All @asyncapi/generator versions

@asyncapi/[email protected] rejected Risk: 100 No license

@asyncapi/generator @3.3.1

rejected
This version was rejected. It did not pass GreenFlagged's security review and is not served by the registry. The findings and risk dispositions below explain why.
npm Repository Homepage Tarball
100
Risk Score
—
License
No
Install Scripts
26
Dependencies
10
Dev Dependencies
164.5 KB
Package Size
Published

Maintainers

fmvilasderbergasyncapi-bot

Keywords

asyncapidocumentationgeneratormarkdowncodegen

Dependencies (26)

PackageConstraintRegistry Status
ajv ^8.12.0 auto_approved
semver ^7.3.2 auto_approved
js-yaml ^4.1.1 auto_approved
ts-node ^10.9.1 auto_approved
fs.extra ^1.3.2 auto_approved
jmespath ^0.15.0 auto_approved
loglevel ^1.6.8 auto_approved
requireg ^0.2.2 auto_approved
commander ^6.1.0 auto_approved
minimatch ^3.0.4 auto_approved
filenamify ^4.1.0 auto_approved
node-fetch ^2.6.0 auto_approved
simple-git ^3.3.0 auto_approved
typescript ^4.9.3 auto_approved
global-dirs ^3.0.0 auto_approved
resolve-pkg ^2.0.0 No greenflagged match
resolve-from ^5.0.0 auto_approved
@npmcli/config ^8.0.2 auto_approved
@asyncapi/parser ^3.6.0 auto_approved
@npmcli/arborist ^9.2.0 auto_approved
@asyncapi/multi-parser ^2.2.0 auto_approved
@asyncapi/generator-hooks * auto_approved
levenshtein-edit-distance ^2.0.5 No greenflagged match
@asyncapi/generator-helpers * auto_approved
@asyncapi/generator-react-sdk * auto_approved
@asyncapi/generator-components * auto_approved

Dev Dependencies (10)

PackageConstraintRegistry Status
jest ^28.1.3 auto_approved
eslint ^6.8.0 auto_approved
rimraf ^3.0.2 auto_approved
unixify ^1.0.0 auto_approved
fs-extra 11.2.0 auto_approved
markdown-toc ^1.2.0 auto_approved
jsdoc-to-markdown ^7.1.1 auto_approved
eslint-plugin-jest ^23.8.2 No greenflagged match
eslint-plugin-react ^7.34.1 auto_approved
eslint-plugin-sonarjs ^0.5.0 auto_approved

Transitive Dependency Tree

521 transitive deps max depth 9
  ├─ @asyncapi/generator-components * → 0.7.0
  ├─ @asyncapi/generator-helpers * → 1.1.0
  ├─ @asyncapi/generator-hooks * → 0.1.0
  ├─ @asyncapi/generator-react-sdk * → 1.1.3
  ├─ @asyncapi/multi-parser ^2.2.0 → 2.3.0
  ├─ @asyncapi/parser ^3.6.0 → 3.6.0
  ├─ @npmcli/arborist ^9.2.0 → 9.9.0
  ├─ @npmcli/config ^8.0.2 → 8.3.4
  ├─ ajv ^8.12.0 → 8.20.0
  ├─ commander ^6.1.0 → 6.2.1
  ├─ filenamify ^4.1.0 → 4.2.0
  ├─ fs.extra ^1.3.2 → 1.3.2
  ├─ global-dirs ^3.0.0 → 3.0.1
  ├─ jmespath ^0.15.0 → 0.15.0
  ├─ js-yaml ^4.1.1 → 4.3.0
  ├─ levenshtein-edit-distance ^2.0.5
  ├─ loglevel ^1.6.8 → 1.9.2
  ├─ minimatch ^3.0.4 → 3.1.5
  ├─ node-fetch ^2.6.0 → 2.7.0
  ├─ requireg ^0.2.2 → 0.2.2
  ├─ resolve-from ^5.0.0 → 5.0.0
  ├─ resolve-pkg ^2.0.0
  ├─ semver ^7.3.2 → 7.8.5
  ├─ simple-git ^3.3.0 → 3.36.0
  ├─ ts-node ^10.9.1 → 10.9.2
├─ typescript ^4.9.3 → 4.9.5
  ├─ @asyncapi/avro-schema-parser ^3.0.3 → 3.0.24
  ├─ @asyncapi/modelina ^5.10.1 → 5.10.1
  ├─ @asyncapi/openapi-schema-parser ^3.0.4 → 3.0.24
  ├─ @asyncapi/protobuf-schema-parser ^3.3.0 → 3.7.0
  ├─ @asyncapi/raml-dt-schema-parser ^4.0.4 → 4.0.24
  ├─ @asyncapi/specs ^6.11.1 → 6.11.1
  ├─ @babel/core 7.12.9 → 7.12.9
  ├─ @babel/preset-env ^7.12.7 → 7.29.7
  ├─ @babel/preset-react ^7.12.7 → 7.29.7
  ├─ @cspotcode/source-map-support ^0.8.0 → 0.8.1
  ├─ @gar/promise-retry ^1.0.0 → 1.0.3
  ├─ @isaacs/string-locale-compare ^1.1.0 → 1.1.0
  ├─ @kwsites/file-exists ^1.1.1 → 1.1.1
  ├─ @kwsites/promise-deferred ^1.1.1 → 1.1.1
  ├─ @npmcli/fs ^5.0.0 → 5.0.0
  ├─ @npmcli/installed-package-contents ^4.0.0 → 4.0.0
  ├─ @npmcli/map-workspaces ^5.0.0 → 5.0.3
  ├─ @npmcli/metavuln-calculator ^9.0.2 → 9.0.3
  ├─ @npmcli/name-from-folder ^4.0.0 → 4.0.0
  ├─ @npmcli/node-gyp ^5.0.0 → 5.0.0
  ├─ @npmcli/package-json ^5.1.1 → 5.2.1
  ├─ @npmcli/query ^5.0.0 → 5.0.0
  ├─ @npmcli/redact ^4.0.0 → 4.0.0
  ├─ @npmcli/run-script ^10.0.0 → 10.0.3
  ├─ @rollup/plugin-babel ^5.2.1 → 5.3.1
  ├─ @simple-git/args-pathspec ^1.0.3 → 1.0.3
  ├─ @simple-git/argv-parser ^1.1.0 → 1.1.1
  ├─ @stoplight/spectral-core ^1.18.3 → 1.23.1
  ├─ @stoplight/spectral-functions ^1.7.2 → 1.10.5
  ├─ @stoplight/spectral-parsers ^1.0.2 → 1.0.5
  ├─ @stoplight/types ^13.12.0
  ├─ @tsconfig/node10 ^1.0.7 → 1.0.12
  ├─ @tsconfig/node12 ^1.0.7 → 1.0.11
  ├─ @tsconfig/node14 ^1.0.0 → 1.0.3
  ├─ @tsconfig/node16 ^1.0.2 → 1.0.4
  ├─ @types/json-schema ^7.0.11 → 7.0.15
  ├─ acorn ^8.4.1 → 8.17.0
  ├─ acorn-walk ^8.1.1 → 8.3.5
  ├─ ajv-errors ^3.0.0 → 3.0.0
  ├─ ajv-formats ^2.1.1 → 2.1.1
  ├─ arg ^4.1.0 → 4.1.3
  ├─ argparse ^2.0.1 → 2.0.1
  ├─ avsc ^5.7.5 → 5.7.9
  ├─ babel-plugin-source-map-support ^2.1.3 → 2.2.0
  ├─ bin-links ^6.0.0 → 6.0.2
  ├─ brace-expansion ^1.1.7 → 1.1.16
  ├─ cacache ^20.0.1 → 20.0.4
  ├─ ci-info ^4.0.0 → 4.4.0
  ├─ common-ancestor-path ^2.0.0 → 2.0.0
  ├─ create-require ^1.1.0 → 1.1.1
  ├─ debug ^4.4.0 → 4.4.3
  ├─ diff ^4.0.1 → 4.0.4
  ├─ fast-deep-equal ^3.1.3 → 3.1.3
  ├─ fast-uri ^3.0.1 → 3.1.3
  ├─ filename-reserved-regex ^2.0.0
  ├─ fs-extra ~0.6.1 → 0.6.4
  ├─ hosted-git-info ^9.0.0 → 9.0.3
  ├─ ini 2.0.0 → 2.0.0
  ├─ json-schema-traverse ^1.0.0 → 1.0.0
  ├─ json-stringify-nice ^1.1.4 → 1.1.4
  ├─ jsonpath-plus ^10.0.7 → 10.4.0
  ├─ lru-cache ^11.2.1 → 11.5.2
  ├─ make-error ^1.1.1 → 1.3.6
  ├─ mkdirp ~0.3.5 → 0.3.5
  ├─ nested-error-stacks ~2.0.1
  ├─ nopt ^7.2.1 → 7.2.1
  ├─ npm-install-checks ^8.0.0 → 8.0.0
  ├─ npm-package-arg ^13.0.0 → 13.0.2
  ├─ npm-pick-manifest ^11.0.1 → 11.0.3
  ├─ npm-registry-fetch ^19.0.0 → 19.1.1
  ├─ pacote ^21.0.2 → 21.5.1
  ├─ parse-conflict-json ^5.0.1 → 5.0.1
  ├─ proc-log ^4.2.0 → 4.2.0
  ├─ proggy ^4.0.0 → 4.0.0
  ├─ promise-all-reject-late ^1.0.0 → 1.0.1
  ├─ promise-call-limit ^3.0.1 → 3.0.2
  ├─ prop-types ^15.7.2 → 15.8.1
  ├─ rc ~1.2.7 → 1.2.8
  ├─ react ^17.0.1 → 17.0.2
  ├─ require-from-string ^2.0.2 → 2.0.2
  ├─ resolve ~1.7.1
  ├─ rollup ^2.60.1 → 2.80.0
  ├─ source-map-support ^0.5.19 → 0.5.21
  ├─ ssri ^13.0.0 → 13.0.1
  ├─ treeverse ^3.0.0 → 3.0.0
  ├─ v8-compile-cache-lib ^3.0.1 → 3.0.1
  ├─ walk ^2.3.9 → 2.3.15
  ├─ walk-up-path ^4.0.0 → 4.0.0
  ├─ whatwg-url ^5.0.0 → 5.0.0
├─ yn 3.1.1 → 3.1.1
  ├─ @apidevtools/json-schema-ref-parser ^11.1.0 → 11.9.3
  ├─ @apidevtools/swagger-parser ^10.1.0
  ├─ @babel/code-frame ^7.10.4 → 7.29.7
  ├─ @babel/compat-data ^7.29.7 → 7.29.7
  ├─ @babel/generator ^7.12.5 → 7.29.7
  ├─ @babel/helper-compilation-targets ^7.29.7 → 7.29.7
  ├─ @babel/helper-module-imports ^7.10.4 → 7.29.7
  ├─ @babel/helper-module-transforms ^7.12.1 → 7.29.7
  ├─ @babel/helper-plugin-utils ^7.29.7 → 7.29.7
  ├─ @babel/helper-validator-option ^7.29.7 → 7.29.7
  ├─ @babel/helpers ^7.12.5 → 7.29.7
  ├─ @babel/parser ^7.12.7 → 7.29.7
  ├─ @babel/plugin-bugfix-firefox-class-in-computed-class-key ^7.29.7 → 7.29.7
  ├─ @babel/plugin-bugfix-safari-class-field-initializer-scope ^7.29.7 → 7.29.7
  ├─ @babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression ^7.29.7 → 7.29.7
  ├─ @babel/plugin-bugfix-safari-rest-destructuring-rhs-array ^7.29.7 → 7.29.7
  ├─ @babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining ^7.29.7 → 7.29.7
  ├─ @babel/plugin-bugfix-v8-static-class-fields-redefine-readonly ^7.29.7 → 7.29.7
  ├─ @babel/plugin-proposal-private-property-in-object 7.21.0-placeholder-for-preset-env.2 → 7.21.0-placeholder-for-preset-env.2
  ├─ @babel/plugin-syntax-import-assertions ^7.29.7 → 7.29.7
  ├─ @babel/plugin-syntax-import-attributes ^7.29.7 → 7.29.7
  ├─ @babel/plugin-syntax-unicode-sets-regex ^7.18.6 → 7.18.6
  ├─ @babel/plugin-transform-arrow-functions ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-async-generator-functions ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-async-to-generator ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-block-scoped-functions ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-block-scoping ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-class-properties ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-class-static-block ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-classes ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-computed-properties ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-destructuring ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-dotall-regex ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-duplicate-keys ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-duplicate-named-capturing-groups-regex ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-dynamic-import ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-explicit-resource-management ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-exponentiation-operator ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-export-namespace-from ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-for-of ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-function-name ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-json-strings ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-literals ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-logical-assignment-operators ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-member-expression-literals ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-modules-amd ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-modules-commonjs ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-modules-systemjs ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-modules-umd ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-named-capturing-groups-regex ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-new-target ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-nullish-coalescing-operator ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-numeric-separator ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-object-rest-spread ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-object-super ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-optional-catch-binding ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-optional-chaining ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-parameters ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-private-methods ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-private-property-in-object ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-property-literals ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-react-display-name ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-react-jsx ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-react-jsx-development ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-react-pure-annotations ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-regenerator ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-regexp-modifiers ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-reserved-words ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-shorthand-properties ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-spread ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-sticky-regex ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-template-literals ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-typeof-symbol ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-unicode-escapes ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-unicode-property-regex ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-unicode-regex ^7.29.7 → 7.29.7
  ├─ @babel/plugin-transform-unicode-sets-regex ^7.29.7 → 7.29.7
  ├─ @babel/preset-modules 0.1.6-no-external-plugins → 0.1.6-no-external-plugins
  ├─ @babel/template ^7.12.7 → 7.29.7
  ├─ @babel/traverse ^7.12.9 → 7.29.7
  ├─ @babel/types ^7.12.7 → 7.29.7
  ├─ @jridgewell/trace-mapping 0.3.9
  ├─ @jsep-plugin/assignment ^1.3.0 → 1.3.0
  ├─ @jsep-plugin/regex ^1.0.4 → 1.0.4
  ├─ @npmcli/git ^7.0.0 → 7.0.1
  ├─ @npmcli/promise-spawn ^9.0.0 → 9.0.1
  ├─ @openapi-contrib/openapi-schema-to-json-schema ~3.2.0
  ├─ @rollup/pluginutils ^3.1.0
  ├─ @scarf/scarf ^1.4.0 → 1.4.0
  ├─ @stoplight/better-ajv-errors 1.0.3 → 1.0.3
  ├─ @stoplight/json ^3.17.1 → 3.21.7
  ├─ @stoplight/path 1.3.2
  ├─ @stoplight/spectral-formats ^1.8.1 → 1.8.5
  ├─ @stoplight/spectral-ref-resolver ^1.0.4 → 1.0.5
  ├─ @stoplight/spectral-runtime ^1.1.2 → 1.1.6
  ├─ @types/es-aggregate-error ^1.0.2 → 1.0.6
  ├─ @types/protocol-buffers-schema ^3.4.3 → 3.4.3
  ├─ abbrev ^2.0.0
  ├─ ajv-draft-04 ~1.0.0 → 1.0.0
  ├─ babel-plugin-polyfill-corejs2 ^0.4.15 → 0.4.17
  ├─ babel-plugin-polyfill-corejs3 ^0.14.0 → 0.14.2
  ├─ babel-plugin-polyfill-regenerator ^0.6.6 → 0.6.8
  ├─ balanced-match ^1.0.0 → 1.0.2
  ├─ buffer-from ^1.0.0 → 1.1.2
  ├─ change-case ^4.1.2 → 4.1.2
  ├─ cmd-shim ^8.0.0 → 8.0.0
  ├─ concat-map 0.0.1 → 0.0.1
  ├─ convert-source-map ^1.7.0 → 1.9.0
  ├─ core-js-compat ^3.48.0 → 3.49.0
  ├─ deep-extend ^0.6.0 → 0.6.0
  ├─ es-aggregate-error ^1.0.7 → 1.0.14
  ├─ expr-eval-fork ^3.0.1 → 3.0.3
  ├─ fast-xml-parser ^5.3.0 → 5.10.0
  ├─ foreachasync ^3.0.0 → 3.0.0
  ├─ fs-minipass ^3.0.0 → 3.0.3
  ├─ gensync ^1.0.0-beta.1 → 1.0.0-beta.2
  ├─ glob ^10.2.2 → 10.5.0
  ├─ jsep ^1.4.0 → 1.4.0
  ├─ json-parse-even-better-errors ^5.0.0 → 5.0.0
  ├─ json5 ^2.1.2 → 2.2.3
  ├─ jsonfile ~1.0.1
  ├─ jsonparse ^1.3.1
  ├─ just-diff ^6.0.0
  ├─ just-diff-apply ^5.2.0
  ├─ lodash ^4.17.19 → 4.18.1
  ├─ lodash.topath ^4.5.2 → 4.5.2
  ├─ loose-envify ^1.4.0 → 1.4.0
  ├─ make-fetch-happen ^15.0.0 → 15.0.6
  ├─ minimist ^1.2.0 → 1.2.8
  ├─ minipass ^7.0.2 → 7.1.3
  ├─ minipass-collect ^2.0.1
  ├─ minipass-fetch ^5.0.0 → 5.0.2
  ├─ minipass-flush ^1.0.5 → 1.0.7
  ├─ minipass-pipeline ^1.2.4 → 1.2.4
  ├─ minizlib ^3.0.1 → 3.1.0
  ├─ ms ^2.1.3 → 2.1.3
  ├─ ncp ~0.4.2 → 0.4.2
  ├─ nimma 0.2.3 → 0.2.3
  ├─ node-gyp ^12.1.0 → 12.4.0
  ├─ normalize-package-data ^6.0.0
  ├─ npm-bundled ^5.0.0 → 5.0.0
  ├─ npm-normalize-package-bin ^5.0.0 → 5.0.0
  ├─ npm-packlist ^10.0.1 → 10.0.4
  ├─ object-assign ^4.1.1 → 4.1.1
  ├─ openapi-types ^12.1.3 → 12.1.3
  ├─ p-map ^7.0.2 → 7.0.5
  ├─ pony-cause ^1.1.1
  ├─ postcss-selector-parser ^7.0.0 → 7.1.4
  ├─ protobufjs ^7.4.0 → 7.6.5
  ├─ ramldt2jsonschema ^1.2.3 → 1.2.3
  ├─ react-is ^16.13.1 → 16.13.1
  ├─ read-cmd-shim ^6.0.0 → 6.0.0
  ├─ read-package-json-fast ^3.0.0 → 3.0.2
  ├─ rimraf ~2.2.0 → 2.2.8
  ├─ sigstore ^4.0.0 → 4.1.1
  ├─ source-map ^0.5.0 → 0.5.7
  ├─ spdx-expression-parse ^4.0.0 → 4.0.0
  ├─ strip-json-comments ~2.0.1 → 2.0.1
  ├─ tar ^7.4.3 → 7.5.18
  ├─ tr46 ~0.0.3 → 0.0.3
  ├─ tslib ^2.8.1 → 2.8.1
  ├─ typescript-json-schema ^0.58.1
  ├─ validate-npm-package-name ^7.0.0 → 7.0.2
  ├─ webapi-parser ^0.5.0 → 0.5.0
  ├─ webidl-conversions ^3.0.0 → 3.0.1
  ├─ which ^6.0.0 → 6.0.1
├─ write-file-atomic ^7.0.0 → 7.0.1
  ├─ @babel/helper-annotate-as-pure ^7.29.7 → 7.29.7
  ├─ @babel/helper-create-class-features-plugin ^7.29.7 → 7.29.7
  ├─ @babel/helper-create-regexp-features-plugin ^7.18.6 → 7.29.7
  ├─ @babel/helper-define-polyfill-provider ^0.6.8 → 0.6.8
  ├─ @babel/helper-globals ^7.29.7 → 7.29.7
  ├─ @babel/helper-remap-async-to-generator ^7.29.7 → 7.29.7
  ├─ @babel/helper-replace-supers ^7.29.7 → 7.29.7
  ├─ @babel/helper-skip-transparent-expression-wrappers ^7.29.7 → 7.29.7
  ├─ @babel/helper-string-parser ^7.29.7 → 7.29.7
  ├─ @babel/helper-validator-identifier ^7.29.7 → 7.29.7
  ├─ @babel/plugin-syntax-jsx ^7.29.7 → 7.29.7
  ├─ @isaacs/fs-minipass ^4.0.0 → 4.0.1
  ├─ @jridgewell/gen-mapping ^0.3.12 → 0.3.13
  ├─ @jsdevtools/ono ^7.1.3 → 7.1.3
  ├─ @jsep-plugin/ternary ^1.0.2 → 1.1.4
  ├─ @nodable/entities ^2.2.0 → 2.2.0
  ├─ @npmcli/agent ^4.0.0 → 4.0.2
  ├─ @protobufjs/aspromise ^1.1.2 → 1.1.2
  ├─ @protobufjs/base64 ^1.1.2 → 1.1.2
  ├─ @protobufjs/codegen ^2.0.5 → 2.0.5
  ├─ @protobufjs/eventemitter ^1.1.1 → 1.1.1
  ├─ @protobufjs/fetch ^1.1.1 → 1.1.1
  ├─ @protobufjs/float ^1.0.2 → 1.0.2
  ├─ @protobufjs/path ^1.1.2 → 1.1.2
  ├─ @protobufjs/pool ^1.1.0 → 1.1.0
  ├─ @protobufjs/utf8 ^1.1.1 → 1.1.2
  ├─ @sigstore/bundle ^4.0.0 → 4.0.0
  ├─ @sigstore/core ^3.2.1 → 3.2.1
  ├─ @sigstore/protobuf-specs ^0.5.0 → 0.5.1
  ├─ @sigstore/sign ^4.1.1 → 4.1.1
  ├─ @sigstore/tuf ^4.0.2 → 4.0.2
  ├─ @sigstore/verify ^3.1.1 → 3.1.1
  ├─ @stoplight/json-ref-readers 1.2.2
  ├─ @stoplight/json-ref-resolver ~3.1.6 → 3.1.6
  ├─ @stoplight/ordered-object-literal ^1.0.3
  ├─ @types/node >=13.7.0 → 26.1.1
  ├─ astring ^1.8.1 → 1.9.0
  ├─ browserslist ^4.28.1 → 4.28.6
  ├─ camel-case ^4.1.2 → 4.1.2
  ├─ capital-case ^1.0.4 → 1.0.4
  ├─ chownr ^3.0.0 → 3.0.0
  ├─ constant-case ^3.0.4 → 3.0.4
  ├─ cssesc ^3.0.0 → 3.0.0
  ├─ define-data-property ^1.1.4
  ├─ define-properties ^1.2.1 → 1.2.1
  ├─ dependency-graph 0.11.0 → 0.11.0
  ├─ dot-case ^3.0.4 → 3.0.4
  ├─ env-paths ^2.2.0 → 2.2.1
  ├─ es-abstract ^1.24.0 → 1.24.2
  ├─ es-errors ^1.3.0 → 1.3.0
  ├─ esutils ^2.0.2 → 2.0.3
  ├─ exponential-backoff ^3.1.1 → 3.1.3
  ├─ fast-xml-builder ^1.2.0 → 1.3.0
  ├─ foreground-child ^3.1.0 → 3.3.1
  ├─ function-bind ^1.1.2 → 1.1.2
  ├─ globalthis ^1.0.4 → 1.0.4
  ├─ graceful-fs ^4.2.6 → 4.2.11
  ├─ has-property-descriptors ^1.0.2 → 1.0.2
  ├─ header-case ^2.0.4 → 2.0.4
  ├─ http-cache-semantics ^4.1.1 → 4.2.0
  ├─ ignore-walk ^8.0.0 → 8.0.0
  ├─ is-core-module ^2.16.1 → 2.16.2
  ├─ is-unsafe ^2.0.0 → 2.0.0
  ├─ isexe ^4.0.0 → 4.0.0
  ├─ jackspeak ^3.1.2 → 3.4.3
  ├─ js-tokens ^3.0.0 || ^4.0.0 → 4.0.0
  ├─ jsesc ^3.0.2 → 3.1.0
  ├─ jsonc-parser ~2.2.1 → 2.2.1
  ├─ jsonpointer ^5.0.0 → 5.0.1
  ├─ leven ^3.1.0 → 3.1.0
  ├─ long ^5.3.2 → 5.3.2
  ├─ minipass-sized ^2.0.0
  ├─ negotiator ^1.0.0 → 1.0.0
  ├─ no-case ^3.0.4
  ├─ package-json-from-dist ^1.0.0 → 1.0.1
  ├─ param-case ^3.0.4 → 3.0.4
  ├─ pascal-case ^3.1.2 → 3.1.2
  ├─ path-case ^3.0.4 → 3.0.4
  ├─ path-expression-matcher ^1.6.2 → 1.6.2
  ├─ path-parse ^1.0.7 → 1.0.7
  ├─ path-scurry ^2.0.2 → 2.0.2
  ├─ picocolors ^1.1.1 → 1.1.1
  ├─ promise-inflight ^1.0.1 → 1.0.1
  ├─ promise-retry ^2.0.1 → 2.0.1
  ├─ safe-stable-stringify ^1.1
  ├─ sentence-case ^3.0.4 → 3.0.4
  ├─ set-function-name ^2.0.2 → 2.0.2
  ├─ signal-exit ^4.0.1 → 4.1.0
  ├─ snake-case ^3.0.4 → 3.0.4
  ├─ spdx-exceptions ^2.1.0 → 2.5.0
  ├─ spdx-license-ids ^3.0.0 → 3.0.23
  ├─ strnum ^2.4.1 → 2.4.1
  ├─ supports-preserve-symlinks-flag ^1.0.0 → 1.0.0
  ├─ tinyglobby ^0.2.12 → 0.2.17
  ├─ undici ^6.25.0 → 6.27.0
  ├─ util-deprecate ^1.0.2 → 1.0.2
  ├─ utility-types ^3.10.0 → 3.11.0
  ├─ xml-naming ^0.3.0 → 0.3.0
├─ yallist ^5.0.0 → 5.0.0
  ├─ @babel/helper-member-expression-to-functions ^7.29.7 → 7.29.7
  ├─ @babel/helper-optimise-call-expression ^7.29.7 → 7.29.7
  ├─ @babel/helper-wrap-function ^7.29.7 → 7.29.7
  ├─ @isaacs/cliui ^8.0.2 → 8.0.2
  ├─ @jridgewell/resolve-uri ^3.1.0 → 3.1.2
  ├─ @jridgewell/sourcemap-codec ^1.5.0 → 1.5.5
  ├─ @types/urijs ^1.19.19 → 1.19.26
  ├─ agent-base ^7.1.0 → 7.1.4
  ├─ anynum ^1.0.1 → 1.0.1
  ├─ array-buffer-byte-length ^1.0.2 → 1.0.2
  ├─ arraybuffer.prototype.slice ^1.0.4 → 1.0.4
  ├─ available-typed-arrays ^1.0.7 → 1.0.7
  ├─ baseline-browser-mapping ^2.10.42 → 2.10.43
  ├─ call-bind ^1.0.8 → 1.0.9
  ├─ call-bound ^1.0.4 → 1.0.4
  ├─ caniuse-lite ^1.0.30001803 → 1.0.30001805
  ├─ cross-spawn ^7.0.6 → 7.0.6
  ├─ data-view-buffer ^1.0.2 → 1.0.2
  ├─ data-view-byte-length ^1.0.2 → 1.0.2
  ├─ data-view-byte-offset ^1.0.1 → 1.0.1
  ├─ electron-to-chromium ^1.5.389 → 1.5.391
  ├─ err-code ^2.0.2 → 2.0.3
  ├─ es-define-property ^1.0.1 → 1.0.1
  ├─ es-object-atoms ^1.1.1 → 1.1.2
  ├─ es-set-tostringtag ^2.1.0 → 2.1.0
  ├─ es-to-primitive ^1.3.0 → 1.3.3
  ├─ esprima ^4.0.0 → 4.0.1
  ├─ fast-memoize ^2.5.2 → 2.5.2
  ├─ fdir ^6.5.0 → 6.5.0
  ├─ function.prototype.name ^1.1.8 → 1.2.0
  ├─ functions-have-names ^1.2.3 → 1.2.3
  ├─ get-intrinsic ^1.3.0 → 1.3.1
  ├─ get-proto ^1.0.1 → 1.0.1
  ├─ get-symbol-description ^1.1.0
  ├─ gopd ^1.0.1 → 1.2.0
  ├─ has-proto ^1.2.0
  ├─ has-symbols ^1.1.0 → 1.1.0
  ├─ hasown ^2.0.2 → 2.0.4
  ├─ http-proxy-agent ^7.0.0 → 7.0.2
  ├─ https-proxy-agent ^7.0.1 → 7.0.6
  ├─ immer ^9.0.6 → 9.0.21
  ├─ internal-slot ^1.1.0
  ├─ is-array-buffer ^3.0.5
  ├─ is-callable ^1.2.7 → 1.2.7
  ├─ is-data-view ^1.0.2
  ├─ is-negative-zero ^2.0.3
  ├─ is-regex ^1.2.1 → 1.2.1
  ├─ is-set ^2.0.3
  ├─ is-shared-array-buffer ^1.0.4
  ├─ is-string ^1.1.1
  ├─ is-typed-array ^1.1.15 → 1.1.15
  ├─ is-weakref ^1.1.1
  ├─ lodash.debounce ^4.0.8 → 4.0.8
  ├─ math-intrinsics ^1.1.0 → 1.1.0
  ├─ node-releases ^2.0.51 → 2.0.51
  ├─ object-inspect ^1.13.4 → 1.13.4
  ├─ object-keys ^1.1.1 → 1.1.1
  ├─ object.assign ^4.1.7 → 4.1.7
  ├─ own-keys ^1.0.1 → 1.0.1
  ├─ picomatch ^4.0.4 → 4.0.5
  ├─ regexp.prototype.flags ^1.5.4 → 1.5.4
  ├─ regexpu-core ^6.3.1 → 6.4.0
  ├─ retry ^0.12.0 → 0.12.0
  ├─ safe-array-concat ^1.1.3
  ├─ safe-push-apply ^1.0.0
  ├─ safe-regex-test ^1.1.0 → 1.1.0
  ├─ set-proto ^1.0.0
  ├─ socks-proxy-agent ^8.0.3 → 8.0.5
  ├─ stop-iteration-iterator ^1.1.0
  ├─ string.prototype.trim ^1.2.10 → 1.2.11
  ├─ string.prototype.trimend ^1.0.9 → 1.0.10
  ├─ string.prototype.trimstart ^1.0.8 → 1.0.8
  ├─ tuf-js ^4.1.0 → 4.1.0
  ├─ typed-array-buffer ^1.0.3 → 1.0.3
  ├─ typed-array-byte-length ^1.0.3 → 1.0.3
  ├─ typed-array-byte-offset ^1.0.4 → 1.0.4
  ├─ typed-array-length ^1.0.7 → 1.0.7
  ├─ unbox-primitive ^1.1.0 → 1.1.0
  ├─ undici-types ~8.3.0 → 8.3.0
  ├─ update-browserslist-db ^1.2.3 → 1.2.3
  ├─ upper-case ^2.0.2 → 2.0.2
  ├─ upper-case-first ^2.0.2 → 2.0.2
  ├─ urijs ^1.19.11 → 1.19.11
├─ which-typed-array ^1.1.19 → 1.1.22
  ├─ @tufjs/models 4.1.0 → 4.1.0
  ├─ async-function ^1.0.0
  ├─ async-generator-function ^1.0.0 → 1.0.0
  ├─ call-bind-apply-helpers ^1.0.2 → 1.0.2
  ├─ dunder-proto ^1.0.1 → 1.0.1
  ├─ es-abstract-get ^1.0.0 → 1.0.0
  ├─ escalade ^3.2.0 → 3.2.0
  ├─ for-each ^0.3.3 → 0.3.5
  ├─ generator-function ^2.0.0 → 2.0.1
  ├─ has-bigints ^1.0.2
  ├─ has-tostringtag ^1.0.2 → 1.0.2
  ├─ is-date-object ^1.1.0 → 1.1.0
  ├─ is-symbol ^1.1.1 → 1.1.1
  ├─ path-key ^3.1.0 → 3.1.1
  ├─ possible-typed-array-names ^1.0.0 → 1.1.0
  ├─ reflect.getprototypeof ^1.0.9 → 1.0.10
  ├─ regenerate ^1.4.2 → 1.4.2
  ├─ regenerate-unicode-properties ^10.2.2 → 10.2.2
  ├─ regjsgen ^0.8.0 → 0.8.0
  ├─ regjsparser ^0.13.0 → 0.13.2
  ├─ set-function-length ^1.2.2 → 1.2.2
  ├─ shebang-command ^2.0.0 → 2.0.0
  ├─ socks ^2.8.3 → 2.8.7
  ├─ sprintf-js ~1.0.2 → 1.0.3
  ├─ string-width ^5.1.2 → 5.1.2
  ├─ string-width-cjs npm:string-width@^4.2.0
  ├─ strip-ansi ^7.0.1 → 7.2.0
  ├─ strip-ansi-cjs npm:strip-ansi@^6.0.1
  ├─ unicode-match-property-ecmascript ^2.0.0 → 2.0.0
  ├─ unicode-match-property-value-ecmascript ^2.2.1 → 2.2.1
  ├─ which-boxed-primitive ^1.1.1 → 1.1.1
  ├─ wrap-ansi ^8.1.0 → 8.1.0
├─ wrap-ansi-cjs npm:wrap-ansi@^7.0.0
  ├─ @tufjs/canonical-json 2.0.0 → 2.0.0
  ├─ ansi-regex ^6.2.2 → 6.2.2
  ├─ ansi-styles ^6.1.0 → 6.2.3
  ├─ eastasianwidth ^0.2.0 → 0.2.0
  ├─ emoji-regex ^9.2.2
  ├─ ip-address ^10.0.1 → 10.1.0
  ├─ is-bigint ^1.1.0
  ├─ is-boolean-object ^1.2.1
  ├─ is-number-object ^1.1.1
  ├─ shebang-regex ^3.0.0
  ├─ smart-buffer ^4.2.0
  ├─ unicode-canonical-property-names-ecmascript ^2.0.0
  ├─ unicode-property-aliases-ecmascript ^2.0.0 → 2.2.0
├─ which-builtin-type ^1.2.1 → 1.2.1
  ├─ is-async-function ^2.0.0 → 2.1.1
  ├─ is-finalizationregistry ^1.1.0
  ├─ is-generator-function ^1.0.10 → 1.1.2
  ├─ isarray ^2.0.5 → 2.0.5
├─ which-collection ^1.0.2 → 1.0.2
  ├─ is-map ^2.0.3
  ├─ is-weakmap ^2.0.2
  ├─ is-weakset ^2.0.3

Changes from v3.3.0

No metadata changes detected.

File Changes

0 added 0 removed 4 modified size delta: +8.9 KB

Risk Dispositions (3 applicable to this version, 0 other)

Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.

Rule Source Disposition Author Reason
encoded-string-file:lib/templates/config/validator.js source-diff reject AI AI (source-diff): Injected javascript-obfuscator payload spawning a detached hidden node -e process; confirmed malicious in shipped file.
semgrep:obfuscation-hex-functions semgrep reject AI AI (semgrep): _0x hex function names are part of the malicious obfuscated payload injected into validator.js.
semgrep:obfuscation-while-true semgrep reject AI AI (semgrep): while(!![]) shuffle loop belongs to the injected obfuscated stager in validator.js.

SAST Findings (5)

HIGH Long encoded string in modified file: lib/templates/config/validator.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH obfuscation-while-true: lib/templates/config/validator.js:69 semgrep

while(!![]) loop is a signature of javascript-obfuscator output Source: https://github.com/asyncapi/generator/blob/3eab3ec9304aa26081358330491d3cfeb55cc245/lib/templates/config/validator.js#L69 67 | } 68 | } > 69 | 70 | /** 71 | * Checks if parameters described in template configuration as required are passed to the generator

HIGH obfuscation-hex-functions: lib/templates/config/validator.js:69 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator Source: https://github.com/asyncapi/generator/blob/3eab3ec9304aa26081358330491d3cfeb55cc245/lib/templates/config/validator.js#L69 67 | } 68 | } > 69 | 70 | /** 71 | * Checks if parameters described in template configuration as required are passed to the generator

HIGH obfuscation-hex-functions: lib/templates/config/validator.js:69 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator Source: https://github.com/asyncapi/generator/blob/3eab3ec9304aa26081358330491d3cfeb55cc245/lib/templates/config/validator.js#L69 67 | } 68 | } > 69 | 70 | /** 71 | * Checks if parameters described in template configuration as required are passed to the generator

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Review Summary

Risk score: 100. Findings: 4 high (+100), 12 info (+0).

Commit: 3eab3ec9304a Browse source

Published to npm: