Js X Ray Versions Save

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

v6.0.0

1 year ago

What's Changed

test: add isAssignmentExpression tests by @PierreDemailly in https://github.com/NodeSecure/js-x-ray/pull/48
test: add isFunctionDeclaration tests by @PierreDemailly in https://github.com/NodeSecure/js-x-ray/pull/47
[Snyk] Upgrade meriyah from 4.3.0 to 4.3.1 by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/49
test: add isBinaryExpression probe UT by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/50
test: add isRegexObject UT by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/51
test: add ut for isMemberExpression by @M4gie in https://github.com/NodeSecure/js-x-ray/pull/53
refactor: use estree-ast-utils functions by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/54
[Snyk] Upgrade meriyah from 4.3.1 to 4.3.2 by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/55
test: add UT for isLiteralRegex probe by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/56
docs: add M4gie as a contributor for code by @allcontributors in https://github.com/NodeSecure/js-x-ray/pull/58
refactor: use file urls in tests by @targos in https://github.com/NodeSecure/js-x-ray/pull/60
[Snyk] Upgrade meriyah from 4.3.2 to 4.3.3 by @snyk-bot in https://github.com/NodeSecure/js-x-ray/pull/63
refactor: implement new VariableTracer by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/57
chore(deps): bump json5 from 2.2.1 to 2.2.3 by @dependabot in https://github.com/NodeSecure/js-x-ray/pull/64
fix(ASTDeps): depName.trim is not a function by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/65
docs: add targos as a contributor for code, and bug by @allcontributors in https://github.com/NodeSecure/js-x-ray/pull/66
refactor: enhance parseScript to always support ESM by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/67
test(probes): implement isImportDeclaration by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/68
feat: adding new probes to improve short identifiers detection by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/69
Enhance security by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/70
test: add UT for isLiteral probe by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/71
test: implement isRequire probe UT and remove old/unused tests by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/72
test: add isArrayExpression probe by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/73
feat: add coverage with c8 by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/74
docs: update title and badges by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/75
test: add isUnaryExpression probe by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/76
test: add isVariableDeclaration probe by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/77
Enhance ut coverage by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/78
fix(dts): add missing .js extension by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/79
refactor: detect function parameters and handle isFunctionExpression by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/81
chore: update @nodesecure/sec-literal (1.1.0 to 1.2.0) by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/82
feat: add suspicious-file warning by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/83

New Contributors

@M4gie made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/53
@targos made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/60
@snyk-bot made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/63
@dependabot made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/64

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v5.1.0...v6.0.0

v5.1.0

1 year ago

What's Changed

test(probes): add ut for isObjectExpression probe (#24) by @PierreDemailly in https://github.com/NodeSecure/js-x-ray/pull/39
docs: add PierreDemailly as a contributor for test by @allcontributors in https://github.com/NodeSecure/js-x-ray/pull/40
Redefined Dependency Interface as required in @nodesecure/scanner by @Aekk0 in https://github.com/NodeSecure/js-x-ray/pull/43
docs: add Aekk0 as a contributor for code by @allcontributors in https://github.com/NodeSecure/js-x-ray/pull/45
fix: remove Node.js WG security disclosure by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/46

New Contributors

@PierreDemailly made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/39
@Aekk0 made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/43

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v5.0.1...v5.1.0

v5.0.1

1 year ago

What's changed

Add missing /types directory in the published npm tarball (package.json files whitelist).

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v5.0.0...v5.0.1

v5.0.0

1 year ago

What's Changed

Warning: Breaking changes with exported warnings and TS definitions.

refactor: improve warnings usage and TS definitions by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/38
docs: fix unsafe regex title by @fraxken

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v4.5.0...v5.0.0

v4.5.0

1 year ago

What's Changed

feat(warnings): add new severity property to warnings by @Mathieuka in https://github.com/NodeSecure/js-x-ray/pull/28
Add tests around probes by @Kawacrepe in https://github.com/NodeSecure/js-x-ray/pull/29
feat: detect weak crypto algorithm by @tony-go in https://github.com/NodeSecure/js-x-ray/pull/30
chore: add few jsdoc to probes (with links to estree and code examples) by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/34
Documentation enhancement by @fraxken in https://github.com/NodeSecure/js-x-ray/pull/36
chore(package): update devDependencies by @fraxken
chore: add CONTRIBUTING.md file by @fraxken

docs: add Kawacrepe as a contributor for code, test by @allcontributors in https://github.com/NodeSecure/js-x-ray/pull/31
docs: add tony-go as a contributor for code, doc, test by @allcontributors in https://github.com/NodeSecure/js-x-ray/pull/33
docs: add Mathieuka as a contributor for code by @allcontributors in https://github.com/NodeSecure/js-x-ray/pull/27

New Contributors

@Kawacrepe made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/29
@tony-go made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/30
@fraxken made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/34

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v4.4.0...v4.5.0

v4.4.0

2 years ago

What's Changed

Enhance exported warnings to include i18n token by @Mathieuka in https://github.com/NodeSecure/js-x-ray/pull/23
Update dependencies by @fraxken
Fix npm audit issue for minimist by @fraxken

New Contributors

@Mathieuka made their first contribution in https://github.com/NodeSecure/js-x-ray/pull/23

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v4.3.0...v4.4.0