v8.2.0

What's Changed

• feat(EntryFilesAnalyzer): add option to ignore entry file that doesn't exist by @clemgbld in #320
• docs: add clemgbld as a contributor for code, and test by @allcontributors in #321
• test(JsSourceParser): should not crash with source code containing im… by @clemgbld in #322
• feat: implement native fetch detection & implement SourceFile flags by @fraxken in #324

New Contributors

• @clemgbld made their first contribution in #320

Full Changelog: v8.1.1...v8.2.0

v8.1.1

What's Changed

• chore(deps): bump the github-actions group with 4 updates by @dependabot in #314
• chore(deps): bump the github-actions group with 4 updates by @dependabot in #315
• chore(deps): bump is-svg from 5.1.0 to 6.0.0 in the dependencies group by @dependabot in #316
• fix: change builtinModules import from repl to module by @intincrab in #317

New Contributors

• @intincrab made their first contribution in #317

Full Changelog: v8.1.0...v8.1.1

v8.1.0

Full Changelog: v8.1.0...v8.1.0

What's Changed

• chore(deps): bump meriyah from 5.0.0 to 6.0.0 in the dependencies group by @dependabot in #301
• Update Node.js versions to v20 and v22 by @fabnguess in #305
• fix: implement isESMExport probe to consider export stmts as dependencies by @fraxken in #307
• Update copyright by @fabnguess in #308
• fix(SourceFile): ignore try/finally statements for inTryStatement by @fraxken in #313

Full Changelog: v8.0.0...v8.1.0

v8.0.0

What's Changed

• chore(deps): bump meriyah from 4.5.0 to 5.0.0 in the dependencies group by @dependabot in #285
• chore(deps-dev): bump @types/node from 20.14.13 to 22.0.0 in the development-dependencies group by @dependabot in #286
• fix: type issues in api.d.ts by @fraxken in #287
• chore(deps): bump the github-actions group with 5 updates by @dependabot in #288
• chore(deps): bump @typescript-eslint/typescript-estree from 7.18.0 to 8.0.0 in the dependencies group by @dependabot in #289
• fix(EntryFilesAnalyser): add missing options and patch some minors issues by @fraxken in #291
• refactor: fix deprecation in tests & update eslint by @fraxken in #292
• feat(EntryFilesAnalyser): implement digraph-js by @fraxken in #293
• feat: trace process.getBuiltinModule by @fraxken in #294
• fix(Deobfuscator): return if Node is null in extractCounterIdentifiers by @fraxken in #296
• Prepare major 8 by @fraxken in #297

Full Changelog: v7.3.0...v8.0.0

v7.3.0

What's Changed

• chore(deps): bump the github-actions group with 5 updates by @dependabot in #273
• chore(deps-dev): bump c8 from 9.1.0 to 10.1.2 in the development-dependencies group by @dependabot in #274
• feat(AstAnalyser): add synchronous analyseFile function version by @FredGuiou in #275
• Added deprecation warnings for runASTAnalysis and runASTAnalysisOn by @fless-lab in #276
• docs: add fless-lab as a contributor for code by @allcontributors in #277
• chore(deps): bump the github-actions group with 4 updates by @dependabot in #281
• chore(deps-dev): bump glob from 10.4.5 to 11.0.0 in the development-dependencies group by @dependabot in #282
• fix(isOneLineRequire): must return true for a one line require with no export by @fraxken in #284

New Contributors

• @fless-lab made their first contribution in #276

Full Changelog: v7.2.0...v7.3.0

v7.2.0

What's Changed

• feat: add intialize and finalize for AstAnalyser.analyze API by @tony-go in #269
• feat: enable initalize and finalize for AstAnalyser.analyseFile by @tony-go in #271
• Fix entry files analyser by @fraxken in #272

Full Changelog: v7.1.1...v7.2.0

v7.1.1

What's Changed

• refactor: implement API exports & minimal docs by @fraxken in #264

Full Changelog: v7.1.0...v7.1.1

v7.1.0

What's Changed

• chore(deps): bump the github-actions group with 2 updates by @dependabot in #255
• chore(deps-dev): bump eslint from 8.57.0 to 9.0.0 in the development-dependencies group by @dependabot in #257
• Create EntryFilesAnalyzer class to analyze a set of entry files by @jean-michelet in #258
• Handle ImportExpression nodes by @jean-michelet in #261
• chore(deps): bump the github-actions group with 5 updates by @dependabot in #262
• add shady link regex for check url with ips by @sairuss7 in #260
• docs: add sairuss7 as a contributor for code by @allcontributors in #263

EntryFilesAnalyzer

import { EntryFilesAnalyser } from "@nodesecure/js-x-ray";

const efa = new EntryFilesAnalyser();
const entryFiles = ["./path/to/file"];

for await (const fileResult of efa.analyse(entryFiles)) {
  console.log(entryFiles);
}

New Contributors

• @sairuss7 made their first contribution in #260

Full Changelog: v7.0.0...v7.1.0

v7.0.0

What's Changed

• chore(deps): bump is-svg from 4.4.0 to 5.0.0 by @dependabot in #181
• Docs: Fix badges in workspaces by @fabnguess in #184
• fix the example in readme to prevent "location" field displays wrong way when running as script with Node.js. (nested displayed as [Array]) by @zxkmm in #185
• refactor(test): move regress to /issues folder by @fraxken in #186
• refactor: remove ASTDeps class and rename Anaysis to SourceFile by @fraxken in #187
• refactor: use new SourceParser class by @fraxken in #189
• chore(deps): bump string-width from 5.1.2 to 7.0.0 by @dependabot in #182
• refactor(probe): allow array of validateNode functions by @fraxken in #191
• docs: estree-ast-utils typo by @PierreDemailly in #192
• fix(estree-ast-utils): add missing d.ts by @fraxken in #193
• feat(getCallExpressionIdentifier): add resolveCallExpression option by @fraxken in #194
• refactor: new ProbeRunner class by @fraxken in #195
• fix(unsafe-import): warning on unsafe-import using eval/require by @tchapacan in #190
• fix(isRequire): do not resolve CallExpr by @fraxken in #200
• Remove mockedFunction for Node.js test runner mock method by @jean-michelet in #201
• docs: add jean-michelet as a contributor for test by @allcontributors in #202
• chore(deps-dev): bump c8 from 8.0.1 to 9.0.0 by @dependabot in #199
• chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in #197
• Bug#170 by @jean-michelet in #206
• feat(probeRunner): assert probes method in proberunner by @tchapacan in #204
• docs: add tchapacan as a contributor for code, and test by @allcontributors in #207
• Report.isOneLineRequire should be true if single line LogicalExpression assignment by @jean-michelet in #205
• refactor: split utils by @mkarkkainen in #209
• docs: add mkarkkainen as a contributor for code by @allcontributors in #210
• replace dead link by the webarchive one by @jean-michelet in #213
• build path.join called in require if args are string literals by @jean-michelet in #212
• chore(deps): bump actions/setup-node from 4.0.0 to 4.0.1 by @dependabot in #198
• chore(deps): bump github/codeql-action from 2.22.8 to 3.22.12 by @dependabot in #196
• Make SourceParser class heritable + create and use JsSourceParser in … by @jean-michelet in #215
• Refactor runASTAnalysis functions to use class AstAnalyser by @jean-michelet in #216
• docs: add jean-michelet as a contributor for code, test, and doc by @allcontributors in #217
• Create ts-source-parser package by @jean-michelet in #218
• docs(suspicious-file): fix typo by @FredGuiou in #219
• docs: add FredGuiou as a contributor for doc by @allcontributors in #222
• Update doc by @jean-michelet in #226
• refactor: consider Function("return this") as safe by @fraxken in #211
• refactor(analysis) : rename 'analysis' variable to 'sourceFile' by @FredGuiou in #232
• chore(deps): bump actions/upload-artifact from 4.0.0 to 4.3.0 by @dependabot in #230
• chore(deps): bump step-security/harden-runner from 2.6.1 to 2.7.0 by @dependabot in #229
• chore(deps): bump github/codeql-action from 3.22.12 to 3.23.2 by @dependabot in #228
• docs: add FredGuiou as a contributor for code, and doc by @allcontributors in #234
• Refactor isRequire probe with new class RequireCallExpressionWalker by @jean-michelet in #231
• Use JsSourceParser as default parser for AstAnalyser class by @madina0801 in #227
• docs: add madina0801 as a contributor for code by @allcontributors in #236
• refactor!: implement NodeCounter & Deobfuscator class by @fraxken in #239
• refactor(sec-literal/test): use the Node.js native test runner by @fabnguess in #242
• chore: update copyright by @fabnguess in #240
• chore: using dependabot groups by @fabnguess in #244
• refactor(estree-ast-utils/test): migrate to test_runner by @FredGuiou in #251
• chore(deps): bump the github-actions group with 3 updates by @dependabot in #248
• chore(deps): bump the dependencies group with 1 update by @dependabot in #252
• feat(customProbes): inject custom probes as param for AstAnalyser by @tchapacan in #250
• ci(nodejs): automatically merge dependabot PR by @fraxken in #254

New Contributors

• @zxkmm made their first contribution in #185
• @tchapacan made their first contribution in #190
• @jean-michelet made their first contribution in #201
• @mkarkkainen made their first contribution in #209
• @FredGuiou made their first contribution in #219
• @madina0801 made their first contribution in #227

Full Changelog: v6.3.0...v7.0.0

v6.3.0

What's Changed

• chore(deps): bump step-security/harden-runner from 2.5.1 to 2.6.1 by @dependabot in #162
• docs: use new blockquotes & remove outdated parts by @fraxken in #171
• chore: setup workspaces by @fraxken in #172
• fix(workspaces): git, bugs & homepage URL by @fraxken in #173
• chore(warning): allow null for location & add configurable kind by @fraxken in #176
• fix(ASTDeps): add missing Symbol.iterator in class typedef by @fraxken in #175

Full Changelog: v6.2.1...v6.3.0