{"_id":"@makenowjust-labo/recheck","_rev":"6-97a469373e1a1af0064b966547025b06","name":"@makenowjust-labo/recheck","dist-tags":{"latest":"3.1.0"},"versions":{"2.0.0":{"name":"@makenowjust-labo/recheck","description":"A vulnerable RegExp (ReDoS) checker for JavaScript (ECMA-262) RegExp.","license":"MIT","author":{"name":"TSUYUSATO Kitsune","email":"make.just.on@gmail.com"},"homepage":"https://makenowjust-labo.github.io/recheck/","repository":{"type":"git","url":"git+https://github.com/MakeNowJust-Labo/recheck.git"},"version":"2.0.0","main":"recheck-opt.js","types":"index.d.ts","keywords":["redos","regexp","security","vulnerability"],"bugs":{"url":"https://github.com/MakeNowJust-Labo/recheck/issues"},"_id":"@makenowjust-labo/recheck@2.0.0","_nodeVersion":"15.7.0","_npmVersion":"7.4.3","dist":{"integrity":"sha512-kY6WaBrhc5HD1FwOzgSpjUgDQ+wTxLq94kP4/5nwZgvcYSlENS4yTjfhdsHAPS4Faf4UkdM3zuN13uHW7z4amA==","shasum":"ca527e9d1e5bfaf52774ab70d4a21553bf70ee32","tarball":"https://registry.npmjs.org/@makenowjust-labo/recheck/-/recheck-2.0.0.tgz","fileCount":4,"unpackedSize":12756,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\n3Oth\r\n=+uiC\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQC849BXapXtZDULar1SGq1KYacKYWrmslncy+ouqMYRcAIgbjxMoscLt/mRH2IvdArR32+p+qOJVeCi5GrAtpIJFuQ="}]},"_npmUser":{"name":"makenowjust","email":"make.just.on@gmail.com"},"directories":{},"maintainers":[{"name":"makenowjust","email":"make.just.on@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/recheck_2.0.0_1612179895026_0.5993910575537569"},"_hasShrinkwrap":false},"2.0.1":{"name":"@makenowjust-labo/recheck","description":"A vulnerable RegExp (ReDoS) checker for JavaScript (ECMA-262) RegExp.","license":"MIT","author":{"name":"TSUYUSATO Kitsune","email":"make.just.on@gmail.com"},"homepage":"https://makenowjust-labo.github.io/recheck/","repository":{"type":"git","url":"git+https://github.com/MakeNowJust-Labo/recheck.git"},"version":"2.0.1","main":"recheck-opt.js","types":"index.d.ts","keywords":["redos","regexp","security","vulnerability"],"bugs":{"url":"https://github.com/MakeNowJust-Labo/recheck/issues"},"_id":"@makenowjust-labo/recheck@2.0.1","_nodeVersion":"14.15.4","_npmVersion":"6.14.11","dist":{"integrity":"sha512-mnulz/o9K4K5IMHII9eLjK9aaJV/FqULC5H7lZFaYaOmnbzxWAb9Kzu2G6vR77gnmJYvwce/i3hL0PoEuS0MWQ==","shasum":"8881f1e5dd969f4d7fa76b49d97a5714736f2692","tarball":"https://registry.npmjs.org/@makenowjust-labo/recheck/-/recheck-2.0.1.tgz","fileCount":6,"unpackedSize":5484849,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\nKTTk\r\n=ldPl\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIHsR1kZ5fy3MiwH0ye4zivrhIaExN/Jneu0fkNrmK1tlAiBXLa8zJAgPQjlYO48UkNodJlrgNGnJFeJEe4R5l5qXfg=="}]},"_npmUser":{"name":"makenowjust","email":"make.just.on@gmail.com"},"directories":{},"maintainers":[{"name":"makenowjust","email":"make.just.on@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/recheck_2.0.1_1612181452302_0.9257143289759442"},"_hasShrinkwrap":false},"2.0.2":{"name":"@makenowjust-labo/recheck","description":"A vulnerable RegExp (ReDoS) checker for JavaScript (ECMA-262) RegExp.","license":"MIT","author":{"name":"TSUYUSATO Kitsune","email":"make.just.on@gmail.com"},"homepage":"https://makenowjust-labo.github.io/recheck/","repository":{"type":"git","url":"git+https://github.com/MakeNowJust-Labo/recheck.git"},"version":"2.0.2","main":"recheck.bundle.js","module":"recheck.js","types":"index.d.ts","keywords":["redos","regexp","security","vulnerability"],"bugs":{"url":"https://github.com/MakeNowJust-Labo/recheck/issues"},"_id":"@makenowjust-labo/recheck@2.0.2","_nodeVersion":"14.15.4","_npmVersion":"6.14.11","dist":{"integrity":"sha512-OBA7/PHjdnkaMySQaY8leWvwl3TyamVNXb/QH1DrYUus4QbbM9zZFJ3HX8iAQ73MOnsxx47xaIBg/57FaJDWZg==","shasum":"f8463136aa1f9863ecdc8a2dd60f1c7d66002960","tarball":"https://registry.npmjs.org/@makenowjust-labo/recheck/-/recheck-2.0.2.tgz","fileCount":7,"unpackedSize":14576868,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\no0bL\r\n=7SFh\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIHSuf8k9bb82htZRUmuXMCK+tcqK9mcZGPYw0ldKT+3WAiEAtY3jVP6uTwZYaulSY5t6zIDDL++HORWIMrAwzIreRho="}]},"_npmUser":{"name":"makenowjust","email":"make.just.on@gmail.com"},"directories":{},"maintainers":[{"name":"makenowjust","email":"make.just.on@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/recheck_2.0.2_1612370615447_0.08871966294554978"},"_hasShrinkwrap":false},"2.1.0":{"name":"@makenowjust-labo/recheck","description":"A vulnerable RegExp (ReDoS) checker for JavaScript (ECMA-262) RegExp.","license":"MIT","author":{"name":"TSUYUSATO Kitsune","email":"make.just.on@gmail.com"},"homepage":"https://makenowjust-labo.github.io/recheck/","repository":{"type":"git","url":"git+https://github.com/MakeNowJust-Labo/recheck.git"},"version":"2.1.0","main":"recheck.bundle.js","module":"recheck.js","types":"index.d.ts","keywords":["redos","regexp","security","vulnerability"],"bugs":{"url":"https://github.com/MakeNowJust-Labo/recheck/issues"},"_id":"@makenowjust-labo/recheck@2.1.0","_nodeVersion":"14.15.4","_npmVersion":"6.14.11","dist":{"integrity":"sha512-CWbKDHo01GPDcYrSfeBwack6DPzGuG16xw2FmZ6tohGojlTNac2GxyLhBZlGBu53/f9RtsGGM94FJytiLO3bkw==","shasum":"1b1520f714f59ebd48b1f26e557e9a26b4a9932a","tarball":"https://registry.npmjs.org/@makenowjust-labo/recheck/-/recheck-2.1.0.tgz","fileCount":7,"unpackedSize":15051166,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\n6v7E\r\n=7EP6\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIHN0KSrKhq6XR1SkM1q2RrGmjcmsl3n6cqBVyFPqoa+wAiEA9ec07jodmVyAUCv2PaGANQYGtEJi6c2O2LUxZOfESZ4="}]},"_npmUser":{"name":"makenowjust","email":"make.just.on@gmail.com"},"directories":{},"maintainers":[{"name":"makenowjust","email":"make.just.on@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/recheck_2.1.0_1612795495707_0.6774157520123405"},"_hasShrinkwrap":false},"3.0.0":{"name":"@makenowjust-labo/recheck","description":"A vulnerable RegExp (ReDoS) checker for JavaScript (ECMA-262) RegExp.","license":"MIT","author":{"name":"TSUYUSATO Kitsune","email":"make.just.on@gmail.com"},"homepage":"https://makenowjust-labo.github.io/recheck/","repository":{"type":"git","url":"git+https://github.com/MakeNowJust-Labo/recheck.git"},"version":"3.0.0","main":"recheck.bundle.js","module":"recheck.js","types":"index.d.ts","keywords":["redos","regexp","security","vulnerability"],"bugs":{"url":"https://github.com/MakeNowJust-Labo/recheck/issues"},"_id":"@makenowjust-labo/recheck@3.0.0","_nodeVersion":"14.16.0","_npmVersion":"6.14.11","dist":{"integrity":"sha512-B+GNE/QnbCrUuXaAiU+tm3qjg9x5/rQ54YVSjFvgUZ/Wv++oUMZQHSpM3ANTmKjiBRuPGfkYYDoqahWpK5eR6w==","shasum":"3c5a79025ba68485c9c63957f3e9b72e78289cfd","tarball":"https://registry.npmjs.org/@makenowjust-labo/recheck/-/recheck-3.0.0.tgz","fileCount":7,"unpackedSize":15512649,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\nPnhe\r\n=WESg\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCSzySA24JGd7gGFTYqc52fSfZ/HF9YmcGJsYnBnT9T7gIgCaPvkkZqHnHtlMmQgPLOigACmt3Gkvly454bw2Nei/w="}]},"_npmUser":{"name":"makenowjust","email":"make.just.on@gmail.com"},"directories":{},"maintainers":[{"name":"makenowjust","email":"make.just.on@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/recheck_3.0.0_1618337142188_0.04266647340160534"},"_hasShrinkwrap":false},"3.1.0":{"name":"@makenowjust-labo/recheck","description":"A vulnerable RegExp (ReDoS) checker for JavaScript (ECMA-262) RegExp.","license":"MIT","author":{"name":"TSUYUSATO Kitsune","email":"make.just.on@gmail.com"},"homepage":"https://makenowjust-labo.github.io/recheck/","repository":{"type":"git","url":"git+https://github.com/MakeNowJust-Labo/recheck.git"},"version":"3.1.0","main":"recheck.bundle.js","module":"recheck.js","types":"index.d.ts","keywords":["redos","regexp","security","vulnerability"],"bugs":{"url":"https://github.com/MakeNowJust-Labo/recheck/issues"},"_id":"@makenowjust-labo/recheck@3.1.0","_nodeVersion":"14.16.1","_npmVersion":"6.14.12","dist":{"integrity":"sha512-XScxA5y1/jzKRrSX65OY/xBerM4NhSIpLbg9Uzd205EFxBsBUTxkzDL8R4x6isV7aJpxCBTZs1xT1UxPBqfwCg==","shasum":"0a28c798514e53ae885557946c368525dbd5bde1","tarball":"https://registry.npmjs.org/@makenowjust-labo/recheck/-/recheck-3.1.0.tgz","fileCount":7,"unpackedSize":15550280,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.13\r\nComment: https://openpgpjs.org\r\n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\nUHtf\r\n=cabm\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIAiApC3hkKi7Ipu0KbRICBlj62Git5wOmhQSDbNVsxunAiAJFf7kKOFSRU9fSx7yE9pIvaWyfcer1uQeCNc+VQ4y0w=="}]},"_npmUser":{"name":"makenowjust","email":"make.just.on@gmail.com"},"directories":{},"maintainers":[{"name":"makenowjust","email":"make.just.on@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/recheck_3.1.0_1620982339483_0.5273826281705751"},"_hasShrinkwrap":false}},"time":{"created":"2021-02-01T11:44:54.768Z","2.0.0":"2021-02-01T11:44:55.120Z","modified":"2022-04-06T03:15:40.241Z","2.0.1":"2021-02-01T12:10:52.598Z","2.0.2":"2021-02-03T16:43:35.633Z","2.1.0":"2021-02-08T14:44:55.923Z","3.0.0":"2021-04-13T18:05:42.377Z","3.1.0":"2021-05-14T08:52:19.722Z"},"maintainers":[{"name":"makenowjust","email":"make.just.on@gmail.com"}],"description":"A vulnerable RegExp (ReDoS) checker for JavaScript (ECMA-262) RegExp.","homepage":"https://makenowjust-labo.github.io/recheck/","keywords":["redos","regexp","security","vulnerability"],"repository":{"type":"git","url":"git+https://github.com/MakeNowJust-Labo/recheck.git"},"author":{"name":"TSUYUSATO Kitsune","email":"make.just.on@gmail.com"},"bugs":{"url":"https://github.com/MakeNowJust-Labo/recheck/issues"},"license":"MIT","readme":"# `@makenowjust-labo/recheck`\n\n> A vulnerable RegExp ([ReDoS][]) checker for JavaScript ([ECMA-262][]) RegExp.\n\n[redos]: https://en.wikipedia.org/wiki/ReDoS\n[ecma-262]: https://www.ecma-international.org/ecma-262/11.0/index.html#title\n\n## Installation\n\nUses the following command to install this library:\n\n```console\n$ npm install @makenowjust-labo/recheck\n```\n\n## Usage\n\nThis library exports only the API called `check`.\nIt takes a RegExp pattern source and flags to be checked (and a configuration optionally),\nthen it returns the analysis result.\n\n```javascript\nconst { check } = require(\"@makenowjust-labo/recheck\");\n\nconsole.log(check(\"^(a|a)*$\", \"\"));\n// {\n//   status: 'vulnerable',\n//   checker: 'automaton',\n//   attack: {\n//     pumps: [ { prefix: 'a', pump: 'a', bias: 0 } ],\n//     suffix: '\\x00',\n//     base: 17,\n//     string: 'aaaaaaaaaaaaaaaaaa\\x00',\n//     pattern: \"'a' 'a'¹⁷ '\\\\x00'\"\n//   },\n//   complexity: { type: 'exponential', summary: 'exponential', isFuzz: false }\n// }\n```\n\n### Configuration\n\nA configuration parameter specifies as the 3rd argument of the `check` function.\n\n```javascript\nconsole.log(check(\"^(a|a)*$\", \"\", { timeout: 1000, checker: \"fuzz\" }));\n```\n\nThe following parameters are available.\n\n#### `timeout`\n\nAn integer value of timeout duration milliseconds. (default: `undefined`)\n\nWhen `undefined` is specified, it means there is no timeout.\n\n#### `checker`\n\nA checker name to use. (default: `'hybrid'`)\n\nThere are three checkers:\n\n- `'automaton'`: A checker which works based on automaton theory.\n  It can analyze a ReDoS vulnerability of the RegExp without false positives,\n  however, it needs some minutes against some RegExps and it does not support some syntax.\n- `'fuzz'`: A checker based on fuzzing.\n  It can detect a ReDoS vulnerability against all RegExp syntax including back-references\n  and look-around assertions. However, it needs some seconds on average and it may cause\n  false negatives.\n- `'hybrid'`: A checker which combines the automaton based checker and the fuzz checker.\n  If the RegExp is supported by the automaton based checker and some thresholds are passed,\n  it uses the automaton based checker. Otherwise, it falls back to the fuzz checker.\n\nThe hybrid checker performs better than others in many cases.\n\n<details>\n\n<summary>Other parameters to specify detailed behavior</summary>\n\nAnd, there are other parameters to specify detailed behavior.\nThey are set to perform better as the default, so it is rare to specify them\nand it needs to know the checkers in depth to set the correct value.\n\n#### `maxAttackSize`\n\nAn integer value of a maximum length of an attack string. (default: `4_000`)\n\nThe checker finds a vulnerable string not to exceed this length.\n\n#### `attackLimit`\n\nAn integer value of a limit of VM execution steps. (default: `100_000`)\n\nThe checker assumes the RegExp is vulnerable when a string exists\nagainst which steps exceed the limit.\n\n#### `randomSeed`\n\nAn integer value of seed for pseudo-random number generator in fuzzing. (default: `undefined`)\n\nWhen `undefined` is specified, it uses a system default seed.\n\n#### `seedLimit`\n\nAn integer value of a limit of VM execution steps on the seeding phase. (default: `1_000`)\n\n#### `incubationLimit`\n\nAn integer value of a limit of VM execution steps on the incubation phase. (default: `10_000`)\n\n#### `crossSize`\n\nAn integer value of the number of crossings on one generation. (default: `25`)\n\n#### `mutateSize`\n\nAn integer value of the number of mutations on one generation. (default: `50`)\n\n#### `maxSeedSize`\n\nAn integer value of a maximum size of a seed set. (default: `50`)\n\n#### `maxGenerationSize`\n\nAn integer value of a maximum size of a living population on one generation. (default: `100`)\n\n#### `maxIteration`\n\nAn integer value of a number of iterations on the incubation phase. (default: `30`)\n\n#### `maxDegree`\n\nAn integer value of a maximum degree to attempt on building an attack string. (default: `4`)\n\n#### `heatRate`\n\nA rate of a hotspot steps by the maximum steps. (default: `0.001`)\n\n#### `usesAcceleration`\n\nWhether to use acceleration or not on fuzzing. (default: `true`)\n\n#### `maxRepeatCount`\n\nAn integer value of a limit of repetition count in the RegExp. (default: `20`)\n\nIf the RegExp exceeds this limit on the hybrid checker, it switches to\nuse the fuzz checker to analyze instead of the automaton based checker.\n\n#### `maxNFASize`\n\nAn integer value of a maximum size of the transition function of NFA. (default: `40000`)\n\nIf the NFA's transition function exceeds this limit on the hybrid checker,\nit switches to use fuzz checker to analyze instead of the automaton based checker.\n\n#### `maxPatternSize`\n\nAn integer value of maximum size of the pattern. (default: `1500`)\n\nIf the pattern size exceeds this limit on the hybrid checker,\nit switches to use fuzz checker to analyze instead of the automaton based checker.\n\n</details>\n\n## License\n\nMIT License.\n\n2020-2021 (C) TSUYUSATO \"MakeNowJust\" Kitsune\n","readmeFilename":"README.md"}