- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations). - Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns. - Added `package-lock.json` for dependency management.
244 lines
8.7 KiB
JSON
244 lines
8.7 KiB
JSON
{
|
|
"name": "stella-callgraph-node",
|
|
"version": "1.0.0",
|
|
"lockfileVersion": 3,
|
|
"requires": true,
|
|
"packages": {
|
|
"": {
|
|
"name": "stella-callgraph-node",
|
|
"version": "1.0.0",
|
|
"license": "AGPL-3.0-or-later",
|
|
"dependencies": {
|
|
"@babel/parser": "^7.23.0",
|
|
"@babel/traverse": "^7.23.0",
|
|
"@babel/types": "^7.23.0"
|
|
},
|
|
"bin": {
|
|
"stella-callgraph-node": "index.js"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^20.0.0"
|
|
},
|
|
"engines": {
|
|
"node": ">=18.0.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/code-frame": {
|
|
"version": "7.27.1",
|
|
"resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.27.1.tgz",
|
|
"integrity": "sha512-cjQ7ZlQ0Mv3b47hABuTevyTuYN4i+loJKGeV9flcCgIK37cCXRh+L1bd3iBHlynerhQ7BhCkn2BPbQUL+rGqFg==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@babel/helper-validator-identifier": "^7.27.1",
|
|
"js-tokens": "^4.0.0",
|
|
"picocolors": "^1.1.1"
|
|
},
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/generator": {
|
|
"version": "7.28.5",
|
|
"resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.28.5.tgz",
|
|
"integrity": "sha512-3EwLFhZ38J4VyIP6WNtt2kUdW9dokXA9Cr4IVIFHuCpZ3H8/YFOl5JjZHisrn1fATPBmKKqXzDFvh9fUwHz6CQ==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@babel/parser": "^7.28.5",
|
|
"@babel/types": "^7.28.5",
|
|
"@jridgewell/gen-mapping": "^0.3.12",
|
|
"@jridgewell/trace-mapping": "^0.3.28",
|
|
"jsesc": "^3.0.2"
|
|
},
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/helper-globals": {
|
|
"version": "7.28.0",
|
|
"resolved": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.28.0.tgz",
|
|
"integrity": "sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/helper-string-parser": {
|
|
"version": "7.27.1",
|
|
"resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
|
|
"integrity": "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/helper-validator-identifier": {
|
|
"version": "7.28.5",
|
|
"resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz",
|
|
"integrity": "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/parser": {
|
|
"version": "7.28.5",
|
|
"resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.28.5.tgz",
|
|
"integrity": "sha512-KKBU1VGYR7ORr3At5HAtUQ+TV3SzRCXmA/8OdDZiLDBIZxVyzXuztPjfLd3BV1PRAQGCMWWSHYhL0F8d5uHBDQ==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@babel/types": "^7.28.5"
|
|
},
|
|
"bin": {
|
|
"parser": "bin/babel-parser.js"
|
|
},
|
|
"engines": {
|
|
"node": ">=6.0.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/template": {
|
|
"version": "7.27.2",
|
|
"resolved": "https://registry.npmjs.org/@babel/template/-/template-7.27.2.tgz",
|
|
"integrity": "sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@babel/code-frame": "^7.27.1",
|
|
"@babel/parser": "^7.27.2",
|
|
"@babel/types": "^7.27.1"
|
|
},
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/traverse": {
|
|
"version": "7.28.5",
|
|
"resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.28.5.tgz",
|
|
"integrity": "sha512-TCCj4t55U90khlYkVV/0TfkJkAkUg3jZFA3Neb7unZT8CPok7iiRfaX0F+WnqWqt7OxhOn0uBKXCw4lbL8W0aQ==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@babel/code-frame": "^7.27.1",
|
|
"@babel/generator": "^7.28.5",
|
|
"@babel/helper-globals": "^7.28.0",
|
|
"@babel/parser": "^7.28.5",
|
|
"@babel/template": "^7.27.2",
|
|
"@babel/types": "^7.28.5",
|
|
"debug": "^4.3.1"
|
|
},
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@babel/types": {
|
|
"version": "7.28.5",
|
|
"resolved": "https://registry.npmjs.org/@babel/types/-/types-7.28.5.tgz",
|
|
"integrity": "sha512-qQ5m48eI/MFLQ5PxQj4PFaprjyCTLI37ElWMmNs0K8Lk3dVeOdNpB3ks8jc7yM5CDmVC73eMVk/trk3fgmrUpA==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@babel/helper-string-parser": "^7.27.1",
|
|
"@babel/helper-validator-identifier": "^7.28.5"
|
|
},
|
|
"engines": {
|
|
"node": ">=6.9.0"
|
|
}
|
|
},
|
|
"node_modules/@jridgewell/gen-mapping": {
|
|
"version": "0.3.13",
|
|
"resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
|
|
"integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@jridgewell/sourcemap-codec": "^1.5.0",
|
|
"@jridgewell/trace-mapping": "^0.3.24"
|
|
}
|
|
},
|
|
"node_modules/@jridgewell/resolve-uri": {
|
|
"version": "3.1.2",
|
|
"resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
|
|
"integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=6.0.0"
|
|
}
|
|
},
|
|
"node_modules/@jridgewell/sourcemap-codec": {
|
|
"version": "1.5.5",
|
|
"resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
|
|
"integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/@jridgewell/trace-mapping": {
|
|
"version": "0.3.31",
|
|
"resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
|
|
"integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@jridgewell/resolve-uri": "^3.1.0",
|
|
"@jridgewell/sourcemap-codec": "^1.4.14"
|
|
}
|
|
},
|
|
"node_modules/@types/node": {
|
|
"version": "20.19.27",
|
|
"resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.27.tgz",
|
|
"integrity": "sha512-N2clP5pJhB2YnZJ3PIHFk5RkygRX5WO/5f0WC08tp0wd+sv0rsJk3MqWn3CbNmT2J505a5336jaQj4ph1AdMug==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"undici-types": "~6.21.0"
|
|
}
|
|
},
|
|
"node_modules/debug": {
|
|
"version": "4.4.3",
|
|
"resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
|
|
"integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"ms": "^2.1.3"
|
|
},
|
|
"engines": {
|
|
"node": ">=6.0"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"supports-color": {
|
|
"optional": true
|
|
}
|
|
}
|
|
},
|
|
"node_modules/js-tokens": {
|
|
"version": "4.0.0",
|
|
"resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
|
|
"integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/jsesc": {
|
|
"version": "3.1.0",
|
|
"resolved": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz",
|
|
"integrity": "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==",
|
|
"license": "MIT",
|
|
"bin": {
|
|
"jsesc": "bin/jsesc"
|
|
},
|
|
"engines": {
|
|
"node": ">=6"
|
|
}
|
|
},
|
|
"node_modules/ms": {
|
|
"version": "2.1.3",
|
|
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
|
|
"integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/picocolors": {
|
|
"version": "1.1.1",
|
|
"resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
|
|
"integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
|
|
"license": "ISC"
|
|
},
|
|
"node_modules/undici-types": {
|
|
"version": "6.21.0",
|
|
"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
|
|
"integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
|
|
"dev": true,
|
|
"license": "MIT"
|
|
}
|
|
}
|
|
}
|