{"_id":"@dwp/casa-spiderplan-zap-plugin","_rev":"17-964f49b06b48a002530f6fac306aa192","name":"@dwp/casa-spiderplan-zap-plugin","dist-tags":{"latest":"1.0.4"},"versions":{"0.1.1":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.1","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.1","maintainers":[{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"742cab436509b2af95ea0d087c103a377eea80c6","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.1.tgz","fileCount":4,"integrity":"sha512-RIp2t5gccs9wP1rlVmrfBndzMNkEixhg8FQIVj7dqXbBJhz6JJyU/oDQYNOTDsQPHyOlNPTtFqO7CT+392gAOQ==","signatures":[{"sig":"MEUCIHrpGWFOcfXayvoNcI8JLFDdm3Aq+q9AgfhdNQzuUnznAiEAk3qe6b0CJbMBYp/RYFoAwNHWuEwsw36Ebs1i8Ln/KkM=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":17685,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\nr7Wm\r\n=sUrQ\r\n-----END PGP SIGNATURE-----\r\n"},"main":"src/zap.js","engines":{"node":">=14.0.0"},"gitHead":"066755b69cda8df9b2a6ce52152a798ccf5ac31d","scripts":{"test":"exit 0","prepare":"husky install","security":"npm run security:audit","compliance":"npm run compliance:lint","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint ."},"_npmUser":{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"},"_npmVersion":"6.14.14","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"14.17.4","dependencies":{"hpagent":"0.1.2","zaproxy":"1.0.1","tough-cookie":"4.0.0"},"_hasShrinkwrap":false,"devDependencies":{"husky":"7.0.2","eslint":"7.32.0","commitlint":"13.1.0","lint-staged":"11.1.2","babel-eslint":"10.1.0","standard-version":"9.3.1","eslint-plugin-sonarjs":"0.10.0","@dwp/eslint-config-base":"5.0.1","@dwp/commitlint-config-base":"1.2.0"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.1_1634470977411_0.764073144826277","host":"s3://npm-registry-packages"}},"0.1.2":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.2","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.2","maintainers":[{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"89f45500ce428b000a0d3036ccef1c739b562a04","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.2.tgz","fileCount":3,"integrity":"sha512-3H9tUDtaFV9phreCVGG4tB8AbPUkF6iXudCAWbyKH4nDFggszyFG7JiWSBRx34hY9mBfOkN9r6tej/XiKVyZkA==","signatures":[{"sig":"MEQCIHje+5hCpUYVUf94n6ewu2MmMx1EPdUYH2w012R8zcZyAiA1+mV+minLmVPWdpNLgBpS3S7e0oseYsucDa2Rcfj2gA==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":18892,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v4.10.10\r\nComment: https://openpgpjs.org\r\n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\r\nbCC7jySxjlCXChHgLf1uUfCfTYS7Brwn0mQ=\r\n=YJk8\r\n-----END PGP SIGNATURE-----\r\n"},"main":"src/zap.js","engines":{"npm":"^8.0.0","node":"^14.0.0 || ^16.0.0 || ^18.0.0"},"gitHead":"b64d13f3ef396f6e911da655c11b088077d6ac82","scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' http://localhost:8080/JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} http://localhost:8080/)\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"},"_npmVersion":"8.19.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.12.1","dependencies":{"hpagent":"0.1.2","zaproxy":"1.0.1","tough-cookie":"4.0.0"},"_hasShrinkwrap":false,"devDependencies":{"c8":"7.12.0","jest":"29.3.1","eslint":"7.32.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"17.2.0","jest-junit":"15.0.0","node-fetch":"2.6.7","babel-eslint":"10.1.0","@dwp/govuk-casa":"8.6.0","express-session":"1.17.3","standard-version":"9.3.2","@dwp/casa-spiderplan":"2.5.0","eslint-plugin-sonarjs":"0.16.0","@dwp/eslint-config-base":"6.0.0","@dwp/commitlint-config-base":"4.0.0"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.2_1669199047760_0.7728210434073883","host":"s3://npm-registry-packages"}},"0.1.4":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.4","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.4","maintainers":[{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"ce69744c42dadd6eba9bf53b02e10bcddc75f799","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.4.tgz","fileCount":3,"integrity":"sha512-NOodSLg24LAugPyhQPAp3PEdgkia/hfpmDjflI+H0sO5xAkGgB0y4MWfcONSURDZnLyUwpbSXMe4nKHvfS1Kpw==","signatures":[{"sig":"MEUCICCmIKh/uP14hXAvz3It0/uiiN0DwXfjLtpdMmGYyQxbAiEAxy6HoSHZ/7CxTreZQnqJoLTBpmFq93Ot97NsA10S6jI=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":18892,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v4.10.10\r\nComment: https://openpgpjs.org\r\n\r\nwsFzBAEBCAAGBQJjk49yACEJED1NWxICdlZqFiEECWMYAoorWMhJKdjhPU1b\r\nEgJ2VmpnOQ//VQVUU/ZXW/luF11iM3GC7m5qmgZ5YlymQU+n7cstUPJidU0B\r\n2sp8e4WP8ZF/fmxhJbn5p9nkWvgyQ73MBtTNHtKG0TwF2fgW5qZbyI4+0lWx\r\nBKSO3mYtJqEtgccnKtv5F/1II4oDgqGGoKJPp3N6Z4PvT/+3NifjtzYc0+AU\r\n4dywUmWxLjcfg/TrNqvW/uCixXmExHNvafCiFIhS+jVkjnFCWPeBNwdcRLW7\r\nBF2hs5kI94RFAo6zeYjaj2Ta1bG7dCwNwmB7SiTk3sOe2JoRejANp6dydMyl\r\nLSmMbSivibY26WHMqZHzO+AE9vBg1N2wqoM9mPkDI3EtoEG27y+/UYFCs7JN\r\nyCeWqAcS3TgxfFh+UbipfDAga1sZl8mT8tKkbbXlzNKQhdE4fqhkf45Vx0wY\r\nFExO4OaQz8BB+JiK6S+t59hkmO8FgUHKITLN7JbpxvYiAWNV2qTGR/SPGlU7\r\nxrH2z3iJO2PwawkE73nqnlNdmq9wyabE7IpdzXl7MnD26Q6hGo1sMZhibsJn\r\nvR1L1GLv8Wl9R4udFnurHa2QZ2qvuXd4LLwPbcKIOWKo+bYrBZO+jSzbWrdX\r\nE3QkJWkhMHWOomnNK0y4cpVReOJdpMTNKyxwGXEmMf8OXhYj6qbAyDxj3HG2\r\nmqK5nBeQsqG+Hz+Aucfv8ZYLUJ9RAiX+jlo=\r\n=jRrt\r\n-----END PGP SIGNATURE-----\r\n"},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0","node":"^14.0.0 || ^16.0.0 || ^18.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' http://localhost:8080/JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} http://localhost:8080/)\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/capture-and-submit-application/casa-spiderplan-zap-plugin/src-package.tgz","_integrity":"sha512-NOodSLg24LAugPyhQPAp3PEdgkia/hfpmDjflI+H0sO5xAkGgB0y4MWfcONSURDZnLyUwpbSXMe4nKHvfS1Kpw==","_npmVersion":"8.19.3","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"19.2.0","dependencies":{"hpagent":"0.1.2","zaproxy":"1.0.1","tough-cookie":"4.1.2"},"_hasShrinkwrap":false,"devDependencies":{"c8":"7.12.0","jest":"29.3.1","eslint":"7.32.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"17.3.0","jest-junit":"15.0.0","node-fetch":"2.6.7","babel-eslint":"10.1.0","@dwp/govuk-casa":"8.7.2","express-session":"1.17.3","standard-version":"9.5.0","@dwp/casa-spiderplan":"2.5.1","eslint-plugin-sonarjs":"0.17.0","@dwp/eslint-config-base":"6.0.0","@dwp/commitlint-config-base":"4.0.0"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.4_1670614897924_0.9841390626626907","host":"s3://npm-registry-packages"}},"0.1.5":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.5","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.5","maintainers":[{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"89cc3aedea3bcb606b04e9e35cca295ac92c7a85","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.5.tgz","fileCount":3,"integrity":"sha512-MWFggrIYLKHJJ+fDxnY617hO322Jogya7N4Lkjg28MpBLYL3w4a0+qFkPINXW7PMxTXaTiWLdJ8o9frlQqF3Yg==","signatures":[{"sig":"MEUCIQCyTjMUqxB/wUZwc0KgNJC34WrdvT9CQEnVpwRUGupArwIgcl6k7H2jW2Ag+oKUkUyEMGC2behCmb1R1EB3I01j8zs=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":18892,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v4.10.10\r\nComment: https://openpgpjs.org\r\n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\r\nTJcq2yDWPC609scyykJFdhD7ki0U4tdghXk=\r\n=f9e1\r\n-----END PGP SIGNATURE-----\r\n"},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0","node":"^14.0.0 || ^16.0.0 || ^18.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' http://localhost:8080/JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} http://localhost:8080/)\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/capture-and-submit-application/casa-spiderplan-zap-plugin/src-package.tgz","_integrity":"sha512-MWFggrIYLKHJJ+fDxnY617hO322Jogya7N4Lkjg28MpBLYL3w4a0+qFkPINXW7PMxTXaTiWLdJ8o9frlQqF3Yg==","_npmVersion":"8.19.3","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"19.2.0","dependencies":{"hpagent":"0.1.2","zaproxy":"1.0.1","tough-cookie":"4.1.2"},"_hasShrinkwrap":false,"devDependencies":{"c8":"7.12.0","jest":"29.3.1","eslint":"7.32.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"17.3.0","jest-junit":"15.0.0","node-fetch":"2.6.7","babel-eslint":"10.1.0","@dwp/govuk-casa":"8.7.3","express-session":"1.17.3","standard-version":"9.5.0","@dwp/casa-spiderplan":"2.5.2","eslint-plugin-sonarjs":"0.17.0","@dwp/eslint-config-base":"6.0.0","@dwp/commitlint-config-base":"4.0.0"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.5_1671612621611_0.3014920701720054","host":"s3://npm-registry-packages"}},"0.1.6":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.6","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.6","maintainers":[{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"f3b805f1353a41d733eb81b724f9accaad03dc8b","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.6.tgz","fileCount":3,"integrity":"sha512-tfTetIx/7hI90+OEwLImxfp9KCqV0RwfO2XaceaFOw78V/lIFsito9ISlH5+stFuPbw05F8rJ4mYT8yfhvEzNw==","signatures":[{"sig":"MEYCIQConlpwVDWzxC/JN4bv4MPXTxpa2w1FLqGW0Fez7844HQIhANEyqd3VMXHO/DhNLd61hov5gB/61YZnBRacXTkoP1Op","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":18892,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v4.10.10\r\nComment: https://openpgpjs.org\r\n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\r\n5tvAjUW4f2BwI3En+vriNnCfkG8K1DR2aAU=\r\n=2rrv\r\n-----END PGP SIGNATURE-----\r\n"},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0","node":"^14.0.0 || ^16.0.0 || ^18.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' http://localhost:8080/JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} http://localhost:8080/)\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/capture-and-submit-application/casa-spiderplan-zap-plugin/src-package.tgz","_integrity":"sha512-tfTetIx/7hI90+OEwLImxfp9KCqV0RwfO2XaceaFOw78V/lIFsito9ISlH5+stFuPbw05F8rJ4mYT8yfhvEzNw==","_npmVersion":"9.3.1","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"19.5.0","dependencies":{"hpagent":"0.1.2","zaproxy":"1.0.1","tough-cookie":"4.1.2"},"_hasShrinkwrap":false,"devDependencies":{"c8":"7.12.0","jest":"29.4.1","eslint":"8.33.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"17.4.2","jest-junit":"15.0.0","node-fetch":"2.6.9","babel-eslint":"10.1.0","@dwp/govuk-casa":"8.7.8","express-session":"1.17.3","standard-version":"9.5.0","@dwp/casa-spiderplan":"2.5.3","eslint-plugin-sonarjs":"0.18.0","@dwp/eslint-config-base":"6.0.0","@dwp/commitlint-config-base":"4.0.0"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.6_1675688615170_0.5816907026948879","host":"s3://npm-registry-packages"}},"0.1.7":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.7","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.7","maintainers":[{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"84e7c73b14aaa78ea8917d60505a4d3e11e54054","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.7.tgz","fileCount":3,"integrity":"sha512-qRpH7lDO9kOcWf8vBEjKixdBKSTpTNtiP1yB94rrAzsl9Qyq6KA+RskKNRerXP8VPXo52Y60MjN/FI/2TuCZJg==","signatures":[{"sig":"MEYCIQD69Dz/MgSFhrhZVbRJ+JrHcP1TE3EeEpNeEf2MZrISwwIhAKzBPanX8vTfPkaYbWGDT3ADtnxRSwhzheMNw7bLau0I","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":18922,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v4.10.10\r\nComment: https://openpgpjs.org\r\n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\r\nPhn6MHIGB8Py8KVYp0h3yhlTi6BgAce6EOg=\r\n=gzTO\r\n-----END PGP SIGNATURE-----\r\n"},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0 || ^9.0.0","node":"^16.0.0 || ^18.0.0 || ^20.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080/}JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} ${ZAP_PROXY:-http://localhost:8080/})\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.CpAIMo/src-package.tgz","_integrity":"sha512-qRpH7lDO9kOcWf8vBEjKixdBKSTpTNtiP1yB94rrAzsl9Qyq6KA+RskKNRerXP8VPXo52Y60MjN/FI/2TuCZJg==","_npmVersion":"9.1.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.12.1","dependencies":{"hpagent":"1.2.0","zaproxy":"1.0.1","tough-cookie":"4.1.2"},"_hasShrinkwrap":false,"devDependencies":{"c8":"7.13.0","jest":"29.5.0","eslint":"8.39.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"17.6.1","jest-junit":"16.0.0","node-fetch":"2.6.9","babel-eslint":"10.1.0","@dwp/govuk-casa":"8.9.0","express-session":"1.17.3","standard-version":"9.5.0","@dwp/casa-spiderplan":"2.5.4","eslint-plugin-sonarjs":"0.19.0","@dwp/eslint-config-base":"6.1.1","@dwp/commitlint-config-base":"4.0.6"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.7_1683102518040_0.2238298991177612","host":"s3://npm-registry-packages"}},"0.1.8":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.8","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.8","maintainers":[{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"5a6ef0bab026b286b32ef61411c7e9f980079f5b","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.8.tgz","fileCount":3,"integrity":"sha512-f52e4ndyjGu7eK/SgzUpHGLqbb80PvrHYB8CLRVIr2E7dJdS39msZr3uJ3Bf4wg3codXYU5GaRShJCHJkcCBCQ==","signatures":[{"sig":"MEYCIQDshoS8qWDNKcbmz9y08zyTULKm5eZnbPEpcjQBkwOOygIhAJyhRhRyYbBRND8cyapFVwqKYrXAqXfgDOdkt0Ox9cUY","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":19409},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0 || ^9.0.0","node":"^17.0.0 || ^18.0.0 || ^20.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080/}JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} ${ZAP_PROXY:-http://localhost:8080/})\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.cPCPgb/src-package.tgz","_integrity":"sha512-f52e4ndyjGu7eK/SgzUpHGLqbb80PvrHYB8CLRVIr2E7dJdS39msZr3uJ3Bf4wg3codXYU5GaRShJCHJkcCBCQ==","_npmVersion":"9.1.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.14.2","dependencies":{"hpagent":"1.2.0","zaproxy":"github:zaproxy/zap-api-nodejs#79d69c3","tough-cookie":"4.1.2"},"_hasShrinkwrap":false,"devDependencies":{"c8":"7.13.0","jest":"29.5.0","eslint":"8.40.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"17.6.3","jest-junit":"16.0.0","node-fetch":"2.6.9","@dwp/govuk-casa":"8.10.0","express-session":"1.17.3","standard-version":"9.5.0","@babel/preset-env":"7.21.5","@babel/eslint-parser":"7.21.8","@dwp/casa-spiderplan":"2.5.6","eslint-plugin-sonarjs":"0.19.0","@dwp/eslint-config-base":"6.1.1","@dwp/commitlint-config-base":"4.0.6"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.8_1683808706896_0.42764266059836387","host":"s3://npm-registry-packages"}},"0.1.9":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.9","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.9","maintainers":[{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"f5f1511415d3f5e3a6cd5ee0c863f536c6d0e49a","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.9.tgz","fileCount":3,"integrity":"sha512-TZFk5SrGfY0V/0NKGs+Bny+fWgp9QhpNfgb0J4JzrC3qH0pZs1cviuE0gbOQ8HrJJxQV9f7SaA/vGVoTNhz2aw==","signatures":[{"sig":"MEYCIQCQwi92as0e/JJInun+DRiyYgE9o2gGKSllp/Wbcw9TrAIhAIeGR5cc4zrsMWw4lVfuMa9kSudYGJHvdMA2X/KvobZf","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":19376},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0 || ^9.0.0","node":"^17.0.0 || ^18.0.0 || ^20.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080/}JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} ${ZAP_PROXY:-http://localhost:8080/})\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.JJPJDh/src-package.tgz","_integrity":"sha512-TZFk5SrGfY0V/0NKGs+Bny+fWgp9QhpNfgb0J4JzrC3qH0pZs1cviuE0gbOQ8HrJJxQV9f7SaA/vGVoTNhz2aw==","_npmVersion":"9.1.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.14.2","dependencies":{"hpagent":"1.2.0","zaproxy":"2.0.0-rc.1","tough-cookie":"4.1.2"},"_hasShrinkwrap":false,"devDependencies":{"c8":"7.14.0","jest":"29.5.0","eslint":"8.41.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"17.6.5","jest-junit":"16.0.0","node-fetch":"2.6.11","@dwp/govuk-casa":"8.10.2","express-session":"1.17.3","standard-version":"9.5.0","@babel/preset-env":"7.22.4","@babel/eslint-parser":"7.21.8","@dwp/casa-spiderplan":"3.1.1","eslint-plugin-sonarjs":"0.19.0","@dwp/eslint-config-base":"6.1.1","@dwp/commitlint-config-base":"4.0.6"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.9_1686036324252_0.5250875243585009","host":"s3://npm-registry-packages"}},"0.1.10":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"0.1.10","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@0.1.10","maintainers":[{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"7445f62b38a7ec96ca29037fc1ae86db9477949a","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-0.1.10.tgz","fileCount":3,"integrity":"sha512-uVKbt1zJRSlmCWFGA4DGUvNigtkFSA0ARmva6y8wDr6DTRZ2V5OQsIQJIZdYmlQ5scDxq+tbOY1Kt7CXM8JqdA==","signatures":[{"sig":"MEUCIQCddkb3XPE1hDfm3nJlz7fq7YgP+PrrNbKSxBNRoSD3qQIgRq+3YO0aIRIUkg1p8FTXnGiRU7hRPbY8MRwAIF55bUg=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":19436},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0 || ^9.0.0","node":"^18.0.0 || ^20.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080/}JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable@sha256:718916d023d87e774e8eb7093ea066bcd15192902c6a4c81eb32f9cc7200e109 zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} ${ZAP_PROXY:-http://localhost:8080/})\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.ENhFFN/src-package.tgz","_integrity":"sha512-uVKbt1zJRSlmCWFGA4DGUvNigtkFSA0ARmva6y8wDr6DTRZ2V5OQsIQJIZdYmlQ5scDxq+tbOY1Kt7CXM8JqdA==","_npmVersion":"9.1.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.14.2","dependencies":{"hpagent":"1.2.0","zaproxy":"2.0.0-rc.3","tough-cookie":"4.1.3"},"_hasShrinkwrap":false,"devDependencies":{"c8":"8.0.1","jest":"29.7.0","eslint":"8.53.0","express":"4.18.2","js-yaml":"4.1.0","commitlint":"18.4.2","jest-junit":"16.0.0","node-fetch":"2.7.0","@dwp/govuk-casa":"8.13.0","express-session":"1.17.3","standard-version":"9.5.0","@babel/preset-env":"7.23.3","@babel/eslint-parser":"7.23.3","@dwp/casa-spiderplan":"3.1.3","eslint-plugin-sonarjs":"0.23.0","@dwp/eslint-config-base":"7.0.0","@dwp/commitlint-config-base":"4.0.6"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_0.1.10_1700559453985_0.09414386058769031","host":"s3://npm-registry-packages"}},"1.0.0":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"1.0.0","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@1.0.0","maintainers":[{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"}],"dist":{"shasum":"8f6abe8ff21e525a22e59707e3cc0b219b872162","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-1.0.0.tgz","fileCount":3,"integrity":"sha512-5hOIOM/e7Sce+JifUq1I7lFDSP7F00LanuW16X9ivGFHA35ia6/czXLIX1b6MTwx7DOT7EgVLvS28js7YCHUIw==","signatures":[{"sig":"MEUCIQCbPndBkZ3e8s3L42u8xP7ZPuCPOc+a+AKq4xMq5D4rnAIgFDZCHGuE8VoYxVtYYN/7PYwS+O9O2NZELC9g2eDUvWI=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":21216},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":"^8.0.0 || ^9.0.0 || ^10.0.0","node":"^18.0.0 || ^20.0.0"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080/}JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i owasp/zap2docker-stable@sha256:718916d023d87e774e8eb7093ea066bcd15192902c6a4c81eb32f9cc7200e109 zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} ${ZAP_PROXY:-http://localhost:8080/})\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.ELAaFF/src-package.tgz","_integrity":"sha512-5hOIOM/e7Sce+JifUq1I7lFDSP7F00LanuW16X9ivGFHA35ia6/czXLIX1b6MTwx7DOT7EgVLvS28js7YCHUIw==","_npmVersion":"9.1.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.14.2","dependencies":{"hpagent":"1.2.0","zaproxy":"2.0.0-rc.4","tough-cookie":"4.1.3"},"_hasShrinkwrap":false,"devDependencies":{"c8":"8.0.1","jest":"29.7.0","eslint":"8.57.0","express":"4.19.2","js-yaml":"4.1.0","prettier":"3.2.5","commitlint":"18.4.2","jest-junit":"16.0.0","node-fetch":"2.7.0","express-session":"1.18.0","standard-version":"9.5.0","eslint-plugin-sonarjs":"0.25.1","prettier-plugin-jsdoc":"1.3.0","@dwp/commitlint-config-base":"4.0.6"},"peerDependencies":{"@dwp/govuk-casa":">=8.15.1","@dwp/casa-spiderplan":">=4.0.0"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_1.0.0_1712156233669_0.9395418559194795","host":"s3://npm-registry-packages"}},"1.0.2":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"1.0.2","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@1.0.2","maintainers":[{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"},{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"}],"dist":{"shasum":"16dc3619aac95c9b66ff774e9834b0a73da5d961","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-1.0.2.tgz","fileCount":3,"integrity":"sha512-EJhnJeXnp9hZGuufevj+EWDxUTxSZMW2ePZrXmsC8O5sF/VTnUfyS7RXYGAUOUZE45YL+39OCsEKSeekP3nqtg==","signatures":[{"sig":"MEUCICdMYqAt8+mqRoyZHouN6wsxufqJCBHlvpZ5pLL57k+rAiEA0do2XPTFm4r45mseXm6Ok5Q4hvOzZGe2C7R8/6UA5LE=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":21069},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":">=8 <=10","node":">=18 <=22"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080/}JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i zaproxy/zap-bare@sha256:6012efe1feee751afdda354ae220d3ed67ab476380adfaaa8dbb3a4f558e3f8e zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} ${ZAP_PROXY:-http://localhost:8080/})\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.nMkHAe/src-package.tgz","_integrity":"sha512-EJhnJeXnp9hZGuufevj+EWDxUTxSZMW2ePZrXmsC8O5sF/VTnUfyS7RXYGAUOUZE45YL+39OCsEKSeekP3nqtg==","_npmVersion":"9.1.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.14.2","dependencies":{"hpagent":"1.2.0","zaproxy":"2.0.0-rc.5","tough-cookie":"5.0.0"},"_hasShrinkwrap":false,"devDependencies":{"c8":"10.1.3","jest":"29.7.0","eslint":"9.17.0","express":"4.21.2","js-yaml":"4.1.0","commitlint":"19.6.1","jest-junit":"16.0.0","express-session":"1.18.1","standard-version":"9.5.0","eslint-plugin-sonarjs":"3.0.1","@dwp/eslint-config-base":"9.0.2","@dwp/commitlint-config-base":"4.0.6"},"peerDependencies":{"@dwp/govuk-casa":">=8.16.2","@dwp/casa-spiderplan":">=4.0.2"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_1.0.2_1734541569957_0.109417325593824","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"1.0.3","keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","_id":"@dwp/casa-spiderplan-zap-plugin@1.0.3","maintainers":[{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"},{"name":"jgdwp","email":"james.gauld@engineering.digital.dwp.gov.uk"},{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"}],"dist":{"shasum":"8aabaa657358f6bc4c4d61334f6be1519db257de","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-1.0.3.tgz","fileCount":3,"integrity":"sha512-LnbtybmfkIyN1gX6L213Piz51FkTYoDOYuR2RTrWHIYh2LfF/8QS3mbMlOqrFXI6taxPaNhkgZNxbdCrp513Qg==","signatures":[{"sig":"MEUCIFY/jl9PK5GTO7PR1+fCcZpeWtEcxcXf1PZQQn/+wPzGAiEAjpYvtHtfxi8T5LdnbysfenQloioM0/x3QFjrdXQgMWY=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":22343},"main":"src/zap.js","_from":"file:src-package.tgz","engines":{"npm":">=8 <=10","node":">=18 <=22"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080}/JSON/core/action/deleteAllAlerts; c8 npm run test:all","security":"npm run security:audit","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","compliance":"npm run compliance:lint","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i zaproxy/zap-bare@sha256:6012efe1feee751afdda354ae220d3ed67ab476380adfaaa8dbb3a4f558e3f8e zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret -notel; npm run test:ready-check","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E","test:teardown":"docker stop casa-zap-plugin","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","compliance:lint":"eslint .","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080}/JSON/core/view/zapHomePath)\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done"},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.GEELih/src-package.tgz","_integrity":"sha512-LnbtybmfkIyN1gX6L213Piz51FkTYoDOYuR2RTrWHIYh2LfF/8QS3mbMlOqrFXI6taxPaNhkgZNxbdCrp513Qg==","_npmVersion":"9.1.2","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","directories":{},"_nodeVersion":"18.14.2","dependencies":{"hpagent":"1.2.0","zaproxy":"2.0.0-rc.5","tough-cookie":"5.0.0"},"_hasShrinkwrap":false,"devDependencies":{"c8":"10.1.3","jest":"29.7.0","eslint":"9.17.0","express":"4.21.2","js-yaml":"4.1.0","commitlint":"19.6.1","jest-junit":"16.0.0","express-session":"1.18.1","standard-version":"9.5.0","eslint-plugin-sonarjs":"3.0.1","@dwp/eslint-config-base":"9.0.2","@dwp/commitlint-config-base":"4.0.6"},"peerDependencies":{"@dwp/govuk-casa":">=8.16.2","@dwp/casa-spiderplan":">=4.0.2"},"_npmOperationalInternal":{"tmp":"tmp/casa-spiderplan-zap-plugin_1.0.3_1736517304977_0.9707071123916975","host":"s3://npm-registry-packages-npm-production"}},"1.0.4":{"name":"@dwp/casa-spiderplan-zap-plugin","version":"1.0.4","description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","main":"src/zap.js","engines":{"node":">=18 <=22","npm":">=8 <=11"},"scripts":{"test":"curl -o /dev/null -s -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080}/JSON/core/action/deleteAllAlerts; c8 npm run test:all","test:setup":"docker run --rm --name casa-zap-plugin -d -u zap -p 8080:8080 -i zaproxy/zap-bare@sha256:6012efe1feee751afdda354ae220d3ed67ab476380adfaaa8dbb3a4f558e3f8e zap.sh -daemon -host 0.0.0.0 -port 8080 -config api.addrs.addr.name=\".*\" -config api.addrs.addr.regex=true -config api.key=secret -notel; npm run test:ready-check","test:ready-check":"while [ \"$(curl -Is -o /dev/null -w %{response_code} -H 'X-ZAP-Api-Key: secret' ${ZAP_PROXY:-http://localhost:8080}/JSON/core/view/zapHomePath)\" -ne \"200\" ]; do sleep 1; echo 'Waiting for ZAP to start ...'; done","test:teardown":"docker stop casa-zap-plugin","test:all":"npm run test:integration && npm run test:unit","test:unit":"jest --maxWorkers=1 'tests/'","test:integration":"spiderplan --worker-init tests/integration/worker-init.js 'tests/integration/personas/**/*.yaml'","compliance":"npm run compliance:lint","compliance:lint":"eslint .","security":"npm run security:audit","security:audit":"npm audit --json --registry 'https://registry.npmjs.org/' | node -e 'a=JSON.parse(fs.readFileSync(\"/dev/stdin\",\"utf-8\")).metadata.vulnerabilities;process.exit(a.high+a.critical);'","upgrade-deps":"OD=$(npm outdated --long --parseable); echo \"$OD\" | grep ':devDependencies:' | awk -F: '{ print $4 }' | xargs npm i -DE; echo \"$OD\" | grep ':dependencies:' | awk -F: '{ print $4 }' | xargs npm i -E"},"keywords":[],"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","dependencies":{"hpagent":"1.2.0","tough-cookie":"5.1.1","zaproxy":"2.0.0-rc.6"},"devDependencies":{"@dwp/commitlint-config-base":"4.0.8","@dwp/eslint-config-base":"9.0.2","c8":"10.1.3","commitlint":"19.7.1","eslint":"9.21.0","eslint-plugin-sonarjs":"3.0.2","express":"4.21.2","express-session":"1.18.1","jest":"29.7.0","jest-junit":"16.0.0","js-yaml":"4.1.0","standard-version":"9.5.0"},"peerDependencies":{"@dwp/casa-spiderplan":">=4.0.2","@dwp/govuk-casa":">=8.16.2"},"_id":"@dwp/casa-spiderplan-zap-plugin@1.0.4","_integrity":"sha512-etm6OY20U97ekullXNVHi13JzAap61gFLpGIHcuVnmVlPSXLu4gftw7LHTHeCv5LmCu6jI6rDx1n2qBzM7CE0w==","_resolved":"/builds/dwp/engineering/protected-pipelines/mirror-gitlab-package/tmp.emflCi/src-package.tgz","_from":"file:src-package.tgz","_nodeVersion":"18.14.2","_npmVersion":"9.1.2","dist":{"integrity":"sha512-etm6OY20U97ekullXNVHi13JzAap61gFLpGIHcuVnmVlPSXLu4gftw7LHTHeCv5LmCu6jI6rDx1n2qBzM7CE0w==","shasum":"0750148e885ea92995f54d8aa8f73491c0a3dfcd","tarball":"https://registry.npmjs.org/@dwp/casa-spiderplan-zap-plugin/-/casa-spiderplan-zap-plugin-1.0.4.tgz","fileCount":3,"unpackedSize":22343,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIBB537RlRPbpmBIXOkm9tzHlH9DZtxRcvgrwjf0/YQ3nAiEAtr9NQGDZ9QXMl8Vbi+D6Yi3RGUxte/4vCuUr4xlgbaM="}]},"_npmUser":{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"},"directories":{},"maintainers":[{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"},{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/casa-spiderplan-zap-plugin_1.0.4_1740585712750_0.822935325815298"},"_hasShrinkwrap":false}},"time":{"created":"2021-10-17T11:42:57.352Z","modified":"2025-02-26T16:01:53.110Z","0.1.1":"2021-10-17T11:42:57.557Z","0.1.2":"2022-11-23T10:24:07.871Z","0.1.4":"2022-12-09T19:41:38.134Z","0.1.5":"2022-12-21T08:50:21.785Z","0.1.6":"2023-02-06T13:03:35.315Z","0.1.7":"2023-05-03T08:28:38.230Z","0.1.8":"2023-05-11T12:38:27.069Z","0.1.9":"2023-06-06T07:25:24.423Z","0.1.10":"2023-11-21T09:37:34.151Z","1.0.0":"2024-04-03T14:57:13.811Z","1.0.2":"2024-12-18T17:06:10.119Z","1.0.3":"2025-01-10T13:55:05.169Z","1.0.4":"2025-02-26T16:01:52.921Z"},"author":{"name":"DWP","email":"open-source@engineering.digital.dwp.gov.uk"},"license":"ISC","keywords":[],"description":"A test runner that crawls over your CASA Plan to provide assurance that it's working as it should.","maintainers":[{"name":"lhokktyn","email":"lhokk.tyn@gmail.com"},{"name":"dwp-bot","email":"open-source@engineering.digital.dwp.gov.uk"}],"readme":"# ZAP Plugin for casa-spiderplan\n\nAdd ZAP testing to your Spiderplan Personas.\n\nRefer to the [contributor guide](CONTRIBUTORS.md) for details about making changes to this plugin.\n\n**Features:**\n\n- Scan each waypoint as a Persona journey is traversed with both active and passive scans\n- Compiles findings into a report compatible with GitLab CI's vulnerabilities dashboard\n\nThis is _not_ a replacement for full security testing. It will use out-of-the box configurations for ZAP whilst performing scans. You should attack any particular endpoints of concern with a more targeted approach.\n\nDOM-based attacks are also disabled for performance reasons.\n\n## Pre-requisites\n\n- ZAProxy must be running somewhere, e.g. in a docker container, as a desktop application, on a remote server. We use a docker container in the examples below.\n\n## Getting started\n\nInstall the plugin:\n\n```bash\nnpm i -DE @dwp/casa-spiderplan-zap-plugin\n```\n\nConfigure your worker bootstrap script to enable this plugin:\n\n```javascript\nconst zapHooks = require('@dwp/casa-spiderplan-zap-plugin');\n\nmodule.exports = () => {\n  // Other setup stuff ..\n\n  // Load hooks\n  const hooks = [\n    ...await zapHooks({\n      // ZAP API key to use\n      apiKey: 'secret', // pragma: allowlist secret\n\n      // Location of ZAProxy\n      proxy: 'http://localhost:8080/',\n\n      // Target will be called from ZAP, so needs to call host.docker.internal\n      // on all but Linux machines\n      rewriteUrl: (p) => p.replace('localhost', 'host.docker.internal'),\n    }),\n  ];\n\n  // Along with the other worker-init attribute, return the \"hooks\" attribute\n  // containing the list of hooks that will be used\n  return {\n    hooks,\n  };\n};\n```\n\nStart a headless instance of ZAP:\n\n```bash\n# Start the docker container (be sure no other services are using port 8080).\n# Note that the API key you define here needs to match what you specify in the\n# worker bootstrap script above\ndocker run --rm --name zap -d -u zap -p 8080:8080 -i owasp/zap2docker-stable \\\n  zap.sh -daemon -host 0.0.0.0 -port 8080 \\\n  -config api.addrs.addr.name=\".*\" \\\n  -config api.addrs.addr.regex=true \\\n  -config api.key=secret\n```\n\nGive the container a few seconds to fully start up. If you check the container logs, you will see some errors thrown regarding an issue getting latest version information; this is fine to ignore.\n\nRun your Spiderplan tests as normal.\n\nOnce all persona tests are complete, a [report of all findings](https://www.zaproxy.org/docs/api/#coreotherhtmlreport) can be generated in various formats, for example (assuming ZAP is still running):\n\n```bash\n# JSON\ncurl -H 'X-ZAP-Api-Key: secret' http://localhost:8080/OTHER/core/other/jsonreport > report.json\n\n# HTML\ncurl -H 'X-ZAP-Api-Key: secret' http://localhost:8080/OTHER/core/other/jsonreport > report.html\n```\n\n## Process overview\n\nThe following Spiderplan hooks are used:\n\n- `post-init-worker`<br/>\n  Sets up a new ZAP context (one for each worker)\n- `pre-process-persona`<br/>\n  Sets up some hooks on the httpClient to control whether waypoint requests go through the ZAProxy or not\n- `pre-get-waypoint`<br/>\n  Each waypoint is \"claimed\" by a worker to ensure it gets scanned only once\n- `post-submit-form`<br/>\n  Performs an active scan against the waypoint (both GET and POST will be tested)\n\nIt would be far more efficient to travel through a journey and then perform an attack on all traversed waypoints. However, as soon as ZAP begins posting attack payloads at a waypoint (containing random data), it effectively makes all subsequent waypoints unreachable as the session data is now corrupt and the user cannot progress beyond the last good waypoint. Additionally, the last waypoint in the journey is usually a submission of some kind which wipes all session data, making all captured requests redundant.\n\n## Configuring ZAP\n\nThe performance of this plugin relies quite heavily on how ZAP is configured. Particular attention needs paying to CI environments, where ZAP is likely running in a resource-limited environment. Limit the threads in both ZAP and the persona tests.\n\n## Performance\n\nOn an MDM mac (16GB RAM, 2.2GHz 6core CPU), running ZAP in a docker container:\n\n- 302 Personas\n- 6 worker threads\n- Execution time: 6m30s\n\n## Current issues\n\nIt's a little flaky sometimes, with ZAP throwing exceptions such as `ArrayIndexOutOfBoundsException`, `NullPointerException`. The zap-docker (v2.10.0) option seems to more reliable than the GUI we have access to (2.7.0), although it does suffer from scan timeouts occasionally. There is a hard-coded 2 minute timeout on scans which goes some way to mitigating this (at least in the environments tested so far).\n\nThis appears to get worse as subsequent test runs are executed; starting from a fresh instance of ZAP works best.\n\n## References\n\n- [ZAProxy API documentation](https://www.zaproxy.org/docs/api/)\n- [NodeJS client library](https://github.com/zaproxy/zap-api-nodejs)\n- OSX ZAP log is in `~/Library/Application\\ Support/ZAP/zap.log`\n- GitLab [DAST reports ref](https://docs.gitlab.com/ee/user/application_security/dast/#reports)\n- [Schema for GitLab reports](https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/blob/master/dist/dast-report-format.json)\n- [Sample JSON GitLab reports](https://gitlab.com/gitlab-org/security-products/dast/-/blob/main/test/end-to-end/expect/test_url_full_scan.json)\n","readmeFilename":"README.md"}