@datadog/native-appsec - npm Package Compare versions

Comparing version 7.1.1 to 8.0.0

index.d.ts

@@ -8,3 +8,3 @@ /**
 type diagnosticsInfo = {
-  addresses: {
+  addresses?: {
     optional: string[],
@@ -15,3 +15,2 @@ required: string[]
   failed: string[],
-  error: string,
   errors: {
@@ -22,2 +21,8 @@ [errorString: string]: string[]
 
+type diagnosticsError = {
+  error: string
+}
+
+type diagnosticsResult = diagnosticsInfo | diagnosticsError
+
 type result = {
@@ -28,3 +33,3 @@ timeout: boolean;
   status?: 'match'; // TODO: remove this if new statuses are never added
-  actions?: string[];
+  actions?: object[];
   derivatives?: object;
@@ -52,8 +57,9 @@ }
     ruleset_version?: string,
-    rules?: diagnosticsInfo,
-    custom_rules?: diagnosticsInfo,
-    exclusions?: diagnosticsInfo,
-    rules_override?: diagnosticsInfo,
-    rules_data?: diagnosticsInfo,
-    processors?: diagnosticsInfo
+    rules?: diagnosticsResult,
+    custom_rules?: diagnosticsResult,
+    exclusions?: diagnosticsResult,
+    rules_override?: diagnosticsResult,
+    rules_data?: diagnosticsResult,
+    processors?: diagnosticsResult,
+    actions?: diagnosticsResult
   };
@@ -60,0 +66,0 @@

package.json

 {
   "name": "@datadog/native-appsec",
-  "version": "7.1.1",
+  "version": "8.0.0",
   "description": "Node.js bindings for libddwaf",
   "main": "index.js",
-  "libddwaf_version": "1.16.0",
+  "libddwaf_version": "1.18.0",
   "scripts": {
@@ -44,3 +44,3 @@ "install": "exit 0",
   "engines": {
-    "node": ">=14"
+    "node": ">=16"
   },
@@ -47,0 +47,0 @@ "files": [

README.md

@@ -8,3 +8,3 @@ # dd-native-appsec-js
 
-* **Node.js version:** 14 and higher
+* **Node.js version:** 16 and higher
 * **Operating Systems:**
@@ -11,0 +11,0 @@ * MacOS

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 9 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

28849386

increased by100.53%

Number of package files

24

increased by50%

Lines of code

65

increased by6.56%

Worsened metrics

Number of medium maintenance alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

9

increased by200%

No dependency changes