README.md +19 -0
- node_modules/@babel/plugin-transform-regexp-modifiers/README.md +19 -0
- node_modules/@babel/plugin-transform-reserved-words/README.md +19 -0
- node_modules/@babel/plugin-transform-shorthand-properties/README.md +19 -0
- node_modules/@babel/plugin-transform-spread/README.md +19 -0
- node_modules/@babel/plugin-transform-sticky-regex/README.md +19 -0
- node_modules/@babel/plugin-transform-template-literals/README.md +19 -0
- node_modules/@babel/plugin-transform-typeof-symbol/README.md +19 -0
- node_modules/@babel/plugin-transform-typescript/README.md +19 -0
- node_modules/@babel/plugin-transform-unicode-escapes/README.md +19 -0
- node_modules/@babel/plugin-transform-unicode-property-regex/README.md +19 -0
- node_modules/@babel/plugin-transform-unicode-regex/README.md +19 -0
- node_modules/@babel/plugin-transform-unicode-sets-regex/README.md +19 -0
- node_modules/@babel/preset-env/README.md +19 -0
- node_modules/@babel/preset-modules/README.md +171 -0
- node_modules/@babel/preset-react/README.md +19 -0
- node_modules/@babel/preset-typescript/README.md +19 -0
- node_modules/@babel/runtime/README.md +19 -0
- node_modules/@babel/template/README.md +19 -0
- node_modules/@babel/traverse/README.md +19 -0
- node_modules/@babel/types/README.md +19 -0
- node_modules/@csstools/cascade-layer-name-parser/LICENSE.md +20 -0
- node_modules/@csstools/cascade-layer-name-parser/README.md +32 -0
- node_modules/@csstools/color-helpers/LICENSE.md +18 -0
- node_modules/@csstools/color-helpers/README.md +32 -0
- node_modules/@csstools/css-calc/LICENSE.md +20 -0
- node_modules/@csstools/css-calc/README.md +132 -0
- node_modules/@csstools/css-color-parser/LICENSE.md +20 -0
- node_modules/@csstools/css-color-parser/README.md +37 -0
- node_modules/@csstools/css-parser-algorithms/LICENSE.md +20 -0
- node_modules/@csstools/css-parser-algorithms/README.md +119 -0
- node_modules/@csstools/css-tokenizer/LICENSE.md +20 -0
- node_modules/@csstools/css-tokenizer/README.md +111 -0
- node_modules/@csstools/media-query-list-parser/LICENSE.md +20 -0
- node_modules/@csstools/media-query-list-parser/README.md +61 -0
- node_modules/@csstools/postcss-cascade-layers/LICENSE.md +18 -0
- node_modules/@csstools/postcss-cascade-layers/README.md +194 -0
- node_modules/@csstools/postcss-cascade-layers/node_modules/@csstools/selector-specificity/LICENSE.md +18 -0
- node_modules/@csstools/postcss-cascade-layers/node_modules/@csstools/selector-specificity/README.md +57 -0
- node_modules/@csstools/postcss-cascade-layers/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/@csstools/postcss-color-function/LICENSE.md +18 -0
- node_modules/@csstools/postcss-color-function/README.md +151 -0
- node_modules/@csstools/postcss-color-mix-function/LICENSE.md +18 -0
- node_modules/@csstools/postcss-color-mix-function/README.md +74 -0
- node_modules/@csstools/postcss-content-alt-text/LICENSE.md +18 -0
- node_modules/@csstools/postcss-content-alt-text/README.md +122 -0
- node_modules/@csstools/postcss-exponential-functions/LICENSE.md +18 -0
- node_modules/@csstools/postcss-exponential-functions/README.md +91 -0
- node_modules/@csstools/postcss-font-format-keywords/LICENSE.md +18 -0
- node_modules/@csstools/postcss-font-format-keywords/README.md +88 -0
- node_modules/@csstools/postcss-gamut-mapping/LICENSE.md +18 -0
- node_modules/@csstools/postcss-gamut-mapping/README.md +71 -0
- node_modules/@csstools/postcss-gradients-interpolation-method/LICENSE.md +18 -0
- node_modules/@csstools/postcss-gradients-interpolation-method/README.md +160 -0
- node_modules/@csstools/postcss-hwb-function/LICENSE.md +18 -0
- node_modules/@csstools/postcss-hwb-function/README.md +88 -0
- node_modules/@csstools/postcss-ic-unit/LICENSE.md +18 -0
- node_modules/@csstools/postcss-ic-unit/README.md +96 -0
- node_modules/@csstools/postcss-initial/LICENSE.md +18 -0
- node_modules/@csstools/postcss-initial/README.md +74 -0
- node_modules/@csstools/postcss-is-pseudo-class/LICENSE.md +18 -0
- node_modules/@csstools/postcss-is-pseudo-class/README.md +253 -0
- node_modules/@csstools/postcss-is-pseudo-class/node_modules/@csstools/selector-specificity/LICENSE.md +18 -0
- node_modules/@csstools/postcss-is-pseudo-class/node_modules/@csstools/selector-specificity/README.md +57 -0
- node_modules/@csstools/postcss-is-pseudo-class/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/@csstools/postcss-light-dark-function/LICENSE.md +18 -0
- node_modules/@csstools/postcss-light-dark-function/README.md +174 -0
- node_modules/@csstools/postcss-logical-float-and-clear/LICENSE.md +18 -0
- node_modules/@csstools/postcss-logical-float-and-clear/README.md +86 -0
- node_modules/@csstools/postcss-logical-overflow/LICENSE.md +18 -0
- node_modules/@csstools/postcss-logical-overflow/README.md +96 -0
- node_modules/@csstools/postcss-logical-overscroll-behavior/LICENSE.md +18 -0
- node_modules/@csstools/postcss-logical-overscroll-behavior/README.md +96 -0
- node_modules/@csstools/postcss-logical-resize/LICENSE.md +18 -0
- node_modules/@csstools/postcss-logical-resize/README.md +99 -0
- node_modules/@csstools/postcss-logical-viewport-units/LICENSE.md +18 -0
- node_modules/@csstools/postcss-logical-viewport-units/README.md +105 -0
- node_modules/@csstools/postcss-media-minmax/LICENSE.md +21 -0
- node_modules/@csstools/postcss-media-minmax/README.md +54 -0
- node_modules/@csstools/postcss-media-queries-aspect-ratio-number-values/LICENSE.md +18 -0
- node_modules/@csstools/postcss-media-queries-aspect-ratio-number-values/README.md +62 -0
- node_modules/@csstools/postcss-nested-calc/LICENSE.md +18 -0
- node_modules/@csstools/postcss-nested-calc/README.md +71 -0
- node_modules/@csstools/postcss-normalize-display-values/LICENSE.md +18 -0
- node_modules/@csstools/postcss-normalize-display-values/README.md +88 -0
- node_modules/@csstools/postcss-oklab-function/LICENSE.md +18 -0
- node_modules/@csstools/postcss-oklab-function/README.md +173 -0
- node_modules/@csstools/postcss-progressive-custom-properties/LICENSE.md +18 -0
- node_modules/@csstools/postcss-progressive-custom-properties/README.md +122 -0
- node_modules/@csstools/postcss-random-function/LICENSE.md +18 -0
- node_modules/@csstools/postcss-random-function/README.md +121 -0
- node_modules/@csstools/postcss-relative-color-syntax/LICENSE.md +18 -0
- node_modules/@csstools/postcss-relative-color-syntax/README.md +74 -0
- node_modules/@csstools/postcss-scope-pseudo-class/LICENSE.md +18 -0
- node_modules/@csstools/postcss-scope-pseudo-class/README.md +73 -0
- node_modules/@csstools/postcss-scope-pseudo-class/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/@csstools/postcss-sign-functions/LICENSE.md +18 -0
- node_modules/@csstools/postcss-sign-functions/README.md +184 -0
- node_modules/@csstools/postcss-stepped-value-functions/LICENSE.md +18 -0
- node_modules/@csstools/postcss-stepped-value-functions/README.md +107 -0
- node_modules/@csstools/postcss-text-decoration-shorthand/LICENSE.md +18 -0
- node_modules/@csstools/postcss-text-decoration-shorthand/README.md +75 -0
- node_modules/@csstools/postcss-trigonometric-functions/LICENSE.md +18 -0
- node_modules/@csstools/postcss-trigonometric-functions/README.md +149 -0
- node_modules/@csstools/postcss-unset-value/LICENSE.md +18 -0
- node_modules/@csstools/postcss-unset-value/README.md +120 -0
- node_modules/@csstools/utilities/LICENSE.md +18 -0
- node_modules/@csstools/utilities/README.md +25 -0
- node_modules/@discoveryjs/json-ext/README.md +256 -0
- node_modules/@eslint/config-array/README.md +358 -0
- node_modules/@eslint/core/README.md +29 -0
- node_modules/@eslint/eslintrc/README.md +126 -0
- node_modules/@eslint/js/README.md +60 -0
- node_modules/@eslint/object-schema/README.md +242 -0
- node_modules/@eslint/plugin-kit/README.md +273 -0
- node_modules/@eslint-community/eslint-utils/README.md +37 -0
- node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/README.md +105 -0
- node_modules/@eslint-community/regexpp/README.md +177 -0
- node_modules/@humanfs/core/README.md +140 -0
- node_modules/@humanfs/node/README.md +141 -0
- node_modules/@humanfs/node/node_modules/@humanwhocodes/retry/README.md +138 -0
- node_modules/@humanwhocodes/module-importer/README.md +80 -0
- node_modules/@humanwhocodes/retry/README.md +177 -0
- node_modules/@isaacs/cliui/README.md +143 -0
- node_modules/@jest/schemas/README.md +3 -0
- node_modules/@jest/types/README.md +30 -0
- node_modules/@jridgewell/gen-mapping/README.md +227 -0
- node_modules/@jridgewell/resolve-uri/README.md +40 -0
- node_modules/@jridgewell/set-array/README.md +37 -0
- node_modules/@jridgewell/source-map/README.md +184 -0
- node_modules/@jridgewell/sourcemap-codec/README.md +264 -0
- node_modules/@jridgewell/trace-mapping/README.md +257 -0
- node_modules/@nodelib/fs.scandir/README.md +171 -0
- node_modules/@nodelib/fs.stat/README.md +126 -0
- node_modules/@nodelib/fs.walk/README.md +215 -0
- node_modules/@parcel/watcher/README.md +135 -0
- node_modules/@parcel/watcher-linux-x64-glibc/README.md +1 -0
- node_modules/@pkgjs/parseargs/README.md +413 -0
- node_modules/@tailwindcss/typography/README.md +398 -0
- node_modules/@trysound/sax/README.md +202 -0
- node_modules/@types/eslint/README.md +15 -0
- node_modules/@types/eslint-scope/README.md +90 -0
- node_modules/@types/estree/README.md +15 -0
- node_modules/@types/istanbul-lib-coverage/README.md +15 -0
- node_modules/@types/istanbul-lib-report/README.md +15 -0
- node_modules/@types/istanbul-reports/README.md +86 -0
- node_modules/@types/json-schema/README.md +15 -0
- node_modules/@types/node/README.md +15 -0
- node_modules/@types/react/README.md +15 -0
- node_modules/@types/react-dom/README.md +16 -0
- node_modules/@types/yargs/README.md +15 -0
- node_modules/@types/yargs-parser/README.md +15 -0
- node_modules/@typescript-eslint/eslint-plugin/README.md +12 -0
- node_modules/@typescript-eslint/eslint-plugin/docs/rules/README.md +57 -0
- node_modules/@typescript-eslint/parser/README.md +12 -0
- node_modules/@typescript-eslint/scope-manager/README.md +10 -0
- node_modules/@typescript-eslint/type-utils/README.md +12 -0
- node_modules/@typescript-eslint/types/README.md +12 -0
- node_modules/@typescript-eslint/typescript-estree/README.md +14 -0
- node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion/README.md +135 -0
- node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch/README.md +454 -0
- node_modules/@typescript-eslint/typescript-estree/node_modules/semver/README.md +654 -0
- node_modules/@typescript-eslint/utils/README.md +12 -0
- node_modules/@typescript-eslint/visitor-keys/README.md +10 -0
- node_modules/@webassemblyjs/ast/README.md +167 -0
- node_modules/@webassemblyjs/floating-point-hex-parser/README.md +34 -0
- node_modules/@webassemblyjs/wasm-edit/README.md +86 -0
- node_modules/@webassemblyjs/wasm-parser/README.md +28 -0
- node_modules/@webassemblyjs/wast-printer/README.md +17 -0
- node_modules/@webpack-cli/configtest/README.md +31 -0
- node_modules/@webpack-cli/info/README.md +54 -0
- node_modules/@webpack-cli/serve/README.md +32 -0
- node_modules/@xtuc/ieee754/README.md +51 -0
- node_modules/@xtuc/long/README.md +257 -0
- node_modules/acorn/README.md +282 -0
- node_modules/acorn-jsx/README.md +40 -0
- node_modules/ajv/README.md +1497 -0
- node_modules/ajv/lib/dotjs/README.md +3 -0
- node_modules/ajv-formats/README.md +123 -0
- node_modules/ajv-formats/node_modules/ajv/README.md +207 -0
- node_modules/ajv-formats/node_modules/json-schema-traverse/README.md +95 -0
- node_modules/ajv-keywords/README.md +836 -0
- node_modules/ajv-keywords/keywords/dotjs/README.md +3 -0
- node_modules/any-promise/README.md +161 -0
- node_modules/anymatch/README.md +87 -0
- node_modules/arg/LICENSE.md +21 -0
- node_modules/arg/README.md +317 -0
- node_modules/argparse/README.md +84 -0
- node_modules/array-buffer-byte-length/README.md +40 -0
- node_modules/array-includes/README.md +105 -0
- node_modules/array.prototype.findlast/README.md +74 -0
- node_modules/array.prototype.flat/README.md +75 -0
- node_modules/array.prototype.flatmap/README.md +82 -0
- node_modules/array.prototype.tosorted/README.md +71 -0
- node_modules/arraybuffer.prototype.slice/README.md +61 -0
- node_modules/async-function/README.md +51 -0
- node_modules/autoprefixer/README.md +66 -0
- node_modules/available-typed-arrays/README.md +55 -0
- node_modules/babel-loader/README.md +411 -0
- node_modules/babel-plugin-polyfill-corejs2/README.md +28 -0
- node_modules/babel-plugin-polyfill-corejs3/README.md +78 -0
- node_modules/babel-plugin-polyfill-corejs3/core-js-compat/README.md +4 -0
- node_modules/babel-plugin-polyfill-regenerator/README.md +28 -0
- node_modules/balanced-match/LICENSE.md +21 -0
- node_modules/balanced-match/README.md +97 -0
- node_modules/boolbase/README.md +10 -0
- node_modules/brace-expansion/README.md +129 -0
- node_modules/braces/README.md +586 -0
- node_modules/browserslist/README.md +67 -0
- node_modules/call-bind/README.md +64 -0
- node_modules/call-bind-apply-helpers/README.md +62 -0
- node_modules/call-bound/README.md +53 -0
- node_modules/camelcase-css/README.md +27 -0
- node_modules/caniuse-api/README.md +157 -0
- node_modules/caniuse-lite/README.md +6 -0
- node_modules/chokidar/README.md +308 -0
- node_modules/chokidar-cli/README.md +148 -0
- node_modules/chrome-trace-event/README.md +31 -0
- node_modules/ci-info/README.md +135 -0
- node_modules/cliui/README.md +115 -0
- node_modules/cliui/node_modules/color-convert/README.md +68 -0
- node_modules/cliui/node_modules/color-name/README.md +11 -0
- node_modules/cliui/node_modules/emoji-regex/README.md +73 -0
- node_modules/clone-deep/README.md +106 -0
- node_modules/color-convert/README.md +68 -0
- node_modules/color-name/README.md +11 -0
- node_modules/colord/LICENSE.md +21 -0
- node_modules/colord/README.md +1053 -0
- node_modules/colorette/LICENSE.md +7 -0
- node_modules/colorette/README.md +134 -0
- node_modules/common-path-prefix/README.md +51 -0
- node_modules/concurrently/README.md +229 -0
- node_modules/concurrently/docs/README.md +13 -0
- node_modules/concurrently/node_modules/cliui/README.md +141 -0
- node_modules/concurrently/node_modules/emoji-regex/README.md +73 -0
- node_modules/concurrently/node_modules/y18n/README.md +127 -0
- node_modules/concurrently/node_modules/yargs/README.md +204 -0
- node_modules/concurrently/node_modules/yargs-parser/README.md +518 -0
- node_modules/convert-source-map/README.md +206 -0
- node_modules/core-js-compat/README.md +135 -0
- node_modules/cosmiconfig/README.md +782 -0
- node_modules/cross-spawn/README.md +89 -0
- node_modules/css-blank-pseudo/LICENSE.md +18 -0
- node_modules/css-blank-pseudo/README.md +205 -0
- node_modules/css-blank-pseudo/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/css-has-pseudo/LICENSE.md +18 -0
- node_modules/css-has-pseudo/README.md +331 -0
- node_modules/css-has-pseudo/node_modules/@csstools/selector-specificity/LICENSE.md +18 -0
- node_modules/css-has-pseudo/node_modules/@csstools/selector-specificity/README.md +57 -0
- node_modules/css-has-pseudo/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/css-loader/README.md +2334 -0
- node_modules/css-loader/node_modules/semver/README.md +654 -0
- node_modules/css-minimizer-webpack-plugin/README.md +624 -0
- node_modules/css-prefers-color-scheme/LICENSE.md +18 -0
- node_modules/css-prefers-color-scheme/README.md +341 -0
- node_modules/css-select/README.md +264 -0
- node_modules/css-selector-tokenizer/README.md +92 -0
- node_modules/css-tree/README.md +193 -0
- node_modules/cssdb/LICENSE.md +18 -0
- node_modules/cssdb/README.md +35 -0
- node_modules/cssesc/README.md +201 -0
- node_modules/cssnano/README.md +6 -0
- node_modules/cssnano-preset-default/README.md +310 -0
- node_modules/cssnano-utils/README.md +15 -0
- node_modules/csso/README.md +422 -0
- node_modules/csso/node_modules/css-tree/README.md +193 -0
- node_modules/csso/node_modules/mdn-data/README.md +56 -0
- node_modules/csstype/README.md +277 -0
- node_modules/culori/README.md +19 -0
- node_modules/daisyui/README.md +65 -0
- node_modules/data-view-buffer/README.md +43 -0
- node_modules/data-view-byte-length/README.md +43 -0
- node_modules/data-view-byte-offset/README.md +43 -0
- node_modules/debug/README.md +481 -0
- node_modules/define-data-property/README.md +67 -0
- node_modules/define-properties/README.md +84 -0
- node_modules/detect-libc/README.md +78 -0
- node_modules/didyoumean/README.md +134 -0
- node_modules/dlv/README.md +76 -0
- node_modules/doctrine/README.md +165 -0
- node_modules/dom-serializer/README.md +109 -0
- node_modules/dunder-proto/README.md +54 -0
- node_modules/eastasianwidth/README.md +32 -0
- node_modules/electron-to-chromium/README.md +186 -0
- node_modules/emoji-regex/README.md +137 -0
- node_modules/enhanced-resolve/README.md +183 -0
- node_modules/envinfo/README.md +286 -0
- node_modules/error-ex/README.md +144 -0
- node_modules/es-abstract/README.md +43 -0
- node_modules/es-define-property/README.md +49 -0
- node_modules/es-errors/README.md +55 -0
- node_modules/es-iterator-helpers/README.md +110 -0
- node_modules/es-module-lexer/README.md +338 -0
- node_modules/es-object-atoms/README.md +63 -0
- node_modules/es-set-tostringtag/README.md +53 -0
- node_modules/es-shim-unscopables/README.md +57 -0
- node_modules/es-to-primitive/README.md +52 -0
- node_modules/eslint/README.md +329 -0
- node_modules/eslint/node_modules/glob-parent/README.md +134 -0
- node_modules/eslint-plugin-prettier/LICENSE.md +24 -0
- node_modules/eslint-plugin-prettier/README.md +202 -0
- node_modules/eslint-plugin-react/README.md +423 -0
- node_modules/eslint-plugin-tailwindcss/README.md +307 -0
- node_modules/eslint-scope/README.md +108 -0
- node_modules/eslint-visitor-keys/README.md +120 -0
- node_modules/espree/README.md +261 -0
- node_modules/esquery/README.md +27 -0
- node_modules/esrecurse/README.md +171 -0
- node_modules/estraverse/README.md +153 -0
- node_modules/esutils/README.md +174 -0
- node_modules/fast-deep-equal/README.md +96 -0
- node_modules/fast-diff/README.md +24 -0
- node_modules/fast-glob/README.md +830 -0
- node_modules/fast-json-stable-stringify/README.md +131 -0
- node_modules/fast-levenshtein/LICENSE.md +25 -0
- node_modules/fast-levenshtein/README.md +104 -0
- node_modules/fast-uri/README.md +130 -0
- node_modules/fastest-levenshtein/LICENSE.md +21 -0
- node_modules/fastest-levenshtein/README.md +57 -0
- node_modules/fastparse/README.md +118 -0
- node_modules/fastq/README.md +306 -0
- node_modules/file-entry-cache/README.md +115 -0
- node_modules/fill-range/README.md +237 -0
- node_modules/flat/README.md +236 -0
- node_modules/flat-cache/README.md +77 -0
- node_modules/flatted/README.md +115 -0
- node_modules/for-each/README.md +39 -0
- node_modules/foreground-child/README.md +128 -0
- node_modules/fraction.js/README.md +466 -0
- node_modules/function-bind/README.md +46 -0
- node_modules/function.prototype.name/README.md +55 -0
- node_modules/functions-have-names/README.md +40 -0
- node_modules/gensync/README.md +196 -0
- node_modules/get-caller-file/LICENSE.md +6 -0
- node_modules/get-caller-file/README.md +41 -0
- node_modules/get-intrinsic/README.md +71 -0
- node_modules/get-proto/README.md +50 -0
- node_modules/get-symbol-description/README.md +43 -0
- node_modules/glob/README.md +1265 -0
- node_modules/glob/node_modules/brace-expansion/README.md +135 -0
- node_modules/glob/node_modules/minimatch/README.md +454 -0
- node_modules/glob-parent/README.md +137 -0
- node_modules/glob-to-regexp/README.md +75 -0
- node_modules/globalthis/README.md +70 -0
- node_modules/gonzales-pe/README.md +808 -0
- node_modules/gopd/README.md +40 -0
- node_modules/graceful-fs/README.md +143 -0
- node_modules/graphemer/README.md +132 -0
- node_modules/has-bigints/README.md +39 -0
- node_modules/has-property-descriptors/README.md +43 -0
- node_modules/has-proto/README.md +57 -0
- node_modules/has-symbols/README.md +46 -0
- node_modules/has-tostringtag/README.md +46 -0
- node_modules/hasown/README.md +40 -0
- node_modules/hosted-git-info/README.md +133 -0
- node_modules/icss-utils/LICENSE.md +6 -0
- node_modules/icss-utils/README.md +94 -0
- node_modules/ignore/README.md +412 -0
- node_modules/immutable/README.md +761 -0
- node_modules/imurmurhash/README.md +122 -0
- node_modules/internal-slot/README.md +58 -0
- node_modules/interpret/README.md +244 -0
- node_modules/is-array-buffer/README.md +56 -0
- node_modules/is-arrayish/README.md +16 -0
- node_modules/is-async-function/README.md +41 -0
- node_modules/is-bigint/README.md +44 -0
- node_modules/is-boolean-object/README.md +57 -0
- node_modules/is-callable/README.md +83 -0
- node_modules/is-core-module/README.md +40 -0
- node_modules/is-data-view/README.md +69 -0
- node_modules/is-date-object/README.md +52 -0
- node_modules/is-extglob/README.md +107 -0
- node_modules/is-finalizationregistry/README.md +54 -0
- node_modules/is-generator-function/README.md +40 -0
- node_modules/is-glob/README.md +206 -0
- node_modules/is-map/README.md +52 -0
- node_modules/is-number/README.md +187 -0
- node_modules/is-number-object/README.md +55 -0
- node_modules/is-plain-object/README.md +104 -0
- node_modules/is-regex/README.md +52 -0
- node_modules/is-set/README.md +50 -0
- node_modules/is-shared-array-buffer/README.md +56 -0
- node_modules/is-string/README.md +56 -0
- node_modules/is-symbol/README.md +45 -0
- node_modules/is-typed-array/README.md +70 -0
- node_modules/is-weakmap/README.md +50 -0
- node_modules/is-weakref/README.md +52 -0
- node_modules/is-weakset/README.md +50 -0
- node_modules/isarray/README.md +38 -0
- node_modules/isexe/README.md +51 -0
- node_modules/isobject/README.md +122 -0
- node_modules/iterator.prototype/README.md +35 -0
- node_modules/jackspeak/LICENSE.md +55 -0
- node_modules/jackspeak/README.md +357 -0
- node_modules/jest-worker/README.md +272 -0
- node_modules/jiti/README.md +164 -0
- node_modules/js-tokens/README.md +240 -0
- node_modules/js-yaml/README.md +246 -0
- node_modules/jsesc/README.md +422 -0
- node_modules/json-buffer/README.md +24 -0
- node_modules/json-parse-better-errors/LICENSE.md +7 -0
- node_modules/json-parse-better-errors/README.md +46 -0
- node_modules/json-parse-even-better-errors/LICENSE.md +25 -0
- node_modules/json-parse-even-better-errors/README.md +96 -0
- node_modules/json-schema-traverse/README.md +83 -0
- node_modules/json5/LICENSE.md +23 -0
- node_modules/json5/README.md +282 -0
- node_modules/jsx-ast-utils/LICENSE.md +8 -0
- node_modules/jsx-ast-utils/README.md +298 -0
- node_modules/keyv/README.md +429 -0
- node_modules/kind-of/README.md +367 -0
- node_modules/levn/README.md +196 -0
- node_modules/lines-and-columns/README.md +33 -0
- node_modules/loader-runner/README.md +53 -0
- node_modules/lodash/README.md +39 -0
- node_modules/lodash.castarray/README.md +18 -0
- node_modules/lodash.debounce/README.md +18 -0
- node_modules/lodash.isplainobject/README.md +18 -0
- node_modules/lodash.memoize/README.md +18 -0
- node_modules/lodash.merge/README.md +18 -0
- node_modules/lodash.throttle/README.md +18 -0
- node_modules/lodash.uniq/README.md +18 -0
- node_modules/loose-envify/README.md +45 -0
- node_modules/lru-cache/README.md +166 -0
- node_modules/math-intrinsics/README.md +50 -0
- node_modules/mdn-data/README.md +62 -0
- node_modules/memorystream/README.md +93 -0
- node_modules/merge-stream/README.md +78 -0
- node_modules/merge2/README.md +144 -0
- node_modules/micromatch/README.md +1024 -0
- node_modules/mime-db/README.md +100 -0
- node_modules/mime-types/README.md +113 -0
- node_modules/mini-css-extract-plugin/README.md +1296 -0
- node_modules/minimatch/README.md +230 -0
- node_modules/minimist/README.md +121 -0
- node_modules/minipass/README.md +825 -0
- node_modules/mz/README.md +106 -0
- node_modules/nanoid/README.md +554 -0
- node_modules/natural-compare/README.md +125 -0
- node_modules/neo-async/README.md +273 -0
- node_modules/nice-try/README.md +32 -0
- node_modules/node-addon-api/LICENSE.md +9 -0
- node_modules/node-addon-api/README.md +319 -0
- node_modules/node-addon-api/tools/README.md +73 -0
- node_modules/node-releases/README.md +12 -0
- node_modules/normalize-package-data/README.md +106 -0
- node_modules/normalize-package-data/node_modules/semver/README.md +412 -0
- node_modules/normalize-path/README.md +127 -0
- node_modules/npm-run-all/README.md +91 -0
- node_modules/npm-run-all/node_modules/color-convert/README.md +68 -0
- node_modules/npm-run-all/node_modules/color-name/README.md +11 -0
- node_modules/npm-run-all/node_modules/cross-spawn/README.md +94 -0
- node_modules/npm-run-all/node_modules/semver/README.md +412 -0
- node_modules/npm-run-all/node_modules/which/README.md +51 -0
- node_modules/nth-check/README.md +136 -0
- node_modules/object-keys/README.md +76 -0
- node_modules/object.assign/README.md +136 -0
- node_modules/object.entries/README.md +58 -0
- node_modules/object.fromentries/README.md +50 -0
- node_modules/object.values/README.md +58 -0
- node_modules/optionator/README.md +238 -0
- node_modules/own-keys/README.md +45 -0
- node_modules/package-json-from-dist/LICENSE.md +63 -0
- node_modules/package-json-from-dist/README.md +110 -0
- node_modules/path-parse/README.md +42 -0
- node_modules/path-scurry/LICENSE.md +55 -0
- node_modules/path-scurry/README.md +636 -0
- node_modules/path-scurry/node_modules/lru-cache/README.md +331 -0
- node_modules/picocolors/README.md +21 -0
- node_modules/picomatch/README.md +708 -0
- node_modules/pirates/README.md +69 -0
- node_modules/possible-typed-array-names/README.md +48 -0
- node_modules/postcss/README.md +28 -0
- node_modules/postcss-attribute-case-insensitive/LICENSE.md +20 -0
- node_modules/postcss-attribute-case-insensitive/README.md +73 -0
- node_modules/postcss-attribute-case-insensitive/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-calc/README.md +153 -0
- node_modules/postcss-calc/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-clamp/README.md +118 -0
- node_modules/postcss-color-functional-notation/LICENSE.md +18 -0
- node_modules/postcss-color-functional-notation/README.md +134 -0
- node_modules/postcss-color-hex-alpha/LICENSE.md +21 -0
- node_modules/postcss-color-hex-alpha/README.md +72 -0
- node_modules/postcss-color-rebeccapurple/LICENSE.md +18 -0
- node_modules/postcss-color-rebeccapurple/README.md +76 -0
- node_modules/postcss-colormin/README.md +45 -0
- node_modules/postcss-convert-values/README.md +98 -0
- node_modules/postcss-custom-media/LICENSE.md +21 -0
- node_modules/postcss-custom-media/README.md +183 -0
- node_modules/postcss-custom-properties/LICENSE.md +21 -0
- node_modules/postcss-custom-properties/README.md +173 -0
- node_modules/postcss-custom-selectors/LICENSE.md +21 -0
- node_modules/postcss-custom-selectors/README.md +107 -0
- node_modules/postcss-custom-selectors/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-dir-pseudo-class/LICENSE.md +18 -0
- node_modules/postcss-dir-pseudo-class/README.md +193 -0
- node_modules/postcss-dir-pseudo-class/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-discard-comments/README.md +114 -0
- node_modules/postcss-discard-comments/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-discard-duplicates/README.md +70 -0
- node_modules/postcss-discard-empty/README.md +49 -0
- node_modules/postcss-discard-overridden/README.md +158 -0
- node_modules/postcss-double-position-gradients/LICENSE.md +18 -0
- node_modules/postcss-double-position-gradients/README.md +129 -0
- node_modules/postcss-focus-visible/LICENSE.md +18 -0
- node_modules/postcss-focus-visible/README.md +137 -0
- node_modules/postcss-focus-visible/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-focus-within/LICENSE.md +18 -0
- node_modules/postcss-focus-within/README.md +196 -0
- node_modules/postcss-focus-within/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-font-variant/README.md +74 -0
- node_modules/postcss-gap-properties/LICENSE.md +18 -0
- node_modules/postcss-gap-properties/README.md +102 -0
- node_modules/postcss-image-set-function/LICENSE.md +18 -0
- node_modules/postcss-image-set-function/README.md +164 -0
- node_modules/postcss-import/README.md +244 -0
- node_modules/postcss-js/README.md +22 -0
- node_modules/postcss-lab-function/LICENSE.md +18 -0
- node_modules/postcss-lab-function/README.md +156 -0
- node_modules/postcss-load-config/README.md +466 -0
- node_modules/postcss-loader/README.md +1175 -0
- node_modules/postcss-loader/node_modules/semver/README.md +654 -0
- node_modules/postcss-logical/LICENSE.md +18 -0
- node_modules/postcss-logical/README.md +117 -0
- node_modules/postcss-merge-longhand/README.md +50 -0
- node_modules/postcss-merge-rules/README.md +105 -0
- node_modules/postcss-merge-rules/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-minify-font-values/README.md +83 -0
- node_modules/postcss-minify-gradients/README.md +53 -0
- node_modules/postcss-minify-params/README.md +39 -0
- node_modules/postcss-minify-selectors/README.md +42 -0
- node_modules/postcss-minify-selectors/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-modules-extract-imports/README.md +76 -0
- node_modules/postcss-modules-local-by-default/README.md +123 -0
- node_modules/postcss-modules-local-by-default/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-modules-scope/README.md +100 -0
- node_modules/postcss-modules-scope/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-modules-values/README.md +80 -0
- node_modules/postcss-nested/README.md +85 -0
- node_modules/postcss-nested/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-nesting/LICENSE.md +18 -0
- node_modules/postcss-nesting/README.md +255 -0
- node_modules/postcss-nesting/node_modules/@csstools/selector-resolve-nested/LICENSE.md +18 -0
- node_modules/postcss-nesting/node_modules/@csstools/selector-resolve-nested/README.md +33 -0
- node_modules/postcss-nesting/node_modules/@csstools/selector-specificity/LICENSE.md +18 -0
- node_modules/postcss-nesting/node_modules/@csstools/selector-specificity/README.md +57 -0
- node_modules/postcss-nesting/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-normalize-charset/README.md +43 -0
- node_modules/postcss-normalize-display-values/README.md +44 -0
- node_modules/postcss-normalize-positions/README.md +44 -0
- node_modules/postcss-normalize-repeat-style/README.md +44 -0
- node_modules/postcss-normalize-string/README.md +59 -0
- node_modules/postcss-normalize-timing-functions/README.md +44 -0
- node_modules/postcss-normalize-unicode/README.md +46 -0
- node_modules/postcss-normalize-url/README.md +48 -0
- node_modules/postcss-normalize-whitespace/README.md +44 -0
- node_modules/postcss-opacity-percentage/LICENSE.md +9 -0
- node_modules/postcss-opacity-percentage/README.md +85 -0
- node_modules/postcss-ordered-values/README.md +72 -0
- node_modules/postcss-overflow-shorthand/LICENSE.md +18 -0
- node_modules/postcss-overflow-shorthand/README.md +74 -0
- node_modules/postcss-page-break/README.md +83 -0
- node_modules/postcss-place/LICENSE.md +18 -0
- node_modules/postcss-place/README.md +81 -0
- node_modules/postcss-preset-env/LICENSE.md +18 -0
- node_modules/postcss-preset-env/README.md +496 -0
- node_modules/postcss-pseudo-class-any-link/LICENSE.md +18 -0
- node_modules/postcss-pseudo-class-any-link/README.md +106 -0
- node_modules/postcss-pseudo-class-any-link/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-reduce-initial/README.md +92 -0
- node_modules/postcss-reduce-transforms/README.md +47 -0
- node_modules/postcss-replace-overflow-wrap/README.md +56 -0
- node_modules/postcss-sass/README.md +21 -0
- node_modules/postcss-selector-not/LICENSE.md +20 -0
- node_modules/postcss-selector-not/README.md +51 -0
- node_modules/postcss-selector-not/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-svgo/README.md +109 -0
- node_modules/postcss-unique-selectors/README.md +46 -0
- node_modules/postcss-unique-selectors/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/postcss-value-parser/README.md +263 -0
- node_modules/prelude-ls/README.md +15 -0
- node_modules/prettier/README.md +109 -0
- node_modules/prettier-linter-helpers/LICENSE.md +24 -0
- node_modules/prettier-linter-helpers/README.md +14 -0
- node_modules/prettier-plugin-tailwindcss/README.md +239 -0
- node_modules/prettier-plugin-tailwindcss/dist/licenses/@shopify/prettier-plugin-liquid/README.md +158 -0
- node_modules/prettier-plugin-tailwindcss/dist/licenses/marko/README.md +161 -0
- node_modules/prettier-plugin-tailwindcss/dist/licenses/prettier-plugin-sort-imports/README.md +95 -0
- node_modules/prettier-plugin-tailwindcss/dist/licenses/prettier-plugin-style-order/README.md +19 -0
- node_modules/prop-types/README.md +302 -0
- node_modules/punycode/README.md +148 -0
- node_modules/queue-microtask/README.md +90 -0
- node_modules/randombytes/README.md +14 -0
- node_modules/react/README.md +37 -0
- node_modules/react-dom/README.md +60 -0
- node_modules/react-is/README.md +104 -0
- node_modules/read-cache/README.md +46 -0
- node_modules/readdirp/README.md +122 -0
- node_modules/rechoir/README.md +73 -0
- node_modules/reflect.getprototypeof/README.md +77 -0
- node_modules/regenerate/README.md +338 -0
- node_modules/regenerate-unicode-properties/README.md +70 -0
- node_modules/regenerator-runtime/README.md +31 -0
- node_modules/regenerator-transform/README.md +46 -0
- node_modules/regexp.prototype.flags/README.md +55 -0
- node_modules/regexpu-core/README.md +226 -0
- node_modules/regjsgen/README.md +41 -0
- node_modules/regjsparser/README.md +47 -0
- node_modules/regjsparser/node_modules/jsesc/README.md +422 -0
- node_modules/require-main-filename/README.md +26 -0
- node_modules/reusify/README.md +145 -0
- node_modules/run-parallel/README.md +85 -0
- node_modules/rxjs/README.md +107 -0
- node_modules/safe-array-concat/README.md +53 -0
- node_modules/safe-buffer/README.md +584 -0
- node_modules/safe-push-apply/README.md +59 -0
- node_modules/safe-regex-test/README.md +46 -0
- node_modules/sass/README.md +173 -0
- node_modules/sass/node_modules/chokidar/README.md +305 -0
- node_modules/sass/node_modules/readdirp/README.md +120 -0
- node_modules/sass-loader/README.md +904 -0
- node_modules/scheduler/README.md +9 -0
- node_modules/schema-utils/README.md +317 -0
- node_modules/schema-utils/node_modules/ajv/README.md +207 -0
- node_modules/schema-utils/node_modules/ajv-keywords/README.md +745 -0
- node_modules/schema-utils/node_modules/json-schema-traverse/README.md +95 -0
- node_modules/semver/README.md +443 -0
- node_modules/serialize-javascript/README.md +143 -0
- node_modules/set-blocking/README.md +31 -0
- node_modules/set-function-length/README.md +56 -0
- node_modules/set-function-name/README.md +61 -0
- node_modules/set-proto/README.md +52 -0
- node_modules/shallow-clone/README.md +153 -0
- node_modules/shell-quote/README.md +161 -0
- node_modules/side-channel/README.md +61 -0
- node_modules/side-channel-list/README.md +62 -0
- node_modules/side-channel-map/README.md +62 -0
- node_modules/side-channel-weakmap/README.md +62 -0
- node_modules/signal-exit/README.md +74 -0
- node_modules/source-map/README.md +742 -0
- node_modules/source-map-js/README.md +765 -0
- node_modules/source-map-support/LICENSE.md +21 -0
- node_modules/source-map-support/README.md +284 -0
- node_modules/spdx-correct/README.md +22 -0
- node_modules/spdx-exceptions/README.md +36 -0
- node_modules/spdx-expression-parse/README.md +91 -0
- node_modules/spdx-license-ids/README.md +51 -0
- node_modules/string-width-cjs/node_modules/emoji-regex/README.md +73 -0
- node_modules/string.prototype.matchall/README.md +73 -0
- node_modules/string.prototype.padend/README.md +46 -0
- node_modules/string.prototype.repeat/README.md +43 -0
- node_modules/string.prototype.trim/README.md +48 -0
- node_modules/string.prototype.trimend/README.md +46 -0
- node_modules/string.prototype.trimstart/README.md +46 -0
- node_modules/stylehacks/README.md +91 -0
- node_modules/stylehacks/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/sucrase/README.md +295 -0
- node_modules/supports-preserve-symlinks-flag/README.md +42 -0
- node_modules/svgo/README.md +199 -0
- node_modules/synckit/README.md +191 -0
- node_modules/tailwindcss/README.md +40 -0
- node_modules/tailwindcss/lib/postcss-plugins/nesting/README.md +42 -0
- node_modules/tailwindcss/lib/value-parser/README.md +3 -0
- node_modules/tailwindcss/node_modules/glob-parent/README.md +134 -0
- node_modules/tailwindcss/node_modules/postcss-selector-parser/README.md +49 -0
- node_modules/tailwindcss/src/postcss-plugins/nesting/README.md +42 -0
- node_modules/tailwindcss/src/value-parser/README.md +3 -0
- node_modules/tapable/README.md +296 -0
- node_modules/terser/README.md +1421 -0
- node_modules/terser-webpack-plugin/README.md +934 -0
- node_modules/terser-webpack-plugin/node_modules/jest-worker/README.md +247 -0
- node_modules/theme-change/README.md +376 -0
- node_modules/thenify/README.md +120 -0
- node_modules/thenify-all/README.md +66 -0
- node_modules/to-regex-range/README.md +305 -0
- node_modules/tree-kill/README.md +89 -0
- node_modules/ts-api-utils/LICENSE.md +20 -0
- node_modules/ts-api-utils/README.md +84 -0
- node_modules/ts-interface-checker/README.md +185 -0
- node_modules/ts-loader/README.md +773 -0
- node_modules/ts-loader/node_modules/semver/README.md +654 -0
- node_modules/ts-loader/node_modules/source-map/README.md +822 -0
- node_modules/tslib/README.md +164 -0
- node_modules/type-check/README.md +210 -0
- node_modules/typed-array-buffer/README.md +42 -0
- node_modules/typed-array-byte-length/README.md +70 -0
- node_modules/typed-array-byte-offset/README.md +70 -0
- node_modules/typed-array-length/README.md +64 -0
- node_modules/typescript/README.md +50 -0
- node_modules/typescript-eslint/README.md +12 -0
- node_modules/unbox-primitive/README.md +47 -0
- node_modules/undici-types/README.md +6 -0
- node_modules/unicode-canonical-property-names-ecmascript/README.md +58 -0
- node_modules/unicode-match-property-ecmascript/README.md +69 -0
- node_modules/unicode-match-property-value-ecmascript/README.md +72 -0
- node_modules/unicode-property-aliases-ecmascript/README.md +60 -0
- node_modules/update-browserslist-db/README.md +22 -0
- node_modules/uri-js/README.md +203 -0
- node_modules/util-deprecate/README.md +53 -0
- node_modules/validate-npm-package-license/README.md +113 -0
- node_modules/watchpack/README.md +133 -0
- node_modules/webpack/README.md +727 -0
- node_modules/webpack/node_modules/eslint-scope/README.md +54 -0
- node_modules/webpack/node_modules/estraverse/README.md +153 -0
- node_modules/webpack/node_modules/schema-utils/README.md +290 -0
- node_modules/webpack-cli/README.md +145 -0
- node_modules/webpack-merge/README.md +314 -0
- node_modules/webpack-sources/README.md +228 -0
- node_modules/which/README.md +54 -0
- node_modules/which-boxed-primitive/README.md +73 -0
- node_modules/which-builtin-type/README.md +67 -0
- node_modules/which-collection/README.md +65 -0
- node_modules/which-module/README.md +58 -0
- node_modules/which-typed-array/README.md +70 -0
- node_modules/wildcard/README.md +88 -0
- node_modules/word-wrap/README.md +201 -0
- node_modules/wrap-ansi-cjs/node_modules/emoji-regex/README.md +73 -0
- node_modules/y18n/README.md +109 -0
- node_modules/yallist/README.md +204 -0
- node_modules/yaml/README.md +188 -0
- node_modules/yargs/README.md +122 -0
- node_modules/yargs/node_modules/emoji-regex/README.md +73 -0
- node_modules/yargs-parser/README.md +396 -0
- picata/blocks.py +3 -2
- picata/templatetags/__init__.py +1 -1
- picata/templatetags/{kill_orphans.py → filters/kill_orphans.py} +1 -5
- picata/templatetags/{stringify.py → filters/stringify.py} +1 -6
- picata/templatetags/picata_tags.py +18 -0
- picata/templatetags/{absolute_static.py → tags/absolute_static.py} +1 -5
- picata/templatetags/{menu_tags.py → tags/menu_tags.py} +1 -1
- {picata-0.0.6.dist-info → picata-0.0.7.dist-info}/METADATA +1 -1
- picata-0.0.7.dist-info/RECORD +876 -0
- picata-0.0.6.dist-info/RECORD +0 -74
- {picata-0.0.6.dist-info → picata-0.0.7.dist-info}/WHEEL +0 -0
- {picata-0.0.6.dist-info → picata-0.0.7.dist-info}/licenses/LICENSE.md +0 -0
@@ -0,0 +1,584 @@
|
|
1
|
+
# safe-buffer [![travis][travis-image]][travis-url] [![npm][npm-image]][npm-url] [![downloads][downloads-image]][downloads-url] [![javascript style guide][standard-image]][standard-url]
|
2
|
+
|
3
|
+
[travis-image]: https://img.shields.io/travis/feross/safe-buffer/master.svg
|
4
|
+
[travis-url]: https://travis-ci.org/feross/safe-buffer
|
5
|
+
[npm-image]: https://img.shields.io/npm/v/safe-buffer.svg
|
6
|
+
[npm-url]: https://npmjs.org/package/safe-buffer
|
7
|
+
[downloads-image]: https://img.shields.io/npm/dm/safe-buffer.svg
|
8
|
+
[downloads-url]: https://npmjs.org/package/safe-buffer
|
9
|
+
[standard-image]: https://img.shields.io/badge/code_style-standard-brightgreen.svg
|
10
|
+
[standard-url]: https://standardjs.com
|
11
|
+
|
12
|
+
#### Safer Node.js Buffer API
|
13
|
+
|
14
|
+
**Use the new Node.js Buffer APIs (`Buffer.from`, `Buffer.alloc`,
|
15
|
+
`Buffer.allocUnsafe`, `Buffer.allocUnsafeSlow`) in all versions of Node.js.**
|
16
|
+
|
17
|
+
**Uses the built-in implementation when available.**
|
18
|
+
|
19
|
+
## install
|
20
|
+
|
21
|
+
```
|
22
|
+
npm install safe-buffer
|
23
|
+
```
|
24
|
+
|
25
|
+
## usage
|
26
|
+
|
27
|
+
The goal of this package is to provide a safe replacement for the node.js `Buffer`.
|
28
|
+
|
29
|
+
It's a drop-in replacement for `Buffer`. You can use it by adding one `require` line to
|
30
|
+
the top of your node.js modules:
|
31
|
+
|
32
|
+
```js
|
33
|
+
var Buffer = require('safe-buffer').Buffer
|
34
|
+
|
35
|
+
// Existing buffer code will continue to work without issues:
|
36
|
+
|
37
|
+
new Buffer('hey', 'utf8')
|
38
|
+
new Buffer([1, 2, 3], 'utf8')
|
39
|
+
new Buffer(obj)
|
40
|
+
new Buffer(16) // create an uninitialized buffer (potentially unsafe)
|
41
|
+
|
42
|
+
// But you can use these new explicit APIs to make clear what you want:
|
43
|
+
|
44
|
+
Buffer.from('hey', 'utf8') // convert from many types to a Buffer
|
45
|
+
Buffer.alloc(16) // create a zero-filled buffer (safe)
|
46
|
+
Buffer.allocUnsafe(16) // create an uninitialized buffer (potentially unsafe)
|
47
|
+
```
|
48
|
+
|
49
|
+
## api
|
50
|
+
|
51
|
+
### Class Method: Buffer.from(array)
|
52
|
+
<!-- YAML
|
53
|
+
added: v3.0.0
|
54
|
+
-->
|
55
|
+
|
56
|
+
* `array` {Array}
|
57
|
+
|
58
|
+
Allocates a new `Buffer` using an `array` of octets.
|
59
|
+
|
60
|
+
```js
|
61
|
+
const buf = Buffer.from([0x62,0x75,0x66,0x66,0x65,0x72]);
|
62
|
+
// creates a new Buffer containing ASCII bytes
|
63
|
+
// ['b','u','f','f','e','r']
|
64
|
+
```
|
65
|
+
|
66
|
+
A `TypeError` will be thrown if `array` is not an `Array`.
|
67
|
+
|
68
|
+
### Class Method: Buffer.from(arrayBuffer[, byteOffset[, length]])
|
69
|
+
<!-- YAML
|
70
|
+
added: v5.10.0
|
71
|
+
-->
|
72
|
+
|
73
|
+
* `arrayBuffer` {ArrayBuffer} The `.buffer` property of a `TypedArray` or
|
74
|
+
a `new ArrayBuffer()`
|
75
|
+
* `byteOffset` {Number} Default: `0`
|
76
|
+
* `length` {Number} Default: `arrayBuffer.length - byteOffset`
|
77
|
+
|
78
|
+
When passed a reference to the `.buffer` property of a `TypedArray` instance,
|
79
|
+
the newly created `Buffer` will share the same allocated memory as the
|
80
|
+
TypedArray.
|
81
|
+
|
82
|
+
```js
|
83
|
+
const arr = new Uint16Array(2);
|
84
|
+
arr[0] = 5000;
|
85
|
+
arr[1] = 4000;
|
86
|
+
|
87
|
+
const buf = Buffer.from(arr.buffer); // shares the memory with arr;
|
88
|
+
|
89
|
+
console.log(buf);
|
90
|
+
// Prints: <Buffer 88 13 a0 0f>
|
91
|
+
|
92
|
+
// changing the TypedArray changes the Buffer also
|
93
|
+
arr[1] = 6000;
|
94
|
+
|
95
|
+
console.log(buf);
|
96
|
+
// Prints: <Buffer 88 13 70 17>
|
97
|
+
```
|
98
|
+
|
99
|
+
The optional `byteOffset` and `length` arguments specify a memory range within
|
100
|
+
the `arrayBuffer` that will be shared by the `Buffer`.
|
101
|
+
|
102
|
+
```js
|
103
|
+
const ab = new ArrayBuffer(10);
|
104
|
+
const buf = Buffer.from(ab, 0, 2);
|
105
|
+
console.log(buf.length);
|
106
|
+
// Prints: 2
|
107
|
+
```
|
108
|
+
|
109
|
+
A `TypeError` will be thrown if `arrayBuffer` is not an `ArrayBuffer`.
|
110
|
+
|
111
|
+
### Class Method: Buffer.from(buffer)
|
112
|
+
<!-- YAML
|
113
|
+
added: v3.0.0
|
114
|
+
-->
|
115
|
+
|
116
|
+
* `buffer` {Buffer}
|
117
|
+
|
118
|
+
Copies the passed `buffer` data onto a new `Buffer` instance.
|
119
|
+
|
120
|
+
```js
|
121
|
+
const buf1 = Buffer.from('buffer');
|
122
|
+
const buf2 = Buffer.from(buf1);
|
123
|
+
|
124
|
+
buf1[0] = 0x61;
|
125
|
+
console.log(buf1.toString());
|
126
|
+
// 'auffer'
|
127
|
+
console.log(buf2.toString());
|
128
|
+
// 'buffer' (copy is not changed)
|
129
|
+
```
|
130
|
+
|
131
|
+
A `TypeError` will be thrown if `buffer` is not a `Buffer`.
|
132
|
+
|
133
|
+
### Class Method: Buffer.from(str[, encoding])
|
134
|
+
<!-- YAML
|
135
|
+
added: v5.10.0
|
136
|
+
-->
|
137
|
+
|
138
|
+
* `str` {String} String to encode.
|
139
|
+
* `encoding` {String} Encoding to use, Default: `'utf8'`
|
140
|
+
|
141
|
+
Creates a new `Buffer` containing the given JavaScript string `str`. If
|
142
|
+
provided, the `encoding` parameter identifies the character encoding.
|
143
|
+
If not provided, `encoding` defaults to `'utf8'`.
|
144
|
+
|
145
|
+
```js
|
146
|
+
const buf1 = Buffer.from('this is a tést');
|
147
|
+
console.log(buf1.toString());
|
148
|
+
// prints: this is a tést
|
149
|
+
console.log(buf1.toString('ascii'));
|
150
|
+
// prints: this is a tC)st
|
151
|
+
|
152
|
+
const buf2 = Buffer.from('7468697320697320612074c3a97374', 'hex');
|
153
|
+
console.log(buf2.toString());
|
154
|
+
// prints: this is a tést
|
155
|
+
```
|
156
|
+
|
157
|
+
A `TypeError` will be thrown if `str` is not a string.
|
158
|
+
|
159
|
+
### Class Method: Buffer.alloc(size[, fill[, encoding]])
|
160
|
+
<!-- YAML
|
161
|
+
added: v5.10.0
|
162
|
+
-->
|
163
|
+
|
164
|
+
* `size` {Number}
|
165
|
+
* `fill` {Value} Default: `undefined`
|
166
|
+
* `encoding` {String} Default: `utf8`
|
167
|
+
|
168
|
+
Allocates a new `Buffer` of `size` bytes. If `fill` is `undefined`, the
|
169
|
+
`Buffer` will be *zero-filled*.
|
170
|
+
|
171
|
+
```js
|
172
|
+
const buf = Buffer.alloc(5);
|
173
|
+
console.log(buf);
|
174
|
+
// <Buffer 00 00 00 00 00>
|
175
|
+
```
|
176
|
+
|
177
|
+
The `size` must be less than or equal to the value of
|
178
|
+
`require('buffer').kMaxLength` (on 64-bit architectures, `kMaxLength` is
|
179
|
+
`(2^31)-1`). Otherwise, a [`RangeError`][] is thrown. A zero-length Buffer will
|
180
|
+
be created if a `size` less than or equal to 0 is specified.
|
181
|
+
|
182
|
+
If `fill` is specified, the allocated `Buffer` will be initialized by calling
|
183
|
+
`buf.fill(fill)`. See [`buf.fill()`][] for more information.
|
184
|
+
|
185
|
+
```js
|
186
|
+
const buf = Buffer.alloc(5, 'a');
|
187
|
+
console.log(buf);
|
188
|
+
// <Buffer 61 61 61 61 61>
|
189
|
+
```
|
190
|
+
|
191
|
+
If both `fill` and `encoding` are specified, the allocated `Buffer` will be
|
192
|
+
initialized by calling `buf.fill(fill, encoding)`. For example:
|
193
|
+
|
194
|
+
```js
|
195
|
+
const buf = Buffer.alloc(11, 'aGVsbG8gd29ybGQ=', 'base64');
|
196
|
+
console.log(buf);
|
197
|
+
// <Buffer 68 65 6c 6c 6f 20 77 6f 72 6c 64>
|
198
|
+
```
|
199
|
+
|
200
|
+
Calling `Buffer.alloc(size)` can be significantly slower than the alternative
|
201
|
+
`Buffer.allocUnsafe(size)` but ensures that the newly created `Buffer` instance
|
202
|
+
contents will *never contain sensitive data*.
|
203
|
+
|
204
|
+
A `TypeError` will be thrown if `size` is not a number.
|
205
|
+
|
206
|
+
### Class Method: Buffer.allocUnsafe(size)
|
207
|
+
<!-- YAML
|
208
|
+
added: v5.10.0
|
209
|
+
-->
|
210
|
+
|
211
|
+
* `size` {Number}
|
212
|
+
|
213
|
+
Allocates a new *non-zero-filled* `Buffer` of `size` bytes. The `size` must
|
214
|
+
be less than or equal to the value of `require('buffer').kMaxLength` (on 64-bit
|
215
|
+
architectures, `kMaxLength` is `(2^31)-1`). Otherwise, a [`RangeError`][] is
|
216
|
+
thrown. A zero-length Buffer will be created if a `size` less than or equal to
|
217
|
+
0 is specified.
|
218
|
+
|
219
|
+
The underlying memory for `Buffer` instances created in this way is *not
|
220
|
+
initialized*. The contents of the newly created `Buffer` are unknown and
|
221
|
+
*may contain sensitive data*. Use [`buf.fill(0)`][] to initialize such
|
222
|
+
`Buffer` instances to zeroes.
|
223
|
+
|
224
|
+
```js
|
225
|
+
const buf = Buffer.allocUnsafe(5);
|
226
|
+
console.log(buf);
|
227
|
+
// <Buffer 78 e0 82 02 01>
|
228
|
+
// (octets will be different, every time)
|
229
|
+
buf.fill(0);
|
230
|
+
console.log(buf);
|
231
|
+
// <Buffer 00 00 00 00 00>
|
232
|
+
```
|
233
|
+
|
234
|
+
A `TypeError` will be thrown if `size` is not a number.
|
235
|
+
|
236
|
+
Note that the `Buffer` module pre-allocates an internal `Buffer` instance of
|
237
|
+
size `Buffer.poolSize` that is used as a pool for the fast allocation of new
|
238
|
+
`Buffer` instances created using `Buffer.allocUnsafe(size)` (and the deprecated
|
239
|
+
`new Buffer(size)` constructor) only when `size` is less than or equal to
|
240
|
+
`Buffer.poolSize >> 1` (floor of `Buffer.poolSize` divided by two). The default
|
241
|
+
value of `Buffer.poolSize` is `8192` but can be modified.
|
242
|
+
|
243
|
+
Use of this pre-allocated internal memory pool is a key difference between
|
244
|
+
calling `Buffer.alloc(size, fill)` vs. `Buffer.allocUnsafe(size).fill(fill)`.
|
245
|
+
Specifically, `Buffer.alloc(size, fill)` will *never* use the internal Buffer
|
246
|
+
pool, while `Buffer.allocUnsafe(size).fill(fill)` *will* use the internal
|
247
|
+
Buffer pool if `size` is less than or equal to half `Buffer.poolSize`. The
|
248
|
+
difference is subtle but can be important when an application requires the
|
249
|
+
additional performance that `Buffer.allocUnsafe(size)` provides.
|
250
|
+
|
251
|
+
### Class Method: Buffer.allocUnsafeSlow(size)
|
252
|
+
<!-- YAML
|
253
|
+
added: v5.10.0
|
254
|
+
-->
|
255
|
+
|
256
|
+
* `size` {Number}
|
257
|
+
|
258
|
+
Allocates a new *non-zero-filled* and non-pooled `Buffer` of `size` bytes. The
|
259
|
+
`size` must be less than or equal to the value of
|
260
|
+
`require('buffer').kMaxLength` (on 64-bit architectures, `kMaxLength` is
|
261
|
+
`(2^31)-1`). Otherwise, a [`RangeError`][] is thrown. A zero-length Buffer will
|
262
|
+
be created if a `size` less than or equal to 0 is specified.
|
263
|
+
|
264
|
+
The underlying memory for `Buffer` instances created in this way is *not
|
265
|
+
initialized*. The contents of the newly created `Buffer` are unknown and
|
266
|
+
*may contain sensitive data*. Use [`buf.fill(0)`][] to initialize such
|
267
|
+
`Buffer` instances to zeroes.
|
268
|
+
|
269
|
+
When using `Buffer.allocUnsafe()` to allocate new `Buffer` instances,
|
270
|
+
allocations under 4KB are, by default, sliced from a single pre-allocated
|
271
|
+
`Buffer`. This allows applications to avoid the garbage collection overhead of
|
272
|
+
creating many individually allocated Buffers. This approach improves both
|
273
|
+
performance and memory usage by eliminating the need to track and cleanup as
|
274
|
+
many `Persistent` objects.
|
275
|
+
|
276
|
+
However, in the case where a developer may need to retain a small chunk of
|
277
|
+
memory from a pool for an indeterminate amount of time, it may be appropriate
|
278
|
+
to create an un-pooled Buffer instance using `Buffer.allocUnsafeSlow()` then
|
279
|
+
copy out the relevant bits.
|
280
|
+
|
281
|
+
```js
|
282
|
+
// need to keep around a few small chunks of memory
|
283
|
+
const store = [];
|
284
|
+
|
285
|
+
socket.on('readable', () => {
|
286
|
+
const data = socket.read();
|
287
|
+
// allocate for retained data
|
288
|
+
const sb = Buffer.allocUnsafeSlow(10);
|
289
|
+
// copy the data into the new allocation
|
290
|
+
data.copy(sb, 0, 0, 10);
|
291
|
+
store.push(sb);
|
292
|
+
});
|
293
|
+
```
|
294
|
+
|
295
|
+
Use of `Buffer.allocUnsafeSlow()` should be used only as a last resort *after*
|
296
|
+
a developer has observed undue memory retention in their applications.
|
297
|
+
|
298
|
+
A `TypeError` will be thrown if `size` is not a number.
|
299
|
+
|
300
|
+
### All the Rest
|
301
|
+
|
302
|
+
The rest of the `Buffer` API is exactly the same as in node.js.
|
303
|
+
[See the docs](https://nodejs.org/api/buffer.html).
|
304
|
+
|
305
|
+
|
306
|
+
## Related links
|
307
|
+
|
308
|
+
- [Node.js issue: Buffer(number) is unsafe](https://github.com/nodejs/node/issues/4660)
|
309
|
+
- [Node.js Enhancement Proposal: Buffer.from/Buffer.alloc/Buffer.zalloc/Buffer() soft-deprecate](https://github.com/nodejs/node-eps/pull/4)
|
310
|
+
|
311
|
+
## Why is `Buffer` unsafe?
|
312
|
+
|
313
|
+
Today, the node.js `Buffer` constructor is overloaded to handle many different argument
|
314
|
+
types like `String`, `Array`, `Object`, `TypedArrayView` (`Uint8Array`, etc.),
|
315
|
+
`ArrayBuffer`, and also `Number`.
|
316
|
+
|
317
|
+
The API is optimized for convenience: you can throw any type at it, and it will try to do
|
318
|
+
what you want.
|
319
|
+
|
320
|
+
Because the Buffer constructor is so powerful, you often see code like this:
|
321
|
+
|
322
|
+
```js
|
323
|
+
// Convert UTF-8 strings to hex
|
324
|
+
function toHex (str) {
|
325
|
+
return new Buffer(str).toString('hex')
|
326
|
+
}
|
327
|
+
```
|
328
|
+
|
329
|
+
***But what happens if `toHex` is called with a `Number` argument?***
|
330
|
+
|
331
|
+
### Remote Memory Disclosure
|
332
|
+
|
333
|
+
If an attacker can make your program call the `Buffer` constructor with a `Number`
|
334
|
+
argument, then they can make it allocate uninitialized memory from the node.js process.
|
335
|
+
This could potentially disclose TLS private keys, user data, or database passwords.
|
336
|
+
|
337
|
+
When the `Buffer` constructor is passed a `Number` argument, it returns an
|
338
|
+
**UNINITIALIZED** block of memory of the specified `size`. When you create a `Buffer` like
|
339
|
+
this, you **MUST** overwrite the contents before returning it to the user.
|
340
|
+
|
341
|
+
From the [node.js docs](https://nodejs.org/api/buffer.html#buffer_new_buffer_size):
|
342
|
+
|
343
|
+
> `new Buffer(size)`
|
344
|
+
>
|
345
|
+
> - `size` Number
|
346
|
+
>
|
347
|
+
> The underlying memory for `Buffer` instances created in this way is not initialized.
|
348
|
+
> **The contents of a newly created `Buffer` are unknown and could contain sensitive
|
349
|
+
> data.** Use `buf.fill(0)` to initialize a Buffer to zeroes.
|
350
|
+
|
351
|
+
(Emphasis our own.)
|
352
|
+
|
353
|
+
Whenever the programmer intended to create an uninitialized `Buffer` you often see code
|
354
|
+
like this:
|
355
|
+
|
356
|
+
```js
|
357
|
+
var buf = new Buffer(16)
|
358
|
+
|
359
|
+
// Immediately overwrite the uninitialized buffer with data from another buffer
|
360
|
+
for (var i = 0; i < buf.length; i++) {
|
361
|
+
buf[i] = otherBuf[i]
|
362
|
+
}
|
363
|
+
```
|
364
|
+
|
365
|
+
|
366
|
+
### Would this ever be a problem in real code?
|
367
|
+
|
368
|
+
Yes. It's surprisingly common to forget to check the type of your variables in a
|
369
|
+
dynamically-typed language like JavaScript.
|
370
|
+
|
371
|
+
Usually the consequences of assuming the wrong type is that your program crashes with an
|
372
|
+
uncaught exception. But the failure mode for forgetting to check the type of arguments to
|
373
|
+
the `Buffer` constructor is more catastrophic.
|
374
|
+
|
375
|
+
Here's an example of a vulnerable service that takes a JSON payload and converts it to
|
376
|
+
hex:
|
377
|
+
|
378
|
+
```js
|
379
|
+
// Take a JSON payload {str: "some string"} and convert it to hex
|
380
|
+
var server = http.createServer(function (req, res) {
|
381
|
+
var data = ''
|
382
|
+
req.setEncoding('utf8')
|
383
|
+
req.on('data', function (chunk) {
|
384
|
+
data += chunk
|
385
|
+
})
|
386
|
+
req.on('end', function () {
|
387
|
+
var body = JSON.parse(data)
|
388
|
+
res.end(new Buffer(body.str).toString('hex'))
|
389
|
+
})
|
390
|
+
})
|
391
|
+
|
392
|
+
server.listen(8080)
|
393
|
+
```
|
394
|
+
|
395
|
+
In this example, an http client just has to send:
|
396
|
+
|
397
|
+
```json
|
398
|
+
{
|
399
|
+
"str": 1000
|
400
|
+
}
|
401
|
+
```
|
402
|
+
|
403
|
+
and it will get back 1,000 bytes of uninitialized memory from the server.
|
404
|
+
|
405
|
+
This is a very serious bug. It's similar in severity to the
|
406
|
+
[the Heartbleed bug](http://heartbleed.com/) that allowed disclosure of OpenSSL process
|
407
|
+
memory by remote attackers.
|
408
|
+
|
409
|
+
|
410
|
+
### Which real-world packages were vulnerable?
|
411
|
+
|
412
|
+
#### [`bittorrent-dht`](https://www.npmjs.com/package/bittorrent-dht)
|
413
|
+
|
414
|
+
[Mathias Buus](https://github.com/mafintosh) and I
|
415
|
+
([Feross Aboukhadijeh](http://feross.org/)) found this issue in one of our own packages,
|
416
|
+
[`bittorrent-dht`](https://www.npmjs.com/package/bittorrent-dht). The bug would allow
|
417
|
+
anyone on the internet to send a series of messages to a user of `bittorrent-dht` and get
|
418
|
+
them to reveal 20 bytes at a time of uninitialized memory from the node.js process.
|
419
|
+
|
420
|
+
Here's
|
421
|
+
[the commit](https://github.com/feross/bittorrent-dht/commit/6c7da04025d5633699800a99ec3fbadf70ad35b8)
|
422
|
+
that fixed it. We released a new fixed version, created a
|
423
|
+
[Node Security Project disclosure](https://nodesecurity.io/advisories/68), and deprecated all
|
424
|
+
vulnerable versions on npm so users will get a warning to upgrade to a newer version.
|
425
|
+
|
426
|
+
#### [`ws`](https://www.npmjs.com/package/ws)
|
427
|
+
|
428
|
+
That got us wondering if there were other vulnerable packages. Sure enough, within a short
|
429
|
+
period of time, we found the same issue in [`ws`](https://www.npmjs.com/package/ws), the
|
430
|
+
most popular WebSocket implementation in node.js.
|
431
|
+
|
432
|
+
If certain APIs were called with `Number` parameters instead of `String` or `Buffer` as
|
433
|
+
expected, then uninitialized server memory would be disclosed to the remote peer.
|
434
|
+
|
435
|
+
These were the vulnerable methods:
|
436
|
+
|
437
|
+
```js
|
438
|
+
socket.send(number)
|
439
|
+
socket.ping(number)
|
440
|
+
socket.pong(number)
|
441
|
+
```
|
442
|
+
|
443
|
+
Here's a vulnerable socket server with some echo functionality:
|
444
|
+
|
445
|
+
```js
|
446
|
+
server.on('connection', function (socket) {
|
447
|
+
socket.on('message', function (message) {
|
448
|
+
message = JSON.parse(message)
|
449
|
+
if (message.type === 'echo') {
|
450
|
+
socket.send(message.data) // send back the user's message
|
451
|
+
}
|
452
|
+
})
|
453
|
+
})
|
454
|
+
```
|
455
|
+
|
456
|
+
`socket.send(number)` called on the server, will disclose server memory.
|
457
|
+
|
458
|
+
Here's [the release](https://github.com/websockets/ws/releases/tag/1.0.1) where the issue
|
459
|
+
was fixed, with a more detailed explanation. Props to
|
460
|
+
[Arnout Kazemier](https://github.com/3rd-Eden) for the quick fix. Here's the
|
461
|
+
[Node Security Project disclosure](https://nodesecurity.io/advisories/67).
|
462
|
+
|
463
|
+
|
464
|
+
### What's the solution?
|
465
|
+
|
466
|
+
It's important that node.js offers a fast way to get memory otherwise performance-critical
|
467
|
+
applications would needlessly get a lot slower.
|
468
|
+
|
469
|
+
But we need a better way to *signal our intent* as programmers. **When we want
|
470
|
+
uninitialized memory, we should request it explicitly.**
|
471
|
+
|
472
|
+
Sensitive functionality should not be packed into a developer-friendly API that loosely
|
473
|
+
accepts many different types. This type of API encourages the lazy practice of passing
|
474
|
+
variables in without checking the type very carefully.
|
475
|
+
|
476
|
+
#### A new API: `Buffer.allocUnsafe(number)`
|
477
|
+
|
478
|
+
The functionality of creating buffers with uninitialized memory should be part of another
|
479
|
+
API. We propose `Buffer.allocUnsafe(number)`. This way, it's not part of an API that
|
480
|
+
frequently gets user input of all sorts of different types passed into it.
|
481
|
+
|
482
|
+
```js
|
483
|
+
var buf = Buffer.allocUnsafe(16) // careful, uninitialized memory!
|
484
|
+
|
485
|
+
// Immediately overwrite the uninitialized buffer with data from another buffer
|
486
|
+
for (var i = 0; i < buf.length; i++) {
|
487
|
+
buf[i] = otherBuf[i]
|
488
|
+
}
|
489
|
+
```
|
490
|
+
|
491
|
+
|
492
|
+
### How do we fix node.js core?
|
493
|
+
|
494
|
+
We sent [a PR to node.js core](https://github.com/nodejs/node/pull/4514) (merged as
|
495
|
+
`semver-major`) which defends against one case:
|
496
|
+
|
497
|
+
```js
|
498
|
+
var str = 16
|
499
|
+
new Buffer(str, 'utf8')
|
500
|
+
```
|
501
|
+
|
502
|
+
In this situation, it's implied that the programmer intended the first argument to be a
|
503
|
+
string, since they passed an encoding as a second argument. Today, node.js will allocate
|
504
|
+
uninitialized memory in the case of `new Buffer(number, encoding)`, which is probably not
|
505
|
+
what the programmer intended.
|
506
|
+
|
507
|
+
But this is only a partial solution, since if the programmer does `new Buffer(variable)`
|
508
|
+
(without an `encoding` parameter) there's no way to know what they intended. If `variable`
|
509
|
+
is sometimes a number, then uninitialized memory will sometimes be returned.
|
510
|
+
|
511
|
+
### What's the real long-term fix?
|
512
|
+
|
513
|
+
We could deprecate and remove `new Buffer(number)` and use `Buffer.allocUnsafe(number)` when
|
514
|
+
we need uninitialized memory. But that would break 1000s of packages.
|
515
|
+
|
516
|
+
~~We believe the best solution is to:~~
|
517
|
+
|
518
|
+
~~1. Change `new Buffer(number)` to return safe, zeroed-out memory~~
|
519
|
+
|
520
|
+
~~2. Create a new API for creating uninitialized Buffers. We propose: `Buffer.allocUnsafe(number)`~~
|
521
|
+
|
522
|
+
#### Update
|
523
|
+
|
524
|
+
We now support adding three new APIs:
|
525
|
+
|
526
|
+
- `Buffer.from(value)` - convert from any type to a buffer
|
527
|
+
- `Buffer.alloc(size)` - create a zero-filled buffer
|
528
|
+
- `Buffer.allocUnsafe(size)` - create an uninitialized buffer with given size
|
529
|
+
|
530
|
+
This solves the core problem that affected `ws` and `bittorrent-dht` which is
|
531
|
+
`Buffer(variable)` getting tricked into taking a number argument.
|
532
|
+
|
533
|
+
This way, existing code continues working and the impact on the npm ecosystem will be
|
534
|
+
minimal. Over time, npm maintainers can migrate performance-critical code to use
|
535
|
+
`Buffer.allocUnsafe(number)` instead of `new Buffer(number)`.
|
536
|
+
|
537
|
+
|
538
|
+
### Conclusion
|
539
|
+
|
540
|
+
We think there's a serious design issue with the `Buffer` API as it exists today. It
|
541
|
+
promotes insecure software by putting high-risk functionality into a convenient API
|
542
|
+
with friendly "developer ergonomics".
|
543
|
+
|
544
|
+
This wasn't merely a theoretical exercise because we found the issue in some of the
|
545
|
+
most popular npm packages.
|
546
|
+
|
547
|
+
Fortunately, there's an easy fix that can be applied today. Use `safe-buffer` in place of
|
548
|
+
`buffer`.
|
549
|
+
|
550
|
+
```js
|
551
|
+
var Buffer = require('safe-buffer').Buffer
|
552
|
+
```
|
553
|
+
|
554
|
+
Eventually, we hope that node.js core can switch to this new, safer behavior. We believe
|
555
|
+
the impact on the ecosystem would be minimal since it's not a breaking change.
|
556
|
+
Well-maintained, popular packages would be updated to use `Buffer.alloc` quickly, while
|
557
|
+
older, insecure packages would magically become safe from this attack vector.
|
558
|
+
|
559
|
+
|
560
|
+
## links
|
561
|
+
|
562
|
+
- [Node.js PR: buffer: throw if both length and enc are passed](https://github.com/nodejs/node/pull/4514)
|
563
|
+
- [Node Security Project disclosure for `ws`](https://nodesecurity.io/advisories/67)
|
564
|
+
- [Node Security Project disclosure for`bittorrent-dht`](https://nodesecurity.io/advisories/68)
|
565
|
+
|
566
|
+
|
567
|
+
## credit
|
568
|
+
|
569
|
+
The original issues in `bittorrent-dht`
|
570
|
+
([disclosure](https://nodesecurity.io/advisories/68)) and
|
571
|
+
`ws` ([disclosure](https://nodesecurity.io/advisories/67)) were discovered by
|
572
|
+
[Mathias Buus](https://github.com/mafintosh) and
|
573
|
+
[Feross Aboukhadijeh](http://feross.org/).
|
574
|
+
|
575
|
+
Thanks to [Adam Baldwin](https://github.com/evilpacket) for helping disclose these issues
|
576
|
+
and for his work running the [Node Security Project](https://nodesecurity.io/).
|
577
|
+
|
578
|
+
Thanks to [John Hiesey](https://github.com/jhiesey) for proofreading this README and
|
579
|
+
auditing the code.
|
580
|
+
|
581
|
+
|
582
|
+
## license
|
583
|
+
|
584
|
+
MIT. Copyright (C) [Feross Aboukhadijeh](http://feross.org)
|
@@ -0,0 +1,59 @@
|
|
1
|
+
# safe-push-apply <sup>[![Version Badge][npm-version-svg]][package-url]</sup>
|
2
|
+
|
3
|
+
[![github actions][actions-image]][actions-url]
|
4
|
+
[![coverage][codecov-image]][codecov-url]
|
5
|
+
[![License][license-image]][license-url]
|
6
|
+
[![Downloads][downloads-image]][downloads-url]
|
7
|
+
|
8
|
+
[![npm badge][npm-badge-png]][package-url]
|
9
|
+
|
10
|
+
Push an array of items into an array, while being robust against prototype modification.
|
11
|
+
|
12
|
+
## Getting started
|
13
|
+
|
14
|
+
```sh
|
15
|
+
npm install --save safe-push-apply
|
16
|
+
```
|
17
|
+
|
18
|
+
## Usage/Examples
|
19
|
+
|
20
|
+
```js
|
21
|
+
var safePushApply = require('safe-push-apply');
|
22
|
+
var assert = require('assert');
|
23
|
+
|
24
|
+
var arr = [1, 2, 3];
|
25
|
+
|
26
|
+
var orig = Array.prototype[Symbol.iterator];
|
27
|
+
delete Array.prototype[Symbol.iterator];
|
28
|
+
assert.throws(() => {
|
29
|
+
try {
|
30
|
+
arr.push(...[3, 4, 5]);
|
31
|
+
} finally {
|
32
|
+
Array.prototype[Symbol.iterator] = orig;
|
33
|
+
}
|
34
|
+
}, 'array is not iterable anymore');
|
35
|
+
|
36
|
+
delete Array.prototype.push;
|
37
|
+
safePushApply(arr, [3, 4, 5]);
|
38
|
+
|
39
|
+
assert.deepEqual(arr, [1, 2, 3, 3, 4, 5]);
|
40
|
+
```
|
41
|
+
|
42
|
+
## Tests
|
43
|
+
Simply clone the repo, `npm install`, and run `npm test`
|
44
|
+
|
45
|
+
[package-url]: https://npmjs.org/package/safe-push-apply
|
46
|
+
[npm-version-svg]: https://versionbadg.es/ljharb/safe-push-apply.svg
|
47
|
+
[deps-svg]: https://david-dm.org/ljharb/safe-push-apply.svg
|
48
|
+
[deps-url]: https://david-dm.org/ljharb/safe-push-apply
|
49
|
+
[dev-deps-svg]: https://david-dm.org/ljharb/safe-push-apply/dev-status.svg
|
50
|
+
[dev-deps-url]: https://david-dm.org/ljharb/safe-push-apply#info=devDependencies
|
51
|
+
[npm-badge-png]: https://nodei.co/npm/safe-push-apply.png?downloads=true&stars=true
|
52
|
+
[license-image]: https://img.shields.io/npm/l/safe-push-apply.svg
|
53
|
+
[license-url]: LICENSE
|
54
|
+
[downloads-image]: https://img.shields.io/npm/dm/safe-push-apply.svg
|
55
|
+
[downloads-url]: https://npm-stat.com/charts.html?package=safe-push-apply
|
56
|
+
[codecov-image]: https://codecov.io/gh/ljharb/safe-push-apply/branch/main/graphs/badge.svg
|
57
|
+
[codecov-url]: https://app.codecov.io/gh/ljharb/safe-push-apply/
|
58
|
+
[actions-image]: https://img.shields.io/endpoint?url=https://github-actions-badge-u3jn4tfpocch.runkit.sh/ljharb/safe-push-apply
|
59
|
+
[actions-url]: https://github.com/ljharb/safe-push-apply/actions
|
@@ -0,0 +1,46 @@
|
|
1
|
+
# safe-regex-test <sup>[![Version Badge][npm-version-svg]][package-url]</sup>
|
2
|
+
|
3
|
+
[![github actions][actions-image]][actions-url]
|
4
|
+
[![coverage][codecov-image]][codecov-url]
|
5
|
+
[![License][license-image]][license-url]
|
6
|
+
[![Downloads][downloads-image]][downloads-url]
|
7
|
+
|
8
|
+
[![npm badge][npm-badge-png]][package-url]
|
9
|
+
|
10
|
+
Give a regex, get a robust predicate function that tests it against a string. This will work even if `RegExp.prototype` is altered later.
|
11
|
+
|
12
|
+
## Getting started
|
13
|
+
|
14
|
+
```sh
|
15
|
+
npm install --save safe-regex-test
|
16
|
+
```
|
17
|
+
|
18
|
+
## Usage/Examples
|
19
|
+
|
20
|
+
```js
|
21
|
+
var regexTester = require('safe-regex-test');
|
22
|
+
var assert = require('assert');
|
23
|
+
|
24
|
+
var tester = regexTester('a');
|
25
|
+
assert.ok(tester('a'));
|
26
|
+
assert.notOk(tester('b'));
|
27
|
+
```
|
28
|
+
|
29
|
+
## Tests
|
30
|
+
Simply clone the repo, `npm install`, and run `npm test`
|
31
|
+
|
32
|
+
[package-url]: https://npmjs.org/package/safe-regex-test
|
33
|
+
[npm-version-svg]: https://versionbadg.es/ljharb/safe-regex-test.svg
|
34
|
+
[deps-svg]: https://david-dm.org/ljharb/safe-regex-test.svg
|
35
|
+
[deps-url]: https://david-dm.org/ljharb/safe-regex-test
|
36
|
+
[dev-deps-svg]: https://david-dm.org/ljharb/safe-regex-test/dev-status.svg
|
37
|
+
[dev-deps-url]: https://david-dm.org/ljharb/safe-regex-test#info=devDependencies
|
38
|
+
[npm-badge-png]: https://nodei.co/npm/safe-regex-test.png?downloads=true&stars=true
|
39
|
+
[license-image]: https://img.shields.io/npm/l/safe-regex-test.svg
|
40
|
+
[license-url]: LICENSE
|
41
|
+
[downloads-image]: https://img.shields.io/npm/dm/safe-regex-test.svg
|
42
|
+
[downloads-url]: https://npm-stat.com/charts.html?package=safe-regex-test
|
43
|
+
[codecov-image]: https://codecov.io/gh/ljharb/safe-regex-test/branch/main/graphs/badge.svg
|
44
|
+
[codecov-url]: https://app.codecov.io/gh/ljharb/safe-regex-test/
|
45
|
+
[actions-image]: https://img.shields.io/endpoint?url=https://github-actions-badge-u3jn4tfpocch.runkit.sh/ljharb/safe-regex-test
|
46
|
+
[actions-url]: https://github.com/ljharb/safe-regex-test/actions
|