Fix npm audit warnings (#175)

* bump node

* bump pug

* fix test

* remove forwarded

* bump express deps

* link to kong fork

* lint fix

* use @idio/dicer

* formatter

* bump biome

* add audit

* level

.github/workflows/test.yaml

@@ -11,4 +11,5 @@ jobs:
     - run: npm ci
     - uses: biomejs/setup-biome@v2
     - run: biome ci .
-    - run: npm test
+    - run: npm test
+    - run: npm audit --audit-level=moderate

.vscode/extensions.json

@@ -0,0 +1,3 @@
+{
+	"recommendations": ["biomejs.biome"]
+}

.vscode/settings.json

@@ -1,4 +1,9 @@
 {
-	"editor.defaultFormatter": "biomejs.biome",
-	"editor.formatOnSave": true
+	"editor.formatOnSave": true,
+	"[javascript]": {
+		"editor.defaultFormatter": "biomejs.biome"
+	},
+	"[json]": {
+		"editor.defaultFormatter": "biomejs.biome"
+	}
 }

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:21.6.2-bullseye-slim
+FROM node:22-bullseye-slim
 
 RUN apt-get update && apt-get install -y --no-install-recommends dumb-init
 ENV NODE_ENV production

lib/index.js

@@ -3,14 +3,12 @@ const express = require("express");
 const mw = require("./middleware");
 const routes = require("./routes");
 
-module.exports = function router(options) {
+module.exports = function (options) {
 	const router = express.Router();
 
 	const defaults = [
-		mw.forwarded,
 		mw.errorHandler,
 		mw.bodyParser,
-		null,
 		mw.cors,
 		mw.poweredBy,
 		mw.negotiateContent,
@@ -19,14 +17,12 @@ module.exports = function router(options) {
 	const endpoints = [
 		{ action: "get", path: "/", route: routes.hello },
 		{ action: "all", path: "/ip", route: routes.ips.one },
-		{ action: "all", path: "/ips", route: routes.ips.all },
 		{ action: "all", path: "/agent", route: routes.headers.agent },
 		{ action: "all", path: "/status/:code/:reason?", route: routes.status },
 		{ action: "all", path: "/headers", route: routes.headers.all },
 		{ action: "all", path: "/header/:name", route: routes.headers.one },
 		{ action: "all", path: "/header/:name/:value", route: routes.headers.set },
 		{ action: "all", path: "/cookies", route: routes.cookies.all },
-		{ action: "all", path: "/forwarded", route: routes.forwarded },
 		{ action: "all", path: "/cookie/:name", route: routes.cookies.one },
 		{ action: "all", path: "/cookie/:name/:value", route: routes.cookies.set },
 		{

lib/middleware/body-parser.js

@@ -1,4 +1,4 @@
-const Dicer = require("dicer");
+const Dicer = require("@idio/dicer");
 const querystring = require("node:querystring");
 const contentTypeParser = require("content-type");
 const util = require("../utils");

lib/routes/bins.js

@@ -30,7 +30,6 @@ module.exports = function bins(dsnStr) {
 	const router = express.Router();
 
 	const defaults = [
-		mw.forwarded,
 		mw.errorHandler,
 		mw.bodyParser,
 		null,

lib/routes/delay.js

@@ -1,4 +1,4 @@
-module.exports = function delay(req, res, next) {
+module.exports = function (req, res, next) {
 	let delay = req.params.ms ? Number.parseInt(req.params.ms, 10) : 200;
 
 	if (delay > 60000) {

lib/routes/ips.js

@@ -4,10 +4,4 @@ module.exports = {
 
 		next();
 	},
-
-	all: function allIPs(req, res, next) {
-		res.body = req.forwarded.for;
-
-		next();
-	},
 };

lib/utils.js

@@ -50,7 +50,7 @@ const utils = {
 					clientIPAddress: req.ip,
 					request: {
 						method: req.method,
-						url: `${req.forwarded.proto}://${req.hostname}${req.originalUrl}`,
+						url: `${req.protocol}://${req.hostname}${req.originalUrl}`,
 						httpVersion: "HTTP/1.1",
 						// TODO, add cookie details
 						cookies: utils.objectToArray(req.cookies),
@@ -76,7 +76,7 @@ const utils = {
 		startedDateTime: new Date().toISOString(),
 		clientIPAddress: req.ip,
 		method: req.method,
-		url: `${req.forwarded.proto}://${req.hostname}${req.originalUrl}`,
+		url: `${req.protocol}://${req.hostname}${req.originalUrl}`,
 		httpVersion: "HTTP/1.1",
 		// TODO, add cookie details
 		cookies: req.cookies,