@appsignal/nodejs - npm Package Compare versions

Comparing version 3.3.0 to 3.3.1

dist/config.js

@@ -152,14 +152,35 @@ "use strict";
         const conf = {};
-        Object.entries(configmap_1.ENV_TO_KEY_MAPPING).forEach(([k, v]) => {
+        configmap_1.STRING_KEYS.forEach(k => {
             const current = process.env[k];
             if (current) {
-                try {
-                    // attempt to extract a value from a string
-                    conf[v] = eval(current);
-                }
-                catch (e) {
-                    conf[v] = current;
-                }
+                conf[configmap_1.ENV_TO_KEY_MAPPING[k]] = current;
             }
         });
+        configmap_1.BOOL_KEYS.forEach(k => {
+            const current = process.env[k];
+            if (current == "true") {
+                conf[configmap_1.ENV_TO_KEY_MAPPING[k]] = true;
+            }
+            else if (current == "false") {
+                conf[configmap_1.ENV_TO_KEY_MAPPING[k]] = false;
+            }
+        });
+        configmap_1.LIST_KEYS.forEach(k => {
+            const current = process.env[k];
+            if (current) {
+                conf[configmap_1.ENV_TO_KEY_MAPPING[k]] = current.split(",");
+            }
+        });
+        configmap_1.LIST_OR_BOOL_KEYS.forEach(k => {
+            const current = process.env[k];
+            if (current == "true") {
+                conf[configmap_1.ENV_TO_KEY_MAPPING[k]] = true;
+            }
+            else if (current == "false") {
+                conf[configmap_1.ENV_TO_KEY_MAPPING[k]] = false;
+            }
+            else if (current) {
+                conf[configmap_1.ENV_TO_KEY_MAPPING[k]] = current.split(",");
+            }
+        });
         return conf;
@@ -166,0 +187,0 @@ }

dist/config/configmap.d.ts

@@ -5,1 +5,5 @@ import type { AppsignalOptions } from "./options";
 export declare const JS_TO_RUBY_MAPPING: Record<keyof AppsignalOptions, string>;
+export declare const BOOL_KEYS: string[];
+export declare const STRING_KEYS: string[];
+export declare const LIST_KEYS: string[];
+export declare const LIST_OR_BOOL_KEYS: string[];

dist/config/configmap.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.JS_TO_RUBY_MAPPING = exports.PRIVATE_ENV_MAPPING = exports.ENV_TO_KEY_MAPPING = void 0;
+exports.LIST_OR_BOOL_KEYS = exports.LIST_KEYS = exports.STRING_KEYS = exports.BOOL_KEYS = exports.JS_TO_RUBY_MAPPING = exports.PRIVATE_ENV_MAPPING = exports.ENV_TO_KEY_MAPPING = void 0;
 exports.ENV_TO_KEY_MAPPING = {
@@ -116,1 +116,46 @@ APPSIGNAL_ACTIVE: "active",
 };
+exports.BOOL_KEYS = [
+    "APPSIGNAL_ACTIVE",
+    "APPSIGNAL_ENABLE_HOST_METRICS",
+    "APPSIGNAL_ENABLE_OPENTELEMETRY_HTTP",
+    "APPSIGNAL_ENABLE_MINUTELY_PROBES",
+    "APPSIGNAL_ENABLE_STATSD",
+    "APPSIGNAL_ENABLE_NGINX_METRICS",
+    "APPSIGNAL_FILES_WORLD_ACCESSIBLE",
+    "APPSIGNAL_RUNNING_IN_CONTAINER",
+    "APPSIGNAL_SEND_ENVIRONMENT_METADATA",
+    "APPSIGNAL_SEND_PARAMS",
+    "APPSIGNAL_SEND_SESSION_DATA"
+];
+exports.STRING_KEYS = [
+    "APPSIGNAL_APP_ENV",
+    "APPSIGNAL_APP_NAME",
+    "APPSIGNAL_BIND_ADDRESS",
+    "APPSIGNAL_CA_FILE_PATH",
+    "APPSIGNAL_HOSTNAME",
+    "APPSIGNAL_HOST_ROLE",
+    "APPSIGNAL_HTTP_PROXY",
+    "APPSIGNAL_INITIALIZE_OPENTELEMETRY_SDK",
+    "APPSIGNAL_LOG",
+    "APPSIGNAL_LOG_LEVEL",
+    "APPSIGNAL_LOG_PATH",
+    "APPSIGNAL_LOGGING_ENDPOINT",
+    "APPSIGNAL_OPENTELEMETRY_PORT",
+    "APPSIGNAL_PUSH_API_ENDPOINT",
+    "APPSIGNAL_PUSH_API_KEY",
+    "APPSIGNAL_STATSD_PORT",
+    "APPSIGNAL_WORKING_DIRECTORY_PATH",
+    "APP_REVISION"
+];
+exports.LIST_KEYS = [
+    "APPSIGNAL_DNS_SERVERS",
+    "APPSIGNAL_FILTER_PARAMETERS",
+    "APPSIGNAL_FILTER_SESSION_DATA",
+    "APPSIGNAL_IGNORE_ACTIONS",
+    "APPSIGNAL_IGNORE_ERRORS",
+    "APPSIGNAL_IGNORE_NAMESPACES",
+    "APPSIGNAL_REQUEST_HEADERS"
+];
+exports.LIST_OR_BOOL_KEYS = [
+    "APPSIGNAL_DISABLE_DEFAULT_INSTRUMENTATIONS"
+];

package.json

 {
   "name": "@appsignal/nodejs",
-  "version": "3.3.0",
+  "version": "3.3.1",
   "main": "dist/index",
@@ -5,0 +5,0 @@ "types": "dist/index",

Fixed alerts

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

402151

increased by0.61%

Lines of code

4018

increased by1.77%

Number of medium supply chain risk alerts

6

decreased by-14.29%

Worsened metrics

Number of low supply chain risk alerts

35

increased by9.38%

No dependency changes