javascript-obfuscator - npm Package Compare versions

Comparing version 5.4.2 to 5.4.3

CHANGELOG.md

 Change Log
 
+v5.4.3
+---
+* Fixed `controlFlowFlattening` occasionally dropping the `?.` short-circuit on `foo?.(arg)` calls, causing `TypeError: <X> is not a function`. Fixes https://github.com/javascript-obfuscator/javascript-obfuscator/issues/1408
+
 v5.4.2
@@ -4,0 +8,0 @@ ---

CLAUDE.md

@@ -45,3 +45,3 @@ # JavaScript Obfuscator - Project Documentation
 - **AST Traversal**: @javascript-obfuscator/estraverse 5.4.0
-- **DI Framework**: InversifyJS 6.0.1
+- **DI Framework**: InversifyJS 7.10.8
 - **Testing**: Mocha 10.4.0 + Chai 4.3.7
@@ -214,3 +214,3 @@ - **Build System**: Webpack 5.75.0
 
-The project uses **InversifyJS** for dependency injection, providing:
+The project uses **InversifyJS v7** for dependency injection, providing:
 
@@ -224,2 +224,9 @@ - **Modularity**: Clean separation of concerns
 
+**Key Changes in InversifyJS v7:**
+- Container modules now use `ContainerModuleLoadOptions` instead of separate `bind`, `unbind`, etc. parameters
+- `getNamed`, `getTagged`, etc. are replaced by `get(serviceId, { name: ... })` or `get(serviceId, { tag: ... })`
+- `load()` and `unload()` are now async, with `loadSync()` and `unloadSync()` alternatives for synchronous operations
+- Types like `Context`, `Newable`, `Factory` are now directly exported instead of through `interfaces` namespace
+- Custom metadata and middleware features have been removed
+
 ## Key Components Deep Dive
@@ -226,0 +233,0 @@

package.json

 {
   "name": "javascript-obfuscator",
-  "version": "5.4.2",
+  "version": "5.4.3",
   "description": "JavaScript obfuscator",
@@ -38,3 +38,3 @@ "keywords": [
     "fast-deep-equal": "3.1.3",
-    "inversify": "6.1.4",
+    "inversify": "7.11.0",
     "js-string-escape": "1.0.1",
@@ -41,0 +41,0 @@ "md5": "2.3.0",

typings/src/container/InversifyContainerFacade.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
+import { ResolutionContext, ServiceIdentifier } from 'inversify';
 import { TConstructor } from '../types/TConstructor';
@@ -8,9 +8,9 @@ import { TInputOptions } from '../types/options/TInputOptions';
     constructor();
-    static getFactory<T extends string, U>(serviceIdentifier: interfaces.ServiceIdentifier<U>): (context: interfaces.Context) => (bindingName: T) => U;
-    static getCacheFactory<T extends string, U>(serviceIdentifier: interfaces.ServiceIdentifier<U>): (context: interfaces.Context) => (bindingName: T) => U;
-    static getConstructorFactory<T extends string, U>(serviceIdentifier: interfaces.ServiceIdentifier<TConstructor<Record<string, any>[], U>>, ...dependencies: interfaces.ServiceIdentifier<TConstructor<Record<string, any>[], U>>[]): (context: interfaces.Context) => (bindingName: T) => U;
-    get<T>(serviceIdentifier: interfaces.ServiceIdentifier<T>): T;
-    getNamed<T>(serviceIdentifier: interfaces.ServiceIdentifier<T>, named: string | number | symbol): T;
+    static getFactory<T extends string, U>(serviceIdentifier: ServiceIdentifier<U>): (context: ResolutionContext) => (bindingName: T) => U;
+    static getCacheFactory<T extends string, U>(serviceIdentifier: ServiceIdentifier<U>): (context: ResolutionContext) => (bindingName: T) => U;
+    static getConstructorFactory<T extends string, U>(serviceIdentifier: ServiceIdentifier<TConstructor<Record<string, any>[], U>>, ...dependencies: ServiceIdentifier<TConstructor<Record<string, any>[], U>>[]): (context: ResolutionContext) => (bindingName: T) => U;
+    get<T>(serviceIdentifier: ServiceIdentifier<T>): T;
+    getNamed<T>(serviceIdentifier: ServiceIdentifier<T>, named: string | number | symbol): T;
     load(sourceCode: string, sourceMap: string, options: TInputOptions): void;
     unload(): void;
 }

typings/src/container/modules/analyzers/AnalyzersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const analyzersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const analyzersModule: ContainerModule;

typings/src/contai...ransformers/CodeTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const codeTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const codeTransformersModule: ContainerModule;

typings/src/contai...de-helpers/CustomCodeHelpersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const customCodeHelpersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const customCodeHelpersModule: ContainerModule;

typings/src/contai...les/custom-nodes/CustomNodesModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const customNodesModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const customNodesModule: ContainerModule;

typings/src/contai...odules/generators/GeneratorsModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const generatorsModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const generatorsModule: ContainerModule;

typings/src/contai...mers/ControlFlowTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const controlFlowTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const controlFlowTransformersModule: ContainerModule;

typings/src/contai...rmers/ConvertingTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const convertingTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const convertingTransformersModule: ContainerModule;

typings/src/contai...eadCodeInjectionTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const deadCodeInjectionTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const deadCodeInjectionTransformersModule: ContainerModule;

typings/src/contai...rmers/FinalizingTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const finalizingTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const finalizingTransformersModule: ContainerModule;

typings/src/contai...ers/InitializingTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const initializingTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const initializingTransformersModule: ContainerModule;

typings/src/contai...ransformers/NodeTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const nodeTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const nodeTransformersModule: ContainerModule;

typings/src/contai...ormers/PreparingTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const preparingTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const preparingTransformersModule: ContainerModule;

typings/src/contai...enameIdentifiersTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const renameIdentifiersTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const renameIdentifiersTransformersModule: ContainerModule;

typings/src/contai...RenamePropertiesTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const renamePropertiesTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const renamePropertiesTransformersModule: ContainerModule;

typings/src/contai...mers/SimplifyingTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const simplifyingTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const simplifyingTransformersModule: ContainerModule;

typings/src/contai...mers/StringArrayTransformersModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const stringArrayTransformersModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const stringArrayTransformersModule: ContainerModule;

typings/src/container/modules/node/NodeModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const nodeModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const nodeModule: ContainerModule;

typings/src/container/modules/options/OptionsModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const optionsModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const optionsModule: ContainerModule;

typings/src/container/modules/storages/StoragesModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const storagesModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const storagesModule: ContainerModule;

typings/src/container/modules/utils/UtilsModule.d.ts

@@ -1,2 +0,2 @@
-import { interfaces } from 'inversify';
-export declare const utilsModule: interfaces.ContainerModule;
+import { ContainerModule } from 'inversify';
+export declare const utilsModule: ContainerModule;

typings/src/interf...ontainer/IInversifyContainerFacade.d.ts

@@ -1,8 +0,8 @@
-import { interfaces } from 'inversify';
+import { ServiceIdentifier } from 'inversify';
 import { TInputOptions } from '../../types/options/TInputOptions';
 export interface IInversifyContainerFacade {
-    get<T>(serviceIdentifier: interfaces.ServiceIdentifier<T>): T;
-    getNamed<T>(serviceIdentifier: interfaces.ServiceIdentifier<T>, named: string | number | symbol): T;
+    get<T>(serviceIdentifier: ServiceIdentifier<T>): T;
+    getNamed<T>(serviceIdentifier: ServiceIdentifier<T>, named: string | number | symbol): T;
     load(sourceCode: string, sourceMap: string, options: TInputOptions): void;
     unload(): void;
 }

New alerts

Obfuscated code

Supply chain risk

Obfuscated files are intentionally packed to hide their behavior. This could be a sign of malware.

Found 1 instance in 1 package

AI-detected potential security risk

Supply chain risk

AI has determined that this package may contain potential security issues or vulnerabilities.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

11787906

2.43%

Lines of code

15724

0.95%

Number of lines in readme file

2311

0.74%

Number of low supply chain risk alerts

45

-2.17%

Worsened metrics

Number of high supply chain risk alerts

1

Infinity%

Number of medium supply chain risk alerts

15

7.14%

Dependency changes

• + Added

  @inversifyjs/common@1.5.2
  (transitive)

• + Added

  @inversifyjs/container@1.15.0
  (transitive)

• + Added

  @inversifyjs/core@9.2.0
  (transitive)

• + Added

  @inversifyjs/plugin@0.2.0
  (transitive)

• + Added

  @inversifyjs/prototype-utils@0.1.3
  (transitive)

• + Added

  @inversifyjs/reflect-metadata-utils@1.4.1
  (transitive)

• + Added

  inversify@7.11.0
  (transitive)

• - Removed

  @inversifyjs/common@1.3.3
  (transitive)

• - Removed

  @inversifyjs/core@1.3.4
  (transitive)

• - Removed

  @inversifyjs/reflect-metadata-utils@0.2.3
  (transitive)

• - Removed

  inversify@6.1.4
  (transitive)

• Updated

  inversify@7.11.0