first commit

2025-10-19 12:24:23 -06:00 · 2025-10-19 12:24:23 -06:00 · 830220b2f0
commit 830220b2f0
2650 changed files with 221070 additions and 0 deletions
--- a/.env
+++ b/.env
@ -0,0 +1,13 @@
 PORT=3000
 DB_HOST=127.0.0.1
 DB_PORT=3306
 DB_USER="raquel"
 #DB_PASS="TuClaveFuerte123!"
 DB_PASS="MWK24T7GP4NGfV6WaGYw"
 DB_NAME=proyecto_final
 JWT_SECRET=super_secreto_largo_y_unico
 JWT_EXPIRES=7d
 VITE_API_URL=http://localhost:3000
--- a/README.md
+++ b/README.md
@ -0,0 +1,616 @@
 # Backend MVP - API de Gestión de Actividades
 Este es un proyecto backend desarrollado con Node.js y Express para gestionar actividades de usuarios con sistema de gamificación (insignias, metas, niveles).
 ## Tabla de Contenidos
 1. [Tecnologías Utilizadas](#tecnologías-utilizadas)
 2. [Estructura del Proyecto](#estructura-del-proyecto)
 3. [Configuración Inicial](#configuración-inicial)
 4. [Arquitectura y Flujo de Datos](#arquitectura-y-flujo-de-datos)
 5. [Endpoints Disponibles](#endpoints-disponibles)
 6. [Explicación del Código](#explicación-del-código)
 ---
 ## Tecnologías Utilizadas
 - **Node.js**: Entorno de ejecución de JavaScript
 - **Express**: Framework web para crear la API REST
 - **MySQL**: Base de datos relacional
 - **JWT (JSON Web Tokens)**: Autenticación basada en tokens
 - **bcryptjs**: Encriptación de contraseñas
 - **express-validator**: Validación de datos de entrada
 - **dotenv**: Gestión de variables de entorno
 - **cors**: Permitir peticiones desde el frontend
 - **morgan**: Logger de peticiones HTTP
 ---
 ## Estructura del Proyecto
 ```
 backend-mvp/
 │
 ├── server.js                    # Punto de entrada principal
 │
 ├── src/
 │   ├── config/
 │   │   └── db.js               # Configuración del pool de MySQL
 │   │
 │   ├── middleware/
 │   │   ├── auth.js             # Middleware de autenticación (legacy)
 │   │   ├── requireAdmin.js     # Middleware para verificar rol admin
 │   │   └── handleValidation.js # Middleware para procesar validaciones
 │   │
 │   ├── utils/
 │   │   └── jwt.js              # Utilidades JWT (sign, verify, requireAuth)
 │   │
 │   ├── validators/
 │   │   ├── auth.validators.js  # Validaciones para autenticación
 │   │   ├── actividades.validators.js
 │   │   ├── categorias.validators.js
 │   │   └── ... (otros validadores)
 │   │
 │   └── routes/
 │       ├── auth.routes.js      # Rutas de autenticación (login, register)
 │       ├── actividades.routes.js
 │       ├── categorias.routes.js
 │       ├── roles.routes.js
 │       ├── insignias.routes.js
 │       ├── metas.routes.js
 │       ├── niveles.routes.js
 │       ├── notificaciones.routes.js
 │       ├── agenda.routes.js
 │       ├── registroActividad.routes.js
 │       ├── usuarioMetricas.routes.js
 │       ├── usuarioInsignias.routes.js
 │       ├── usuarioRoles.routes.js
 │       └── adminMetrics.routes.js
 │
 ├── .env                         # Variables de entorno (NO incluir en git)
 ├── package.json                 # Dependencias del proyecto
 └── README.md                    # Este archivo
 ```
 ---
 ## Configuración Inicial
 ### 1. Instalar dependencias
 ```bash
 npm install
 ```
 ### 2. Configurar variables de entorno
 Crear un archivo `.env` en la raíz del proyecto con el siguiente contenido:
 ```env
 # Base de datos
 DB_HOST=localhost
 DB_USER=tu_usuario
 DB_PASS=tu_contraseña
 DB_NAME=nombre_base_datos
 DB_PORT=3306
 # JWT
 JWT_SECRET=tu_secreto_super_seguro_cambiar_en_produccion
 # Servidor
 PORT=3000
 ```
 ### 3. Configurar la base de datos
 Asegúrate de tener MySQL instalado y crea las tablas necesarias. El proyecto espera las siguientes tablas:
 - `usuarios`: Información de usuarios (id_usuario, nombre, apellido, email, password_hash, genero, fecha_registro, activo)
 - `roles`: Roles del sistema (id_rol, nombre, descripcion)
 - `usuarios_roles`: Relación muchos a muchos entre usuarios y roles
 - `categorias`: Categorías de actividades
 - `actividades`: Actividades del sistema
 - `insignias`: Insignias/badges del sistema de gamificación
 - `metas`: Metas/objetivos de usuarios
 - `niveles`: Niveles del sistema de progreso
 - `notificaciones`: Sistema de notificaciones
 - `agenda`: Calendario/planificación de actividades
 - `registro_actividad`: Registro de actividades completadas
 - `usuario_metricas`: Estadísticas de usuarios
 - `usuario_insignias`: Insignias obtenidas por usuarios
 ### 4. Iniciar el servidor
 ```bash
 node server.js
 ```
 El servidor estará disponible en `http://localhost:3000` (o el puerto configurado en `.env`).
 ---
 ## Arquitectura y Flujo de Datos
 ### Flujo General de una Petición
 ```
 1. Cliente (Frontend) → HTTP Request
   ↓
 2. CORS Middleware (permite peticiones del frontend)
   ↓
 3. Body Parser (convierte JSON a objeto JavaScript)
   ↓
 4. Morgan Logger (registra la petición en consola)
   ↓
 5. Router (encuentra la ruta correspondiente)
   ↓
 6. Validadores (express-validator verifica datos)
   ↓
 7. handleValidation (procesa errores de validación)
   ↓
 8. Middlewares de Autenticación (requireAuth / requireAdmin)
   ↓
 9. Lógica de la Ruta (consultas a BD, procesamiento)
   ↓
 10. Response (JSON con resultado o error)
    ↓
 11. Cliente recibe la respuesta
 ```
 ### Flujo de Autenticación
 ```
 REGISTRO:
 Usuario → POST /api/auth/register → Validación → Hash password
  → Insertar en BD → Generar JWT → Devolver token + user
 LOGIN:
 Usuario → POST /api/auth/login → Validación → Buscar en BD
  → Verificar password → Generar JWT → Devolver token + user
 RUTAS PROTEGIDAS:
 Usuario → Petición con header "Authorization: Bearer <token>"
  → requireAuth middleware → Verificar token → Adjuntar req.user
  → Continuar a la ruta → Devolver respuesta
 ```
 ### Flujo de Validación
 ```
 Cliente envía datos → Validador (express-validator marca errores)
  → handleValidation middleware
    → Si hay errores: devuelve 400 con lista de errores
    → Si no hay errores: continúa a la lógica de la ruta
 ```
 ---
 ## Endpoints Disponibles
 ### Autenticación (`/api/auth`)
 | Método | Endpoint | Descripción | Auth | Body |
 |--------|----------|-------------|------|------|
 | POST | `/api/auth/register` | Registrar nuevo usuario | No | `{ nombre, apellido, email, genero, password }` |
 | POST | `/api/auth/login` | Iniciar sesión | No | `{ email, password }` |
 | GET | `/api/auth/me` | Obtener perfil + roles | Sí | - |
 | PUT | `/api/auth/me/profile` | Actualizar perfil | Sí | `{ nombre?, apellido? }` |
 | PUT | `/api/auth/me/password` | Cambiar contraseña | Sí | `{ actual, nueva }` |
 ### Catálogos
 | Endpoint | Descripción |
 |----------|-------------|
 | `/api/categorias` | CRUD de categorías de actividades |
 | `/api/roles` | CRUD de roles del sistema |
 | `/api/actividades` | CRUD de actividades |
 | `/api/insignias` | CRUD de insignias/badges |
 | `/api/metas` | CRUD de metas/objetivos |
 | `/api/niveles` | CRUD de niveles |
 ### Gestión de Usuario
 | Endpoint | Descripción |
 |----------|-------------|
 | `/api/notificaciones` | Notificaciones del usuario |
 | `/api/agenda` | Agenda/calendario de actividades |
 | `/api/registroactividad` | Registro de actividades completadas |
 | `/api/metricas` | Métricas y estadísticas del usuario |
 | `/api/usuario-insignias` | Insignias obtenidas por el usuario |
 | `/api/usuario-roles` | Roles asignados al usuario |
 ### Administración
 | Endpoint | Descripción |
 |----------|-------------|
 | `/api/admin/metrics` | Métricas administrativas del sistema |
 ### Rutas de Prueba
 | Método | Endpoint | Descripción |
 |--------|----------|-------------|
 | GET | `/public` | Ruta pública de prueba |
 | GET | `/__ping` | Health check sin autenticación |
 | GET | `/api/admin/_ping_noauth` | Ping admin sin auth |
 | GET | `/api/admin/_ping_token` | Ping con autenticación |
 ---
 ## Explicación del Código
 ### 1. Punto de Entrada (`server.js`)
 Este es el archivo principal que:
 1. Carga las variables de entorno con `dotenv`
 2. Configura Express y los middlewares globales (CORS, body parser, logger)
 3. Registra todas las rutas de la aplicación
 4. Inicia el servidor en el puerto especificado
 **Ver:** [`server.js`](./server.js) para documentación detallada línea por línea.
 ---
 ### 2. Configuración de Base de Datos (`src/config/db.js`)
 Crea un **pool de conexiones** a MySQL usando `mysql2/promise`. Un pool reutiliza conexiones en lugar de crear una nueva cada vez, mejorando el rendimiento.
 **Configuración clave:**
 - `connectionLimit: 10` → Máximo 10 conexiones simultáneas
 - `namedPlaceholders: true` → Permite usar `:nombre` en queries
 - Lee las credenciales desde variables de entorno (`.env`)
 **Exporta:** El pool que se importa en todas las rutas.
 **Ver:** [`src/config/db.js`](./src/config/db.js) para más detalles.
 ---
 ### 3. Utilidades JWT (`src/utils/jwt.js`)
 Maneja todo lo relacionado con JSON Web Tokens:
 **Funciones principales:**
 1. **`signToken(payload, expiresIn)`**
   - Genera un token JWT firmado
   - Usado en register/login para crear tokens
   - Incluye datos del usuario (id_usuario, email)
 2. **`verifyTokenPayload(token)`**
   - Verifica que un token sea válido
   - Extrae y devuelve el payload decodificado
 3. **`requireAuth(req, res, next)`** (Middleware)
   - Protege rutas que requieren autenticación
   - Extrae el token del header `Authorization: Bearer <token>`
   - Verifica el token y adjunta `req.user` con los datos del usuario
   - Si el token es inválido o expiró, devuelve error 401
 **Flujo de uso:**
 ```javascript
 // En una ruta protegida:
 router.get('/perfil', requireAuth, (req, res) => {
  console.log(req.user); // { id_usuario: 123, email: 'user@mail.com' }
  // ... lógica de la ruta
 });
 ```
 **Ver:** [`src/utils/jwt.js`](./src/utils/jwt.js) para documentación completa.
 ---
 ### 4. Middlewares
 #### a) `handleValidation` (`src/middleware/handleValidation.js`)
 Procesa los resultados de `express-validator`:
 - Recoge los errores marcados por los validadores
 - Si hay errores: devuelve `400 Bad Request` con la lista
 - Si no hay errores: continúa a la ruta
 **Uso:**
 ```javascript
 router.post('/register', registerValidator, handleValidation, async (req, res) => {
  // Si llega aquí, los datos ya fueron validados
 });
 ```
 #### b) `requireAdmin` (`src/middleware/requireAdmin.js`)
 Verifica que el usuario autenticado sea administrador:
 1. Verifica que `req.user` exista (debe usarse DESPUÉS de `requireAuth`)
 2. Consulta la BD para verificar si el usuario tiene rol 'admin'
 3. Si es admin: continúa; si no: devuelve `403 Forbidden`
 **Uso:**
 ```javascript
 router.get('/admin/users', requireAuth, requireAdmin(), async (req, res) => {
  // Solo admins pueden llegar aquí
 });
 ```
 **Ver:** [`src/middleware/`](./src/middleware/) para más detalles.
 ---
 ### 5. Validadores (`src/validators/`)
 Definen reglas de validación usando `express-validator`.
 **Ejemplo:** `auth.validators.js`
 ```javascript
 const registerValidator = [
  body('nombre').trim().notEmpty().withMessage('Nombre requerido'),
  body('email').isEmail().withMessage('Email inválido'),
  body('password').isLength({ min: 6 }).withMessage('Mínimo 6 caracteres'),
 ];
 ```
 **Flujo:**
 1. Se aplica como middleware en la ruta
 2. `express-validator` verifica cada campo
 3. `handleValidation` recoge los errores y responde
 **Ver:** [`src/validators/auth.validators.js`](./src/validators/auth.validators.js) para ejemplo completo.
 ---
 ### 6. Rutas (`src/routes/`)
 Cada archivo de rutas maneja un recurso específico (usuarios, actividades, etc.).
 **Ejemplo:** `auth.routes.js`
 #### **POST /api/auth/register**
 **Flujo completo:**
 1. `registerValidator` valida nombre, email, password
 2. `handleValidation` verifica errores
 3. Verifica que el email no esté registrado
 4. Hashea la contraseña con `bcrypt`
 5. Inserta el usuario en la BD
 6. Genera un token JWT con `signToken()`
 7. Devuelve el token + datos del usuario
 **Request:**
 ```json
 {
  "nombre": "Juan",
  "apellido": "Pérez",
  "email": "juan@mail.com",
  "genero": "M",
  "password": "miPassword123"
 }
 ```
 **Response (201):**
 ```json
 {
  "msg": "Usuario registrado con éxito",
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "user": {
    "id_usuario": 1,
    "nombre": "Juan",
    "apellido": "Pérez",
    "email": "juan@mail.com",
    "genero": "M"
  }
 }
 ```
 #### **POST /api/auth/login**
 **Flujo completo:**
 1. `loginValidator` valida email y password
 2. Busca el usuario por email en la BD
 3. Verifica que el usuario esté activo
 4. Compara la contraseña con `bcrypt.compare()`
 5. Genera token JWT
 6. Devuelve token + datos del usuario
 **Request:**
 ```json
 {
  "email": "juan@mail.com",
  "password": "miPassword123"
 }
 ```
 **Response (200):**
 ```json
 {
  "msg": "Login exitoso",
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "user": {
    "id_usuario": 1,
    "nombre": "Juan",
    ...
  }
 }
 ```
 **Ver:** [`src/routes/auth.routes.js`](./src/routes/auth.routes.js) para documentación línea por línea.
 ---
 ## Diagrama de Componentes
 ```
 ┌─────────────────────────────────────────────────────────────┐
 │                         CLIENTE                              │
 │                   (Frontend - React/Vue)                     │
 └────────────────────────┬────────────────────────────────────┘
                         │ HTTP Request
                         │ Authorization: Bearer <token>
                         ↓
 ┌─────────────────────────────────────────────────────────────┐
 │                      SERVER.JS                               │
 │  ┌──────────────────────────────────────────────────────┐   │
 │  │ MIDDLEWARES GLOBALES                                 │   │
 │  │ - CORS (permite frontend)                            │   │
 │  │ - express.json() (parsea body)                       │   │
 │  │ - morgan (logger)                                    │   │
 │  └──────────────────────────────────────────────────────┘   │
 └────────────────────────┬────────────────────────────────────┘
                         │
                         ↓
 ┌─────────────────────────────────────────────────────────────┐
 │                    ROUTER (Rutas)                            │
 │  /api/auth → auth.routes.js                                 │
 │  /api/actividades → actividades.routes.js                   │
 │  /api/categorias → categorias.routes.js                     │
 │  ...                                                         │
 └────────────────────────┬────────────────────────────────────┘
                         │
                         ↓
 ┌─────────────────────────────────────────────────────────────┐
 │               VALIDADORES + handleValidation                 │
 │  - registerValidator (express-validator)                    │
 │  - handleValidation (procesa errores)                       │
 └────────────────────────┬────────────────────────────────────┘
                         │
                         ↓
 ┌─────────────────────────────────────────────────────────────┐
 │                   MIDDLEWARES DE AUTH                        │
 │  - requireAuth (verifica JWT)                               │
 │  - requireAdmin (verifica rol admin)                        │
 └────────────────────────┬────────────────────────────────────┘
                         │
                         ↓
 ┌─────────────────────────────────────────────────────────────┐
 │                  LÓGICA DE LA RUTA                          │
 │  - Consultas a BD (pool)                                    │
 │  - Procesamiento de datos                                   │
 │  - Generación de respuesta                                  │
 └────────────────────────┬────────────────────────────────────┘
                         │
                         ↓
 ┌─────────────────────────────────────────────────────────────┐
 │                     BASE DE DATOS                            │
 │                        (MySQL)                               │
 │  - usuarios, roles, actividades, insignias, etc.            │
 └─────────────────────────────────────────────────────────────┘
 ```
 ---
 ## Conceptos Clave para Entender
 ### 1. **Middleware**
 Funciones que se ejecutan ANTES de la lógica de la ruta. Se ejecutan en orden:
 ```javascript
 app.use(cors());         // 1. Permite CORS
 app.use(express.json()); // 2. Parsea JSON
 // ...
 router.post('/login', loginValidator, handleValidation, async (req, res) => {
  // 3. loginValidator → 4. handleValidation → 5. Esta función
 });
 ```
 ### 2. **JWT (JSON Web Token)**
 Token firmado que contiene información del usuario. Permite autenticación sin sesiones:
 - **Frontend:** Guarda el token (localStorage/cookie)
 - **Cada petición:** Envía el token en header `Authorization: Bearer <token>`
 - **Backend:** Verifica el token y extrae datos del usuario
 ### 3. **Bcrypt**
 Librería para hashear contraseñas de forma segura:
 - `bcrypt.hash(password, 10)` → Hashea la contraseña
 - `bcrypt.compare(password, hash)` → Verifica si coinciden
 - **NUNCA** se guardan contraseñas en texto plano
 ### 4. **Pool de Conexiones**
 En lugar de abrir/cerrar conexiones a MySQL constantemente, un pool mantiene conexiones abiertas y las reutiliza, mejorando el rendimiento.
 ### 5. **Express Router**
 Permite modularizar las rutas:
 ```javascript
 // En server.js
 app.use('/api/auth', authRoutes);
 // En auth.routes.js
 router.post('/login', ...); // Resulta en: POST /api/auth/login
 ```
 ---
 ## Para Estudiantes
 ### Cómo leer este código paso a paso
 1. **Empieza por `server.js`**: Entiende cómo se inicia el servidor y se registran las rutas.
 2. **Lee `src/config/db.js`**: Aprende cómo se conecta a MySQL.
 3. **Estudia `src/utils/jwt.js`**: Comprende cómo funciona la autenticación con JWT.
 4. **Analiza `src/routes/auth.routes.js`**: Sigue el flujo completo de register/login.
 5. **Revisa los middlewares**: Entiende cómo `requireAuth`, `handleValidation`, etc. protegen y validan.
 6. **Explora otros módulos de rutas**: Aplica lo aprendido a otras funcionalidades.
 ### Preguntas frecuentes
 **¿Cómo funciona el login?**
 1. Usuario envía email + password
 2. Backend busca el usuario en BD
 3. Compara password con bcrypt
 4. Genera un JWT con los datos del usuario
 5. Devuelve el JWT al frontend
 6. Frontend guarda el JWT y lo envía en cada petición
 **¿Cómo proteger una ruta?**
 ```javascript
 router.get('/perfil', requireAuth, async (req, res) => {
  // requireAuth verifica el JWT antes de ejecutar esto
  const userId = req.user.id_usuario;
  // ...
 });
 ```
 **¿Cómo validar datos?**
 ```javascript
 const miValidator = [
  body('email').isEmail(),
  body('edad').isInt({ min: 18 })
 ];
 router.post('/ruta', miValidator, handleValidation, async (req, res) => {
  // Si llega aquí, los datos ya están validados
 });
 ```
 ---
 ## Buenas Prácticas Implementadas
 1. **Seguridad:**
   - Contraseñas hasheadas con bcrypt
   - Autenticación con JWT
   - Validación de datos de entrada
   - Variables sensibles en `.env`
 2. **Código limpio:**
   - Comentarios explicativos
   - Separación de responsabilidades (rutas, middlewares, validadores)
   - Nombres descriptivos de variables y funciones
 3. **Arquitectura:**
   - Modular (cada funcionalidad en su archivo)
   - Reutilizable (middlewares, validadores)
   - Escalable (fácil agregar nuevas rutas)
 ---
 ## Autor
 Proyecto educativo desarrollado para aprendizaje de backend con Node.js y Express.
 ---
 ## Licencia
 Este es un proyecto de escuela sin licencia específica.
--- a/node_modules/.bin/bcrypt
+++ b/node_modules/.bin/bcrypt
@ -0,0 +1,16 @@
 #!/bin/sh
 basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
 case `uname` in
    *CYGWIN*|*MINGW*|*MSYS*)
        if command -v cygpath > /dev/null 2>&1; then
            basedir=`cygpath -w "$basedir"`
        fi
    ;;
 esac
 if [ -x "$basedir/node" ]; then
  exec "$basedir/node"  "$basedir/../bcryptjs/bin/bcrypt" "$@"
 else 
  exec node  "$basedir/../bcryptjs/bin/bcrypt" "$@"
 fi
--- a/node_modules/.bin/bcrypt.cmd
+++ b/node_modules/.bin/bcrypt.cmd
@ -0,0 +1,17 @@
@ECHO off
 GOTO start
 :find_dp0
 SET dp0=%~dp0
 EXIT /b
 :start
 SETLOCAL
 CALL :find_dp0
 IF EXIST "%dp0%\node.exe" (
  SET "_prog=%dp0%\node.exe"
 ) ELSE (
  SET "_prog=node"
  SET PATHEXT=%PATHEXT:;.JS;=;%
 )
 endLocal & goto #_undefined_# 2>NUL || title %COMSPEC% & "%_prog%"  "%dp0%\..\bcryptjs\bin\bcrypt" %*
--- a/node_modules/.bin/bcrypt.ps1
+++ b/node_modules/.bin/bcrypt.ps1
@ -0,0 +1,28 @@
 #!/usr/bin/env pwsh
 $basedir=Split-Path $MyInvocation.MyCommand.Definition -Parent
 $exe=""
 if ($PSVersionTable.PSVersion -lt "6.0" -or $IsWindows) {
  # Fix case when both the Windows and Linux builds of Node
  # are installed in the same directory
  $exe=".exe"
 }
 $ret=0
 if (Test-Path "$basedir/node$exe") {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "$basedir/node$exe"  "$basedir/../bcryptjs/bin/bcrypt" $args
  } else {
    & "$basedir/node$exe"  "$basedir/../bcryptjs/bin/bcrypt" $args
  }
  $ret=$LASTEXITCODE
 } else {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "node$exe"  "$basedir/../bcryptjs/bin/bcrypt" $args
  } else {
    & "node$exe"  "$basedir/../bcryptjs/bin/bcrypt" $args
  }
  $ret=$LASTEXITCODE
 }
 exit $ret
--- a/node_modules/.bin/nodemon
+++ b/node_modules/.bin/nodemon
@ -0,0 +1,16 @@
 #!/bin/sh
 basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
 case `uname` in
    *CYGWIN*|*MINGW*|*MSYS*)
        if command -v cygpath > /dev/null 2>&1; then
            basedir=`cygpath -w "$basedir"`
        fi
    ;;
 esac
 if [ -x "$basedir/node" ]; then
  exec "$basedir/node"  "$basedir/../nodemon/bin/nodemon.js" "$@"
 else 
  exec node  "$basedir/../nodemon/bin/nodemon.js" "$@"
 fi
--- a/node_modules/.bin/nodemon.cmd
+++ b/node_modules/.bin/nodemon.cmd
@ -0,0 +1,17 @@
@ECHO off
 GOTO start
 :find_dp0
 SET dp0=%~dp0
 EXIT /b
 :start
 SETLOCAL
 CALL :find_dp0
 IF EXIST "%dp0%\node.exe" (
  SET "_prog=%dp0%\node.exe"
 ) ELSE (
  SET "_prog=node"
  SET PATHEXT=%PATHEXT:;.JS;=;%
 )
 endLocal & goto #_undefined_# 2>NUL || title %COMSPEC% & "%_prog%"  "%dp0%\..\nodemon\bin\nodemon.js" %*
--- a/node_modules/.bin/nodemon.ps1
+++ b/node_modules/.bin/nodemon.ps1
@ -0,0 +1,28 @@
 #!/usr/bin/env pwsh
 $basedir=Split-Path $MyInvocation.MyCommand.Definition -Parent
 $exe=""
 if ($PSVersionTable.PSVersion -lt "6.0" -or $IsWindows) {
  # Fix case when both the Windows and Linux builds of Node
  # are installed in the same directory
  $exe=".exe"
 }
 $ret=0
 if (Test-Path "$basedir/node$exe") {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "$basedir/node$exe"  "$basedir/../nodemon/bin/nodemon.js" $args
  } else {
    & "$basedir/node$exe"  "$basedir/../nodemon/bin/nodemon.js" $args
  }
  $ret=$LASTEXITCODE
 } else {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "node$exe"  "$basedir/../nodemon/bin/nodemon.js" $args
  } else {
    & "node$exe"  "$basedir/../nodemon/bin/nodemon.js" $args
  }
  $ret=$LASTEXITCODE
 }
 exit $ret
--- a/node_modules/.bin/nodetouch
+++ b/node_modules/.bin/nodetouch
@ -0,0 +1,16 @@
 #!/bin/sh
 basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
 case `uname` in
    *CYGWIN*|*MINGW*|*MSYS*)
        if command -v cygpath > /dev/null 2>&1; then
            basedir=`cygpath -w "$basedir"`
        fi
    ;;
 esac
 if [ -x "$basedir/node" ]; then
  exec "$basedir/node"  "$basedir/../touch/bin/nodetouch.js" "$@"
 else 
  exec node  "$basedir/../touch/bin/nodetouch.js" "$@"
 fi
--- a/node_modules/.bin/nodetouch.cmd
+++ b/node_modules/.bin/nodetouch.cmd
@ -0,0 +1,17 @@
@ECHO off
 GOTO start
 :find_dp0
 SET dp0=%~dp0
 EXIT /b
 :start
 SETLOCAL
 CALL :find_dp0
 IF EXIST "%dp0%\node.exe" (
  SET "_prog=%dp0%\node.exe"
 ) ELSE (
  SET "_prog=node"
  SET PATHEXT=%PATHEXT:;.JS;=;%
 )
 endLocal & goto #_undefined_# 2>NUL || title %COMSPEC% & "%_prog%"  "%dp0%\..\touch\bin\nodetouch.js" %*
--- a/node_modules/.bin/nodetouch.ps1
+++ b/node_modules/.bin/nodetouch.ps1
@ -0,0 +1,28 @@
 #!/usr/bin/env pwsh
 $basedir=Split-Path $MyInvocation.MyCommand.Definition -Parent
 $exe=""
 if ($PSVersionTable.PSVersion -lt "6.0" -or $IsWindows) {
  # Fix case when both the Windows and Linux builds of Node
  # are installed in the same directory
  $exe=".exe"
 }
 $ret=0
 if (Test-Path "$basedir/node$exe") {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "$basedir/node$exe"  "$basedir/../touch/bin/nodetouch.js" $args
  } else {
    & "$basedir/node$exe"  "$basedir/../touch/bin/nodetouch.js" $args
  }
  $ret=$LASTEXITCODE
 } else {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "node$exe"  "$basedir/../touch/bin/nodetouch.js" $args
  } else {
    & "node$exe"  "$basedir/../touch/bin/nodetouch.js" $args
  }
  $ret=$LASTEXITCODE
 }
 exit $ret
--- a/node_modules/.bin/semver
+++ b/node_modules/.bin/semver
@ -0,0 +1,16 @@
 #!/bin/sh
 basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
 case `uname` in
    *CYGWIN*|*MINGW*|*MSYS*)
        if command -v cygpath > /dev/null 2>&1; then
            basedir=`cygpath -w "$basedir"`
        fi
    ;;
 esac
 if [ -x "$basedir/node" ]; then
  exec "$basedir/node"  "$basedir/../semver/bin/semver.js" "$@"
 else 
  exec node  "$basedir/../semver/bin/semver.js" "$@"
 fi
--- a/node_modules/.bin/semver.cmd
+++ b/node_modules/.bin/semver.cmd
@ -0,0 +1,17 @@
@ECHO off
 GOTO start
 :find_dp0
 SET dp0=%~dp0
 EXIT /b
 :start
 SETLOCAL
 CALL :find_dp0
 IF EXIST "%dp0%\node.exe" (
  SET "_prog=%dp0%\node.exe"
 ) ELSE (
  SET "_prog=node"
  SET PATHEXT=%PATHEXT:;.JS;=;%
 )
 endLocal & goto #_undefined_# 2>NUL || title %COMSPEC% & "%_prog%"  "%dp0%\..\semver\bin\semver.js" %*
--- a/node_modules/.bin/semver.ps1
+++ b/node_modules/.bin/semver.ps1
@ -0,0 +1,28 @@
 #!/usr/bin/env pwsh
 $basedir=Split-Path $MyInvocation.MyCommand.Definition -Parent
 $exe=""
 if ($PSVersionTable.PSVersion -lt "6.0" -or $IsWindows) {
  # Fix case when both the Windows and Linux builds of Node
  # are installed in the same directory
  $exe=".exe"
 }
 $ret=0
 if (Test-Path "$basedir/node$exe") {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "$basedir/node$exe"  "$basedir/../semver/bin/semver.js" $args
  } else {
    & "$basedir/node$exe"  "$basedir/../semver/bin/semver.js" $args
  }
  $ret=$LASTEXITCODE
 } else {
  # Support pipeline input
  if ($MyInvocation.ExpectingInput) {
    $input | & "node$exe"  "$basedir/../semver/bin/semver.js" $args
  } else {
    & "node$exe"  "$basedir/../semver/bin/semver.js" $args
  }
  $ret=$LASTEXITCODE
 }
 exit $ret
--- a/node_modules/.package-lock.json
+++ b/node_modules/.package-lock.json
--- a/node_modules/accepts/HISTORY.md
+++ b/node_modules/accepts/HISTORY.md
@ -0,0 +1,250 @@
 2.0.0 / 2024-08-31
 ==================
  * Drop node <18 support
  * deps: mime-types@^3.0.0
  * deps: negotiator@^1.0.0
 1.3.8 / 2022-02-02
 ==================
  * deps: mime-types@~2.1.34
    - deps: mime-db@~1.51.0
  * deps: negotiator@0.6.3
 1.3.7 / 2019-04-29
 ==================
  * deps: negotiator@0.6.2
    - Fix sorting charset, encoding, and language with extra parameters
 1.3.6 / 2019-04-28
 ==================
  * deps: mime-types@~2.1.24
    - deps: mime-db@~1.40.0
 1.3.5 / 2018-02-28
 ==================
  * deps: mime-types@~2.1.18
    - deps: mime-db@~1.33.0
 1.3.4 / 2017-08-22
 ==================
  * deps: mime-types@~2.1.16
    - deps: mime-db@~1.29.0
 1.3.3 / 2016-05-02
 ==================
  * deps: mime-types@~2.1.11
    - deps: mime-db@~1.23.0
  * deps: negotiator@0.6.1
    - perf: improve `Accept` parsing speed
    - perf: improve `Accept-Charset` parsing speed
    - perf: improve `Accept-Encoding` parsing speed
    - perf: improve `Accept-Language` parsing speed
 1.3.2 / 2016-03-08
 ==================
  * deps: mime-types@~2.1.10
    - Fix extension of `application/dash+xml`
    - Update primary extension for `audio/mp4`
    - deps: mime-db@~1.22.0
 1.3.1 / 2016-01-19
 ==================
  * deps: mime-types@~2.1.9
    - deps: mime-db@~1.21.0
 1.3.0 / 2015-09-29
 ==================
  * deps: mime-types@~2.1.7
    - deps: mime-db@~1.19.0
  * deps: negotiator@0.6.0
    - Fix including type extensions in parameters in `Accept` parsing
    - Fix parsing `Accept` parameters with quoted equals
    - Fix parsing `Accept` parameters with quoted semicolons
    - Lazy-load modules from main entry point
    - perf: delay type concatenation until needed
    - perf: enable strict mode
    - perf: hoist regular expressions
    - perf: remove closures getting spec properties
    - perf: remove a closure from media type parsing
    - perf: remove property delete from media type parsing
 1.2.13 / 2015-09-06
 ===================
  * deps: mime-types@~2.1.6
    - deps: mime-db@~1.18.0
 1.2.12 / 2015-07-30
 ===================
  * deps: mime-types@~2.1.4
    - deps: mime-db@~1.16.0
 1.2.11 / 2015-07-16
 ===================
  * deps: mime-types@~2.1.3
    - deps: mime-db@~1.15.0
 1.2.10 / 2015-07-01
 ===================
  * deps: mime-types@~2.1.2
    - deps: mime-db@~1.14.0
 1.2.9 / 2015-06-08
 ==================
  * deps: mime-types@~2.1.1
    - perf: fix deopt during mapping
 1.2.8 / 2015-06-07
 ==================
  * deps: mime-types@~2.1.0
    - deps: mime-db@~1.13.0
  * perf: avoid argument reassignment & argument slice
  * perf: avoid negotiator recursive construction
  * perf: enable strict mode
  * perf: remove unnecessary bitwise operator
 1.2.7 / 2015-05-10
 ==================
  * deps: negotiator@0.5.3
    - Fix media type parameter matching to be case-insensitive
 1.2.6 / 2015-05-07
 ==================
  * deps: mime-types@~2.0.11
    - deps: mime-db@~1.9.1
  * deps: negotiator@0.5.2
    - Fix comparing media types with quoted values
    - Fix splitting media types with quoted commas
 1.2.5 / 2015-03-13
 ==================
  * deps: mime-types@~2.0.10
    - deps: mime-db@~1.8.0
 1.2.4 / 2015-02-14
 ==================
  * Support Node.js 0.6
  * deps: mime-types@~2.0.9
    - deps: mime-db@~1.7.0
  * deps: negotiator@0.5.1
    - Fix preference sorting to be stable for long acceptable lists
 1.2.3 / 2015-01-31
 ==================
  * deps: mime-types@~2.0.8
    - deps: mime-db@~1.6.0
 1.2.2 / 2014-12-30
 ==================
  * deps: mime-types@~2.0.7
    - deps: mime-db@~1.5.0
 1.2.1 / 2014-12-30
 ==================
  * deps: mime-types@~2.0.5
    - deps: mime-db@~1.3.1
 1.2.0 / 2014-12-19
 ==================
  * deps: negotiator@0.5.0
    - Fix list return order when large accepted list
    - Fix missing identity encoding when q=0 exists
    - Remove dynamic building of Negotiator class
 1.1.4 / 2014-12-10
 ==================
  * deps: mime-types@~2.0.4
    - deps: mime-db@~1.3.0
 1.1.3 / 2014-11-09
 ==================
  * deps: mime-types@~2.0.3
    - deps: mime-db@~1.2.0
 1.1.2 / 2014-10-14
 ==================
  * deps: negotiator@0.4.9
    - Fix error when media type has invalid parameter
 1.1.1 / 2014-09-28
 ==================
  * deps: mime-types@~2.0.2
    - deps: mime-db@~1.1.0
  * deps: negotiator@0.4.8
    - Fix all negotiations to be case-insensitive
    - Stable sort preferences of same quality according to client order
 1.1.0 / 2014-09-02
 ==================
  * update `mime-types`
 1.0.7 / 2014-07-04
 ==================
  * Fix wrong type returned from `type` when match after unknown extension
 1.0.6 / 2014-06-24
 ==================
  * deps: negotiator@0.4.7
 1.0.5 / 2014-06-20
 ==================
 * fix crash when unknown extension given
 1.0.4 / 2014-06-19
 ==================
  * use `mime-types`
 1.0.3 / 2014-06-11
 ==================
  * deps: negotiator@0.4.6
    - Order by specificity when quality is the same
 1.0.2 / 2014-05-29
 ==================
  * Fix interpretation when header not in request
  * deps: pin negotiator@0.4.5
 1.0.1 / 2014-01-18
 ==================
  * Identity encoding isn't always acceptable
  * deps: negotiator@~0.4.0
 1.0.0 / 2013-12-27
 ==================
  * Genesis
--- a/node_modules/accepts/LICENSE
+++ b/node_modules/accepts/LICENSE
@ -0,0 +1,23 @@
 (The MIT License)
 Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
 Copyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
 'Software'), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish,
 distribute, sublicense, and/or sell copies of the Software, and to
 permit persons to whom the Software is furnished to do so, subject to
 the following conditions:
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
--- a/node_modules/accepts/README.md
+++ b/node_modules/accepts/README.md
@ -0,0 +1,140 @@
 # accepts
 [![NPM Version][npm-version-image]][npm-url]
 [![NPM Downloads][npm-downloads-image]][npm-url]
 [![Node.js Version][node-version-image]][node-version-url]
 [![Build Status][github-actions-ci-image]][github-actions-ci-url]
 [![Test Coverage][coveralls-image]][coveralls-url]
 Higher level content negotiation based on [negotiator](https://www.npmjs.com/package/negotiator).
 Extracted from [koa](https://www.npmjs.com/package/koa) for general use.
 In addition to negotiator, it allows:
 - Allows types as an array or arguments list, ie `(['text/html', 'application/json'])`
  as well as `('text/html', 'application/json')`.
 - Allows type shorthands such as `json`.
 - Returns `false` when no types match
 - Treats non-existent headers as `*`
 ## Installation
 This is a [Node.js](https://nodejs.org/en/) module available through the
 [npm registry](https://www.npmjs.com/). Installation is done using the
 [`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally):
 ```sh
 $ npm install accepts
 ```
 ## API
 ```js
 var accepts = require('accepts')
 ```
 ### accepts(req)
 Create a new `Accepts` object for the given `req`.
 #### .charset(charsets)
 Return the first accepted charset. If nothing in `charsets` is accepted,
 then `false` is returned.
 #### .charsets()
 Return the charsets that the request accepts, in the order of the client's
 preference (most preferred first).
 #### .encoding(encodings)
 Return the first accepted encoding. If nothing in `encodings` is accepted,
 then `false` is returned.
 #### .encodings()
 Return the encodings that the request accepts, in the order of the client's
 preference (most preferred first).
 #### .language(languages)
 Return the first accepted language. If nothing in `languages` is accepted,
 then `false` is returned.
 #### .languages()
 Return the languages that the request accepts, in the order of the client's
 preference (most preferred first).
 #### .type(types)
 Return the first accepted type (and it is returned as the same text as what
 appears in the `types` array). If nothing in `types` is accepted, then `false`
 is returned.
 The `types` array can contain full MIME types or file extensions. Any value
 that is not a full MIME type is passed to `require('mime-types').lookup`.
 #### .types()
 Return the types that the request accepts, in the order of the client's
 preference (most preferred first).
 ## Examples
 ### Simple type negotiation
 This simple example shows how to use `accepts` to return a different typed
 respond body based on what the client wants to accept. The server lists it's
 preferences in order and will get back the best match between the client and
 server.
 ```js
 var accepts = require('accepts')
 var http = require('http')
 function app (req, res) {
  var accept = accepts(req)
  // the order of this list is significant; should be server preferred order
  switch (accept.type(['json', 'html'])) {
    case 'json':
      res.setHeader('Content-Type', 'application/json')
      res.write('{"hello":"world!"}')
      break
    case 'html':
      res.setHeader('Content-Type', 'text/html')
      res.write('<b>hello, world!</b>')
      break
    default:
      // the fallback is text/plain, so no need to specify it above
      res.setHeader('Content-Type', 'text/plain')
      res.write('hello, world!')
      break
  }
  res.end()
 }
 http.createServer(app).listen(3000)
 ```
 You can test this out with the cURL program:
 ```sh
 curl -I -H'Accept: text/html' http://localhost:3000/
 ```
 ## License
 [MIT](LICENSE)
 [coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/accepts/master
 [coveralls-url]: https://coveralls.io/r/jshttp/accepts?branch=master
 [github-actions-ci-image]: https://badgen.net/github/checks/jshttp/accepts/master?label=ci
 [github-actions-ci-url]: https://github.com/jshttp/accepts/actions/workflows/ci.yml
 [node-version-image]: https://badgen.net/npm/node/accepts
 [node-version-url]: https://nodejs.org/en/download
 [npm-downloads-image]: https://badgen.net/npm/dm/accepts
 [npm-url]: https://npmjs.org/package/accepts
 [npm-version-image]: https://badgen.net/npm/v/accepts
--- a/node_modules/accepts/index.js
+++ b/node_modules/accepts/index.js
@ -0,0 +1,238 @@
 /*!
 * accepts
 * Copyright(c) 2014 Jonathan Ong
 * Copyright(c) 2015 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * Module dependencies.
 * @private
 */
 var Negotiator = require('negotiator')
 var mime = require('mime-types')
 /**
 * Module exports.
 * @public
 */
 module.exports = Accepts
 /**
 * Create a new Accepts object for the given req.
 *
 * @param {object} req
 * @public
 */
 function Accepts (req) {
  if (!(this instanceof Accepts)) {
    return new Accepts(req)
  }
  this.headers = req.headers
  this.negotiator = new Negotiator(req)
 }
 /**
 * Check if the given `type(s)` is acceptable, returning
 * the best match when true, otherwise `undefined`, in which
 * case you should respond with 406 "Not Acceptable".
 *
 * The `type` value may be a single mime type string
 * such as "application/json", the extension name
 * such as "json" or an array `["json", "html", "text/plain"]`. When a list
 * or array is given the _best_ match, if any is returned.
 *
 * Examples:
 *
 *     // Accept: text/html
 *     this.types('html');
 *     // => "html"
 *
 *     // Accept: text/*, application/json
 *     this.types('html');
 *     // => "html"
 *     this.types('text/html');
 *     // => "text/html"
 *     this.types('json', 'text');
 *     // => "json"
 *     this.types('application/json');
 *     // => "application/json"
 *
 *     // Accept: text/*, application/json
 *     this.types('image/png');
 *     this.types('png');
 *     // => undefined
 *
 *     // Accept: text/*;q=.5, application/json
 *     this.types(['html', 'json']);
 *     this.types('html', 'json');
 *     // => "json"
 *
 * @param {String|Array} types...
 * @return {String|Array|Boolean}
 * @public
 */
 Accepts.prototype.type =
 Accepts.prototype.types = function (types_) {
  var types = types_
  // support flattened arguments
  if (types && !Array.isArray(types)) {
    types = new Array(arguments.length)
    for (var i = 0; i < types.length; i++) {
      types[i] = arguments[i]
    }
  }
  // no types, return all requested types
  if (!types || types.length === 0) {
    return this.negotiator.mediaTypes()
  }
  // no accept header, return first given type
  if (!this.headers.accept) {
    return types[0]
  }
  var mimes = types.map(extToMime)
  var accepts = this.negotiator.mediaTypes(mimes.filter(validMime))
  var first = accepts[0]
  return first
    ? types[mimes.indexOf(first)]
    : false
 }
 /**
 * Return accepted encodings or best fit based on `encodings`.
 *
 * Given `Accept-Encoding: gzip, deflate`
 * an array sorted by quality is returned:
 *
 *     ['gzip', 'deflate']
 *
 * @param {String|Array} encodings...
 * @return {String|Array}
 * @public
 */
 Accepts.prototype.encoding =
 Accepts.prototype.encodings = function (encodings_) {
  var encodings = encodings_
  // support flattened arguments
  if (encodings && !Array.isArray(encodings)) {
    encodings = new Array(arguments.length)
    for (var i = 0; i < encodings.length; i++) {
      encodings[i] = arguments[i]
    }
  }
  // no encodings, return all requested encodings
  if (!encodings || encodings.length === 0) {
    return this.negotiator.encodings()
  }
  return this.negotiator.encodings(encodings)[0] || false
 }
 /**
 * Return accepted charsets or best fit based on `charsets`.
 *
 * Given `Accept-Charset: utf-8, iso-8859-1;q=0.2, utf-7;q=0.5`
 * an array sorted by quality is returned:
 *
 *     ['utf-8', 'utf-7', 'iso-8859-1']
 *
 * @param {String|Array} charsets...
 * @return {String|Array}
 * @public
 */
 Accepts.prototype.charset =
 Accepts.prototype.charsets = function (charsets_) {
  var charsets = charsets_
  // support flattened arguments
  if (charsets && !Array.isArray(charsets)) {
    charsets = new Array(arguments.length)
    for (var i = 0; i < charsets.length; i++) {
      charsets[i] = arguments[i]
    }
  }
  // no charsets, return all requested charsets
  if (!charsets || charsets.length === 0) {
    return this.negotiator.charsets()
  }
  return this.negotiator.charsets(charsets)[0] || false
 }
 /**
 * Return accepted languages or best fit based on `langs`.
 *
 * Given `Accept-Language: en;q=0.8, es, pt`
 * an array sorted by quality is returned:
 *
 *     ['es', 'pt', 'en']
 *
 * @param {String|Array} langs...
 * @return {Array|String}
 * @public
 */
 Accepts.prototype.lang =
 Accepts.prototype.langs =
 Accepts.prototype.language =
 Accepts.prototype.languages = function (languages_) {
  var languages = languages_
  // support flattened arguments
  if (languages && !Array.isArray(languages)) {
    languages = new Array(arguments.length)
    for (var i = 0; i < languages.length; i++) {
      languages[i] = arguments[i]
    }
  }
  // no languages, return all requested languages
  if (!languages || languages.length === 0) {
    return this.negotiator.languages()
  }
  return this.negotiator.languages(languages)[0] || false
 }
 /**
 * Convert extnames to mime.
 *
 * @param {String} type
 * @return {String}
 * @private
 */
 function extToMime (type) {
  return type.indexOf('/') === -1
    ? mime.lookup(type)
    : type
 }
 /**
 * Check if mime is valid.
 *
 * @param {String} type
 * @return {Boolean}
 * @private
 */
 function validMime (type) {
  return typeof type === 'string'
 }
--- a/node_modules/accepts/package.json
+++ b/node_modules/accepts/package.json
@ -0,0 +1,47 @@
 {
  "name": "accepts",
  "description": "Higher-level content negotiation",
  "version": "2.0.0",
  "contributors": [
    "Douglas Christopher Wilson <doug@somethingdoug.com>",
    "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
  ],
  "license": "MIT",
  "repository": "jshttp/accepts",
  "dependencies": {
    "mime-types": "^3.0.0",
    "negotiator": "^1.0.0"
  },
  "devDependencies": {
    "deep-equal": "1.0.1",
    "eslint": "7.32.0",
    "eslint-config-standard": "14.1.1",
    "eslint-plugin-import": "2.25.4",
    "eslint-plugin-markdown": "2.2.1",
    "eslint-plugin-node": "11.1.0",
    "eslint-plugin-promise": "4.3.1",
    "eslint-plugin-standard": "4.1.0",
    "mocha": "9.2.0",
    "nyc": "15.1.0"
  },
  "files": [
    "LICENSE",
    "HISTORY.md",
    "index.js"
  ],
  "engines": {
    "node": ">= 0.6"
  },
  "scripts": {
    "lint": "eslint .",
    "test": "mocha --reporter spec --check-leaks --bail test/",
    "test-ci": "nyc --reporter=lcov --reporter=text npm test",
    "test-cov": "nyc --reporter=html --reporter=text npm test"
  },
  "keywords": [
    "content",
    "negotiation",
    "accept",
    "accepts"
  ]
 }
--- a/node_modules/anymatch/LICENSE
+++ b/node_modules/anymatch/LICENSE
@ -0,0 +1,15 @@
 The ISC License
 Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)
 Permission to use, copy, modify, and/or distribute this software for any
 purpose with or without fee is hereby granted, provided that the above
 copyright notice and this permission notice appear in all copies.
 THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
 IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
--- a/node_modules/anymatch/README.md
+++ b/node_modules/anymatch/README.md
@ -0,0 +1,87 @@
 anymatch [![Build Status](https://travis-ci.org/micromatch/anymatch.svg?branch=master)](https://travis-ci.org/micromatch/anymatch) [![Coverage Status](https://img.shields.io/coveralls/micromatch/anymatch.svg?branch=master)](https://coveralls.io/r/micromatch/anymatch?branch=master)
 ======
 Javascript module to match a string against a regular expression, glob, string,
 or function that takes the string as an argument and returns a truthy or falsy
 value. The matcher can also be an array of any or all of these. Useful for
 allowing a very flexible user-defined config to define things like file paths.
 __Note: This module has Bash-parity, please be aware that Windows-style backslashes are not supported as separators. See https://github.com/micromatch/micromatch#backslashes for more information.__
 Usage
 -----
 ```sh
 npm install anymatch
 ```
 #### anymatch(matchers, testString, [returnIndex], [options])
 * __matchers__: (_Array|String|RegExp|Function_)
 String to be directly matched, string with glob patterns, regular expression
 test, function that takes the testString as an argument and returns a truthy
 value if it should be matched, or an array of any number and mix of these types.
 * __testString__: (_String|Array_) The string to test against the matchers. If
 passed as an array, the first element of the array will be used as the
 `testString` for non-function matchers, while the entire array will be applied
 as the arguments for function matchers.
 * __options__: (_Object_ [optional]_) Any of the [picomatch](https://github.com/micromatch/picomatch#options) options.
    * __returnIndex__: (_Boolean [optional]_) If true, return the array index of
 the first matcher that that testString matched, or -1 if no match, instead of a
 boolean result.
 ```js
 const anymatch = require('anymatch');
 const matchers = [ 'path/to/file.js', 'path/anyjs/**/*.js', /foo.js$/, string => string.includes('bar') && string.length > 10 ] ;
 anymatch(matchers, 'path/to/file.js'); // true
 anymatch(matchers, 'path/anyjs/baz.js'); // true
 anymatch(matchers, 'path/to/foo.js'); // true
 anymatch(matchers, 'path/to/bar.js'); // true
 anymatch(matchers, 'bar.js'); // false
 // returnIndex = true
 anymatch(matchers, 'foo.js', {returnIndex: true}); // 2
 anymatch(matchers, 'path/anyjs/foo.js', {returnIndex: true}); // 1
 // any picomatc
 // using globs to match directories and their children
 anymatch('node_modules', 'node_modules'); // true
 anymatch('node_modules', 'node_modules/somelib/index.js'); // false
 anymatch('node_modules/**', 'node_modules/somelib/index.js'); // true
 anymatch('node_modules/**', '/absolute/path/to/node_modules/somelib/index.js'); // false
 anymatch('**/node_modules/**', '/absolute/path/to/node_modules/somelib/index.js'); // true
 const matcher = anymatch(matchers);
 ['foo.js', 'bar.js'].filter(matcher);  // [ 'foo.js' ]
 anymatch master* ❯
 ```
 #### anymatch(matchers)
 You can also pass in only your matcher(s) to get a curried function that has
 already been bound to the provided matching criteria. This can be used as an
 `Array#filter` callback.
 ```js
 var matcher = anymatch(matchers);
 matcher('path/to/file.js'); // true
 matcher('path/anyjs/baz.js', true); // 1
 ['foo.js', 'bar.js'].filter(matcher); // ['foo.js']
 ```
 Changelog
 ----------
 [See release notes page on GitHub](https://github.com/micromatch/anymatch/releases)
 - **v3.0:** Removed `startIndex` and `endIndex` arguments. Node 8.x-only.
 - **v2.0:** [micromatch](https://github.com/jonschlinkert/micromatch) moves away from minimatch-parity and inline with Bash. This includes handling backslashes differently (see https://github.com/micromatch/micromatch#backslashes for more information).
 - **v1.2:** anymatch uses [micromatch](https://github.com/jonschlinkert/micromatch)
 for glob pattern matching. Issues with glob pattern matching should be
 reported directly to the [micromatch issue tracker](https://github.com/jonschlinkert/micromatch/issues).
 License
 -------
 [ISC](https://raw.github.com/micromatch/anymatch/master/LICENSE)
--- a/node_modules/anymatch/index.d.ts
+++ b/node_modules/anymatch/index.d.ts
@ -0,0 +1,20 @@
 type AnymatchFn = (testString: string) => boolean;
 type AnymatchPattern = string|RegExp|AnymatchFn;
 type AnymatchMatcher = AnymatchPattern|AnymatchPattern[]
 type AnymatchTester = {
  (testString: string|any[], returnIndex: true): number;
  (testString: string|any[]): boolean;
 }
 type PicomatchOptions = {dot: boolean};
 declare const anymatch: {
  (matchers: AnymatchMatcher): AnymatchTester;
  (matchers: AnymatchMatcher, testString: null, returnIndex: true | PicomatchOptions): AnymatchTester;
  (matchers: AnymatchMatcher, testString: string|any[], returnIndex: true | PicomatchOptions): number;
  (matchers: AnymatchMatcher, testString: string|any[]): boolean;
 }
 export {AnymatchMatcher as Matcher}
 export {AnymatchTester as Tester}
 export default anymatch
--- a/node_modules/anymatch/index.js
+++ b/node_modules/anymatch/index.js
@ -0,0 +1,104 @@
 'use strict';
 Object.defineProperty(exports, "__esModule", { value: true });
 const picomatch = require('picomatch');
 const normalizePath = require('normalize-path');
 /**
 * @typedef {(testString: string) => boolean} AnymatchFn
 * @typedef {string|RegExp|AnymatchFn} AnymatchPattern
 * @typedef {AnymatchPattern|AnymatchPattern[]} AnymatchMatcher
 */
 const BANG = '!';
 const DEFAULT_OPTIONS = {returnIndex: false};
 const arrify = (item) => Array.isArray(item) ? item : [item];
 /**
 * @param {AnymatchPattern} matcher
 * @param {object} options
 * @returns {AnymatchFn}
 */
 const createPattern = (matcher, options) => {
  if (typeof matcher === 'function') {
    return matcher;
  }
  if (typeof matcher === 'string') {
    const glob = picomatch(matcher, options);
    return (string) => matcher === string || glob(string);
  }
  if (matcher instanceof RegExp) {
    return (string) => matcher.test(string);
  }
  return (string) => false;
 };
 /**
 * @param {Array<Function>} patterns
 * @param {Array<Function>} negPatterns
 * @param {String|Array} args
 * @param {Boolean} returnIndex
 * @returns {boolean|number}
 */
 const matchPatterns = (patterns, negPatterns, args, returnIndex) => {
  const isList = Array.isArray(args);
  const _path = isList ? args[0] : args;
  if (!isList && typeof _path !== 'string') {
    throw new TypeError('anymatch: second argument must be a string: got ' +
      Object.prototype.toString.call(_path))
  }
  const path = normalizePath(_path, false);
  for (let index = 0; index < negPatterns.length; index++) {
    const nglob = negPatterns[index];
    if (nglob(path)) {
      return returnIndex ? -1 : false;
    }
  }
  const applied = isList && [path].concat(args.slice(1));
  for (let index = 0; index < patterns.length; index++) {
    const pattern = patterns[index];
    if (isList ? pattern(...applied) : pattern(path)) {
      return returnIndex ? index : true;
    }
  }
  return returnIndex ? -1 : false;
 };
 /**
 * @param {AnymatchMatcher} matchers
 * @param {Array|string} testString
 * @param {object} options
 * @returns {boolean|number|Function}
 */
 const anymatch = (matchers, testString, options = DEFAULT_OPTIONS) => {
  if (matchers == null) {
    throw new TypeError('anymatch: specify first argument');
  }
  const opts = typeof options === 'boolean' ? {returnIndex: options} : options;
  const returnIndex = opts.returnIndex || false;
  // Early cache for matchers.
  const mtchers = arrify(matchers);
  const negatedGlobs = mtchers
    .filter(item => typeof item === 'string' && item.charAt(0) === BANG)
    .map(item => item.slice(1))
    .map(item => picomatch(item, opts));
  const patterns = mtchers
    .filter(item => typeof item !== 'string' || (typeof item === 'string' && item.charAt(0) !== BANG))
    .map(matcher => createPattern(matcher, opts));
  if (testString == null) {
    return (testString, ri = false) => {
      const returnIndex = typeof ri === 'boolean' ? ri : false;
      return matchPatterns(patterns, negatedGlobs, testString, returnIndex);
    }
  }
  return matchPatterns(patterns, negatedGlobs, testString, returnIndex);
 };
 anymatch.default = anymatch;
 module.exports = anymatch;
--- a/node_modules/anymatch/package.json
+++ b/node_modules/anymatch/package.json
@ -0,0 +1,48 @@
 {
  "name": "anymatch",
  "version": "3.1.3",
  "description": "Matches strings against configurable strings, globs, regular expressions, and/or functions",
  "files": [
    "index.js",
    "index.d.ts"
  ],
  "dependencies": {
    "normalize-path": "^3.0.0",
    "picomatch": "^2.0.4"
  },
  "author": {
    "name": "Elan Shanker",
    "url": "https://github.com/es128"
  },
  "license": "ISC",
  "homepage": "https://github.com/micromatch/anymatch",
  "repository": {
    "type": "git",
    "url": "https://github.com/micromatch/anymatch"
  },
  "keywords": [
    "match",
    "any",
    "string",
    "file",
    "fs",
    "list",
    "glob",
    "regex",
    "regexp",
    "regular",
    "expression",
    "function"
  ],
  "scripts": {
    "test": "nyc mocha",
    "mocha": "mocha"
  },
  "devDependencies": {
    "mocha": "^6.1.3",
    "nyc": "^14.0.0"
  },
  "engines": {
    "node": ">= 8"
  }
 }
--- a/node_modules/aws-ssl-profiles/LICENSE
+++ b/node_modules/aws-ssl-profiles/LICENSE
@ -0,0 +1,19 @@
 Copyright (c) 2024 Andrey Sidorov, Douglas Wilson, Weslley Araújo and contributors.
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
--- a/node_modules/aws-ssl-profiles/README.md
+++ b/node_modules/aws-ssl-profiles/README.md
@ -0,0 +1,146 @@
 # AWS SSL Profiles
 [**AWS RDS**](https://aws.amazon.com/rds/) **SSL** Certificates Bundles.
 **Table of Contents**
 - [Installation](#installation)
 - [Usage](#usage)
  - [**mysqljs/mysql**](#mysqljsmysql)
  - [**MySQL2**](#mysql2)
  - [**node-postgres**](#node-postgres)
  - [Custom `ssl` options](#custom-ssl-options)
 - [License](#license)
 - [Security](#security)
 - [Contributing](#contributing)
 - [Acknowledgements](#acknowledgements)
 ---
 ## Installation
 ```bash
 npm install --save aws-ssl-profiles
 ```
 ---
 ## Usage
 ### [mysqljs/mysql](https://github.com/mysqljs/mysql)
 ```js
 const mysql = require('mysql');
 const awsCaBundle = require('aws-ssl-profiles');
 // mysql connection
 const connection = mysql.createConnection({
  //...
  ssl: awsCaBundle,
 });
 // mysql connection pool
 const pool = mysql.createPool({
  //...
  ssl: awsCaBundle,
 });
 ```
 ### [MySQL2](https://github.com/sidorares/node-mysql2)
 ```js
 const mysql = require('mysql2');
 const awsCaBundle = require('aws-ssl-profiles');
 // mysql2 connection
 const connection = mysql.createConnection({
  //...
  ssl: awsCaBundle,
 });
 // mysql2 connection pool
 const pool = mysql.createPool({
  //...
  ssl: awsCaBundle,
 });
 ```
 ### [node-postgres](https://github.com/brianc/node-postgres)
 ```js
 const pg = require('pg');
 const awsCaBundle = require('aws-ssl-profiles');
 // pg connection
 const client = new pg.Client({
  // ...
  ssl: awsCaBundle,
 });
 // pg connection pool
 const pool = new pg.Pool({
  // ...
  ssl: awsCaBundle,
 });
 ```
 ### Custom `ssl` options
 Using **AWS SSL Profiles** with custom `ssl` options:
 ```js
 {
  // ...
  ssl: {
    ...awsCaBundle,
    rejectUnauthorized: true,
    // ...
  }
 }
 ```
 ```js
 {
  // ...
  ssl: {
    ca: awsCaBundle.ca,
    rejectUnauthorized: true,
    // ...
  }
 }
 ```
 ### Custom bundles
 ```js
 const { proxyBundle } = require('aws-ssl-profiles');
 {
  // ...
  ssl: proxyBundle,
 }
 ```
 ---
 ## License
 **AWS SSL Profiles** is under the [**MIT License**](./LICENSE).
 ---
 ## Security
 Please check the [**SECURITY.md**](./SECURITY.md).
 ---
 ## Contributing
 Please check the [**CONTRIBUTING.md**](./CONTRIBUTING.md) for instructions.
 ---
 ## Acknowledgements
 [**Contributors**](https://github.com/mysqljs/aws-ssl-profiles/graphs/contributors).
--- a/node_modules/aws-ssl-profiles/lib/@types/profiles.d.ts
+++ b/node_modules/aws-ssl-profiles/lib/@types/profiles.d.ts
@ -0,0 +1,4 @@
 export type CA = string[];
 export type Profiles = {
    ca: CA;
 };
--- a/node_modules/aws-ssl-profiles/lib/@types/profiles.js
+++ b/node_modules/aws-ssl-profiles/lib/@types/profiles.js
@ -0,0 +1,2 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
--- a/node_modules/aws-ssl-profiles/lib/index.d.ts
+++ b/node_modules/aws-ssl-profiles/lib/index.d.ts
@ -0,0 +1,8 @@
 import type { Profiles } from "./@types/profiles.js";
 export declare const proxyBundle: Profiles;
 declare const profiles: Profiles;
 declare module "aws-ssl-profiles" {
    const profiles: Profiles & { proxyBundle: Profiles };
    export = profiles;
 }
 export default profiles;
--- a/node_modules/aws-ssl-profiles/lib/index.js
+++ b/node_modules/aws-ssl-profiles/lib/index.js
@ -0,0 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const defaults_js_1 = require("./profiles/ca/defaults.js");
 const proxies_js_1 = require("./profiles/ca/proxies.js");
 const proxyBundle = {
    ca: proxies_js_1.proxies,
 };
 const profiles = {
    ca: [...defaults_js_1.defaults, ...proxies_js_1.proxies],
 };
 module.exports = profiles;
 module.exports.proxyBundle = proxyBundle;
 module.exports.default = profiles;
--- a/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.d.ts
+++ b/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.d.ts
@ -0,0 +1,9 @@
 import type { CA } from '../../@types/profiles.js';
 /**
 * CA Certificates for **Amazon RDS** (2024)
 *
 * - https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
 * - https://docs.amazonaws.cn/en_us/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
 * - https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.tls
 */
 export declare const defaults: CA;
--- a/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.js
+++ b/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.js
--- a/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.d.ts
+++ b/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.d.ts
@ -0,0 +1,8 @@
 import type { CA } from '../../@types/profiles.js';
 /**
 * CA Certificates for **Amazon RDS Proxy** (2024)
 *
 * - https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.howitworks.html#rds-proxy-security.tls
 * - https://www.amazontrust.com/repository/
 */
 export declare const proxies: CA;
--- a/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.js
+++ b/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.js
@ -0,0 +1,111 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.proxies = void 0;
 /**
 * CA Certificates for **Amazon RDS Proxy** (2024)
 *
 * - https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy.howitworks.html#rds-proxy-security.tls
 * - https://www.amazontrust.com/repository/
 */
 exports.proxies = [
    '-----BEGIN CERTIFICATE-----\n' +
        'MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF\n' +
        'ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6\n' +
        'b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL\n' +
        'MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv\n' +
        'b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj\n' +
        'ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM\n' +
        '9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw\n' +
        'IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6\n' +
        'VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L\n' +
        '93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm\n' +
        'jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC\n' +
        'AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA\n' +
        'A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI\n' +
        'U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs\n' +
        'N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv\n' +
        'o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU\n' +
        '5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy\n' +
        'rqXRfboQnoZsG4q5WTP468SQvvG5\n' +
        '-----END CERTIFICATE-----\n',
    '-----BEGIN CERTIFICATE-----\n' +
        'MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwF\n' +
        'ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6\n' +
        'b24gUm9vdCBDQSAyMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTEL\n' +
        'MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv\n' +
        'b3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2Wny2cSkxK\n' +
        'gXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4kHbZ\n' +
        'W0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg\n' +
        '1dKmSYXpN+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K\n' +
        '8nu+NQWpEjTj82R0Yiw9AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r\n' +
        '2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvdfLC6HM783k81ds8P+HgfajZRRidhW+me\n' +
        'z/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAExkv8LV/SasrlX6avvDXbR\n' +
        '8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSSbtqDT6Zj\n' +
        'mUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz\n' +
        '7Mt0Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6\n' +
        '+XUyo05f7O0oYtlNc/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI\n' +
        '0u1ufm8/0i2BWSlmy5A5lREedCf+3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMB\n' +
        'Af8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSwDPBMMPQFWAJI/TPlUq9LhONm\n' +
        'UjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oAA7CXDpO8Wqj2\n' +
        'LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY\n' +
        '+gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kS\n' +
        'k5Nrp+gvU5LEYFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl\n' +
        '7uxMMne0nxrpS10gxdr9HIcWxkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygm\n' +
        'btmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQgj9sAq+uEjonljYE1x2igGOpm/Hl\n' +
        'urR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbWaQbLU8uz/mtBzUF+\n' +
        'fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoVYh63\n' +
        'n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE\n' +
        '76KlXIx3KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H\n' +
        '9jVlpNMKVv/1F2Rs76giJUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT\n' +
        '4PsJYGw=\n' +
        '-----END CERTIFICATE-----\n',
    '-----BEGIN CERTIFICATE-----\n' +
        'MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5\n' +
        'MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g\n' +
        'Um9vdCBDQSAzMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG\n' +
        'A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg\n' +
        'Q0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZBf8ANm+gBG1bG8lKl\n' +
        'ui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjrZt6j\n' +
        'QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSr\n' +
        'ttvXBp43rDCGB5Fwx5zEGbF4wDAKBggqhkjOPQQDAgNJADBGAiEA4IWSoxe3jfkr\n' +
        'BqWTrBqYaGFy+uGh0PsceGCmQ5nFuMQCIQCcAu/xlJyzlvnrxir4tiz+OpAUFteM\n' +
        'YyRIHN8wfdVoOw==\n' +
        '-----END CERTIFICATE-----\n',
    '-----BEGIN CERTIFICATE-----\n' +
        'MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5\n' +
        'MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g\n' +
        'Um9vdCBDQSA0MB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG\n' +
        'A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg\n' +
        'Q0EgNDB2MBAGByqGSM49AgEGBSuBBAAiA2IABNKrijdPo1MN/sGKe0uoe0ZLY7Bi\n' +
        '9i0b2whxIdIA6GO9mif78DluXeo9pcmBqqNbIJhFXRbb/egQbeOc4OO9X4Ri83Bk\n' +
        'M6DLJC9wuoihKqB1+IGuYgbEgds5bimwHvouXKNCMEAwDwYDVR0TAQH/BAUwAwEB\n' +
        '/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNPsxzplbszh2naaVvuc84ZtV+WB\n' +
        'MAoGCCqGSM49BAMDA2gAMGUCMDqLIfG9fhGt0O9Yli/W651+kI0rz2ZVwyzjKKlw\n' +
        'CkcO8DdZEv8tmZQoTipPNU0zWgIxAOp1AE47xDqUEpHJWEadIRNyp4iciuRMStuW\n' +
        '1KyLa2tJElMzrdfkviT8tQp21KW8EA==\n' +
        '-----END CERTIFICATE-----\n',
    '-----BEGIN CERTIFICATE-----\n' +
        'MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx\n' +
        'EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT\n' +
        'HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVs\n' +
        'ZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5\n' +
        'MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgZgxCzAJBgNVBAYTAlVTMRAwDgYD\n' +
        'VQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFy\n' +
        'ZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTswOQYDVQQDEzJTdGFyZmllbGQgU2Vy\n' +
        'dmljZXMgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZI\n' +
        'hvcNAQEBBQADggEPADCCAQoCggEBANUMOsQq+U7i9b4Zl1+OiFOxHz/Lz58gE20p\n' +
        'OsgPfTz3a3Y4Y9k2YKibXlwAgLIvWX/2h/klQ4bnaRtSmpDhcePYLQ1Ob/bISdm2\n' +
        '8xpWriu2dBTrz/sm4xq6HZYuajtYlIlHVv8loJNwU4PahHQUw2eeBGg6345AWh1K\n' +
        'Ts9DkTvnVtYAcMtS7nt9rjrnvDH5RfbCYM8TWQIrgMw0R9+53pBlbQLPLJGmpufe\n' +
        'hRhJfGZOozptqbXuNC66DQO4M99H67FrjSXZm86B0UVGMpZwh94CDklDhbZsc7tk\n' +
        '6mFBrMnUVN+HL8cisibMn1lUaJ/8viovxFUcdUBgF4UCVTmLfwUCAwEAAaNCMEAw\n' +
        'DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJxfAN+q\n' +
        'AdcwKziIorhtSpzyEZGDMA0GCSqGSIb3DQEBCwUAA4IBAQBLNqaEd2ndOxmfZyMI\n' +
        'bw5hyf2E3F/YNoHN2BtBLZ9g3ccaaNnRbobhiCPPE95Dz+I0swSdHynVv/heyNXB\n' +
        've6SbzJ08pGCL72CQnqtKrcgfU28elUSwhXqvfdqlS5sdJ/PHLTyxQGjhdByPq1z\n' +
        'qwubdQxtRbeOlKyWN7Wg0I8VRw7j6IPdj/3vQQF3zCepYoUz8jcI73HPdwbeyBkd\n' +
        'iEDPfUYd/x7H4c7/I9vG+o1VTqkC50cRRj70/b17KSa7qWFiNyi2LSr2EIZkyXCn\n' +
        '0q23KXB56jzaYyWf/Wi3MOxw+3WKt21gZ7IeyLnp2KhvAotnDU0mV3HaIPzBSlCN\n' +
        'sSi6\n' +
        '-----END CERTIFICATE-----\n',
 ];
--- a/node_modules/aws-ssl-profiles/package.json
+++ b/node_modules/aws-ssl-profiles/package.json
@ -0,0 +1,52 @@
 {
  "name": "aws-ssl-profiles",
  "version": "1.1.2",
  "main": "lib/index.js",
  "author": "https://github.com/wellwelwel",
  "description": "AWS RDS SSL certificates bundles.",
  "license": "MIT",
  "repository": {
    "type": "git",
    "url": "https://github.com/mysqljs/aws-ssl-profiles"
  },
  "bugs": {
    "url": "https://github.com/mysqljs/aws-ssl-profiles/issues"
  },
  "devDependencies": {
    "@biomejs/biome": "^1.8.3",
    "@types/node": "^22.5.1",
    "@types/x509.js": "^1.0.3",
    "poku": "^2.5.0",
    "prettier": "^3.3.3",
    "tsx": "^4.19.0",
    "typescript": "^5.5.4",
    "x509.js": "^1.0.0"
  },
  "files": [
    "lib"
  ],
  "engines": {
    "node": ">= 6.0.0"
  },
  "keywords": [
    "mysql",
    "mysql2",
    "pg",
    "postgres",
    "aws",
    "rds",
    "ssl",
    "certificates",
    "ca",
    "bundle"
  ],
  "scripts": {
    "build": "npx tsc",
    "postbuild": "cp src/index.d.ts lib/index.d.ts",
    "lint": "npx @biomejs/biome lint && prettier --check .",
    "lint:fix": "npx @biomejs/biome lint --write . && prettier --write .",
    "pretest": "npm run build",
    "test": "poku --parallel ./test",
    "test:ci": "npm run lint && npm run test"
  }
 }
--- a/node_modules/balanced-match/.github/FUNDING.yml
+++ b/node_modules/balanced-match/.github/FUNDING.yml
@ -0,0 +1,2 @@
 tidelift: "npm/balanced-match"
 patreon: juliangruber
--- a/node_modules/balanced-match/LICENSE.md
+++ b/node_modules/balanced-match/LICENSE.md
@ -0,0 +1,21 @@
 (MIT)
 Copyright (c) 2013 Julian Gruber &lt;julian@juliangruber.com&gt;
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in
 the Software without restriction, including without limitation the rights to
 use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
 of the Software, and to permit persons to whom the Software is furnished to do
 so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
--- a/node_modules/balanced-match/README.md
+++ b/node_modules/balanced-match/README.md
@ -0,0 +1,97 @@
 # balanced-match
 Match balanced string pairs, like `{` and `}` or `<b>` and `</b>`. Supports regular expressions as well!
 [![build status](https://secure.travis-ci.org/juliangruber/balanced-match.svg)](http://travis-ci.org/juliangruber/balanced-match)
 [![downloads](https://img.shields.io/npm/dm/balanced-match.svg)](https://www.npmjs.org/package/balanced-match)
 [![testling badge](https://ci.testling.com/juliangruber/balanced-match.png)](https://ci.testling.com/juliangruber/balanced-match)
 ## Example
 Get the first matching pair of braces:
 ```js
 var balanced = require('balanced-match');
 console.log(balanced('{', '}', 'pre{in{nested}}post'));
 console.log(balanced('{', '}', 'pre{first}between{second}post'));
 console.log(balanced(/\s+\{\s+/, /\s+\}\s+/, 'pre  {   in{nest}   }  post'));
 ```
 The matches are:
 ```bash
 $ node example.js
 { start: 3, end: 14, pre: 'pre', body: 'in{nested}', post: 'post' }
 { start: 3,
  end: 9,
  pre: 'pre',
  body: 'first',
  post: 'between{second}post' }
 { start: 3, end: 17, pre: 'pre', body: 'in{nest}', post: 'post' }
 ```
 ## API
 ### var m = balanced(a, b, str)
 For the first non-nested matching pair of `a` and `b` in `str`, return an
 object with those keys:
 * **start** the index of the first match of `a`
 * **end** the index of the matching `b`
 * **pre** the preamble, `a` and `b` not included
 * **body** the match, `a` and `b` not included
 * **post** the postscript, `a` and `b` not included
 If there's no match, `undefined` will be returned.
 If the `str` contains more `a` than `b` / there are unmatched pairs, the first match that was closed will be used. For example, `{{a}` will match `['{', 'a', '']` and `{a}}` will match `['', 'a', '}']`.
 ### var r = balanced.range(a, b, str)
 For the first non-nested matching pair of `a` and `b` in `str`, return an
 array with indexes: `[ <a index>, <b index> ]`.
 If there's no match, `undefined` will be returned.
 If the `str` contains more `a` than `b` / there are unmatched pairs, the first match that was closed will be used. For example, `{{a}` will match `[ 1, 3 ]` and `{a}}` will match `[0, 2]`.
 ## Installation
 With [npm](https://npmjs.org) do:
 ```bash
 npm install balanced-match
 ```
 ## Security contact information
 To report a security vulnerability, please use the
 [Tidelift security contact](https://tidelift.com/security).
 Tidelift will coordinate the fix and disclosure.
 ## License
 (MIT)
 Copyright (c) 2013 Julian Gruber &lt;julian@juliangruber.com&gt;
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in
 the Software without restriction, including without limitation the rights to
 use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
 of the Software, and to permit persons to whom the Software is furnished to do
 so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
--- a/node_modules/balanced-match/index.js
+++ b/node_modules/balanced-match/index.js
@ -0,0 +1,62 @@
 'use strict';
 module.exports = balanced;
 function balanced(a, b, str) {
  if (a instanceof RegExp) a = maybeMatch(a, str);
  if (b instanceof RegExp) b = maybeMatch(b, str);
  var r = range(a, b, str);
  return r && {
    start: r[0],
    end: r[1],
    pre: str.slice(0, r[0]),
    body: str.slice(r[0] + a.length, r[1]),
    post: str.slice(r[1] + b.length)
  };
 }
 function maybeMatch(reg, str) {
  var m = str.match(reg);
  return m ? m[0] : null;
 }
 balanced.range = range;
 function range(a, b, str) {
  var begs, beg, left, right, result;
  var ai = str.indexOf(a);
  var bi = str.indexOf(b, ai + 1);
  var i = ai;
  if (ai >= 0 && bi > 0) {
    if(a===b) {
      return [ai, bi];
    }
    begs = [];
    left = str.length;
    while (i >= 0 && !result) {
      if (i == ai) {
        begs.push(i);
        ai = str.indexOf(a, i + 1);
      } else if (begs.length == 1) {
        result = [ begs.pop(), bi ];
      } else {
        beg = begs.pop();
        if (beg < left) {
          left = beg;
          right = bi;
        }
        bi = str.indexOf(b, i + 1);
      }
      i = ai < bi && ai >= 0 ? ai : bi;
    }
    if (begs.length) {
      result = [ left, right ];
    }
  }
  return result;
 }
--- a/node_modules/balanced-match/package.json
+++ b/node_modules/balanced-match/package.json
@ -0,0 +1,48 @@
 {
  "name": "balanced-match",
  "description": "Match balanced character pairs, like \"{\" and \"}\"",
  "version": "1.0.2",
  "repository": {
    "type": "git",
    "url": "git://github.com/juliangruber/balanced-match.git"
  },
  "homepage": "https://github.com/juliangruber/balanced-match",
  "main": "index.js",
  "scripts": {
    "test": "tape test/test.js",
    "bench": "matcha test/bench.js"
  },
  "devDependencies": {
    "matcha": "^0.7.0",
    "tape": "^4.6.0"
  },
  "keywords": [
    "match",
    "regexp",
    "test",
    "balanced",
    "parse"
  ],
  "author": {
    "name": "Julian Gruber",
    "email": "mail@juliangruber.com",
    "url": "http://juliangruber.com"
  },
  "license": "MIT",
  "testling": {
    "files": "test/*.js",
    "browsers": [
      "ie/8..latest",
      "firefox/20..latest",
      "firefox/nightly",
      "chrome/25..latest",
      "chrome/canary",
      "opera/12..latest",
      "opera/next",
      "safari/5.1..latest",
      "ipad/6.0..latest",
      "iphone/6.0..latest",
      "android-browser/4.2..latest"
    ]
  }
 }
--- a/node_modules/basic-auth/HISTORY.md
+++ b/node_modules/basic-auth/HISTORY.md
@ -0,0 +1,52 @@
 2.0.1 / 2018-09-19
 ==================
  * deps: safe-buffer@5.1.2
 2.0.0 / 2017-09-12
 ==================
  * Drop support for Node.js below 0.8
  * Remove `auth(ctx)` signature -- pass in header or `auth(ctx.req)`
  * Use `safe-buffer` for improved Buffer API
 1.1.0 / 2016-11-18
 ==================
  * Add `auth.parse` for low-level string parsing
 1.0.4 / 2016-05-10
 ==================
  * Improve error message when `req` argument is not an object
  * Improve error message when `req` missing `headers` property
 1.0.3 / 2015-07-01
 ==================
  * Fix regression accepting a Koa context
 1.0.2 / 2015-06-12
 ==================
  * Improve error message when `req` argument missing
  * perf: enable strict mode
  * perf: hoist regular expression
  * perf: parse with regular expressions
  * perf: remove argument reassignment
 1.0.1 / 2015-05-04
 ==================
  * Update readme
 1.0.0 / 2014-07-01
 ==================
  * Support empty password
  * Support empty username
 0.0.1 / 2013-11-30
 ==================
  * Initial release
--- a/node_modules/basic-auth/LICENSE
+++ b/node_modules/basic-auth/LICENSE
@ -0,0 +1,24 @@
 (The MIT License)
 Copyright (c) 2013 TJ Holowaychuk
 Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
 Copyright (c) 2015-2016 Douglas Christopher Wilson <doug@somethingdoug.com>
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
 'Software'), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish,
 distribute, sublicense, and/or sell copies of the Software, and to
 permit persons to whom the Software is furnished to do so, subject to
 the following conditions:
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
--- a/node_modules/basic-auth/README.md
+++ b/node_modules/basic-auth/README.md
@ -0,0 +1,113 @@
 # basic-auth
 [![NPM Version][npm-image]][npm-url]
 [![NPM Downloads][downloads-image]][downloads-url]
 [![Node.js Version][node-version-image]][node-version-url]
 [![Build Status][travis-image]][travis-url]
 [![Test Coverage][coveralls-image]][coveralls-url]
 Generic basic auth Authorization header field parser for whatever.
 ## Installation
 This is a [Node.js](https://nodejs.org/en/) module available through the
 [npm registry](https://www.npmjs.com/). Installation is done using the
 [`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally):
 ```
 $ npm install basic-auth
 ```
 ## API
 <!-- eslint-disable no-unused-vars -->
 ```js
 var auth = require('basic-auth')
 ```
 ### auth(req)
 Get the basic auth credentials from the given request. The `Authorization`
 header is parsed and if the header is invalid, `undefined` is returned,
 otherwise an object with `name` and `pass` properties.
 ### auth.parse(string)
 Parse a basic auth authorization header string. This will return an object
 with `name` and `pass` properties, or `undefined` if the string is invalid.
 ## Example
 Pass a Node.js request object to the module export. If parsing fails
 `undefined` is returned, otherwise an object with `.name` and `.pass`.
 <!-- eslint-disable no-unused-vars, no-undef -->
 ```js
 var auth = require('basic-auth')
 var user = auth(req)
 // => { name: 'something', pass: 'whatever' }
 ```
 A header string from any other location can also be parsed with
 `auth.parse`, for example a `Proxy-Authorization` header:
 <!-- eslint-disable no-unused-vars, no-undef -->
 ```js
 var auth = require('basic-auth')
 var user = auth.parse(req.getHeader('Proxy-Authorization'))
 ```
 ### With vanilla node.js http server
 ```js
 var http = require('http')
 var auth = require('basic-auth')
 var compare = require('tsscmp')
 // Create server
 var server = http.createServer(function (req, res) {
  var credentials = auth(req)
  // Check credentials
  // The "check" function will typically be against your user store
  if (!credentials || !check(credentials.name, credentials.pass)) {
    res.statusCode = 401
    res.setHeader('WWW-Authenticate', 'Basic realm="example"')
    res.end('Access denied')
  } else {
    res.end('Access granted')
  }
 })
 // Basic function to validate credentials for example
 function check (name, pass) {
  var valid = true
  // Simple method to prevent short-circut and use timing-safe compare
  valid = compare(name, 'john') && valid
  valid = compare(pass, 'secret') && valid
  return valid
 }
 // Listen
 server.listen(3000)
 ```
 # License
 [MIT](LICENSE)
 [coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/basic-auth/master
 [coveralls-url]: https://coveralls.io/r/jshttp/basic-auth?branch=master
 [downloads-image]: https://badgen.net/npm/dm/basic-auth
 [downloads-url]: https://npmjs.org/package/basic-auth
 [node-version-image]: https://badgen.net/npm/node/basic-auth
 [node-version-url]: https://nodejs.org/en/download
 [npm-image]: https://badgen.net/npm/v/basic-auth
 [npm-url]: https://npmjs.org/package/basic-auth
 [travis-image]: https://badgen.net/travis/jshttp/basic-auth/master
 [travis-url]: https://travis-ci.org/jshttp/basic-auth
--- a/node_modules/basic-auth/index.js
+++ b/node_modules/basic-auth/index.js
@ -0,0 +1,133 @@
 /*!
 * basic-auth
 * Copyright(c) 2013 TJ Holowaychuk
 * Copyright(c) 2014 Jonathan Ong
 * Copyright(c) 2015-2016 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * Module dependencies.
 * @private
 */
 var Buffer = require('safe-buffer').Buffer
 /**
 * Module exports.
 * @public
 */
 module.exports = auth
 module.exports.parse = parse
 /**
 * RegExp for basic auth credentials
 *
 * credentials = auth-scheme 1*SP token68
 * auth-scheme = "Basic" ; case insensitive
 * token68     = 1*( ALPHA / DIGIT / "-" / "." / "_" / "~" / "+" / "/" ) *"="
 * @private
 */
 var CREDENTIALS_REGEXP = /^ *(?:[Bb][Aa][Ss][Ii][Cc]) +([A-Za-z0-9._~+/-]+=*) *$/
 /**
 * RegExp for basic auth user/pass
 *
 * user-pass   = userid ":" password
 * userid      = *<TEXT excluding ":">
 * password    = *TEXT
 * @private
 */
 var USER_PASS_REGEXP = /^([^:]*):(.*)$/
 /**
 * Parse the Authorization header field of a request.
 *
 * @param {object} req
 * @return {object} with .name and .pass
 * @public
 */
 function auth (req) {
  if (!req) {
    throw new TypeError('argument req is required')
  }
  if (typeof req !== 'object') {
    throw new TypeError('argument req is required to be an object')
  }
  // get header
  var header = getAuthorization(req)
  // parse header
  return parse(header)
 }
 /**
 * Decode base64 string.
 * @private
 */
 function decodeBase64 (str) {
  return Buffer.from(str, 'base64').toString()
 }
 /**
 * Get the Authorization header from request object.
 * @private
 */
 function getAuthorization (req) {
  if (!req.headers || typeof req.headers !== 'object') {
    throw new TypeError('argument req is required to have headers property')
  }
  return req.headers.authorization
 }
 /**
 * Parse basic auth to object.
 *
 * @param {string} string
 * @return {object}
 * @public
 */
 function parse (string) {
  if (typeof string !== 'string') {
    return undefined
  }
  // parse header
  var match = CREDENTIALS_REGEXP.exec(string)
  if (!match) {
    return undefined
  }
  // decode user pass
  var userPass = USER_PASS_REGEXP.exec(decodeBase64(match[1]))
  if (!userPass) {
    return undefined
  }
  // return credentials object
  return new Credentials(userPass[1], userPass[2])
 }
 /**
 * Object to represent user credentials.
 * @private
 */
 function Credentials (name, pass) {
  this.name = name
  this.pass = pass
 }
--- a/node_modules/basic-auth/node_modules/safe-buffer/LICENSE
+++ b/node_modules/basic-auth/node_modules/safe-buffer/LICENSE
@ -0,0 +1,21 @@
 The MIT License (MIT)
 Copyright (c) Feross Aboukhadijeh
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
--- a/node_modules/basic-auth/node_modules/safe-buffer/README.md
+++ b/node_modules/basic-auth/node_modules/safe-buffer/README.md
@ -0,0 +1,584 @@
 # safe-buffer [![travis][travis-image]][travis-url] [![npm][npm-image]][npm-url] [![downloads][downloads-image]][downloads-url] [![javascript style guide][standard-image]][standard-url]
 [travis-image]: https://img.shields.io/travis/feross/safe-buffer/master.svg
 [travis-url]: https://travis-ci.org/feross/safe-buffer
 [npm-image]: https://img.shields.io/npm/v/safe-buffer.svg
 [npm-url]: https://npmjs.org/package/safe-buffer
 [downloads-image]: https://img.shields.io/npm/dm/safe-buffer.svg
 [downloads-url]: https://npmjs.org/package/safe-buffer
 [standard-image]: https://img.shields.io/badge/code_style-standard-brightgreen.svg
 [standard-url]: https://standardjs.com
 #### Safer Node.js Buffer API
 **Use the new Node.js Buffer APIs (`Buffer.from`, `Buffer.alloc`,
 `Buffer.allocUnsafe`, `Buffer.allocUnsafeSlow`) in all versions of Node.js.**
 **Uses the built-in implementation when available.**
 ## install
 ```
 npm install safe-buffer
 ```
 ## usage
 The goal of this package is to provide a safe replacement for the node.js `Buffer`.
 It's a drop-in replacement for `Buffer`. You can use it by adding one `require` line to
 the top of your node.js modules:
 ```js
 var Buffer = require('safe-buffer').Buffer
 // Existing buffer code will continue to work without issues:
 new Buffer('hey', 'utf8')
 new Buffer([1, 2, 3], 'utf8')
 new Buffer(obj)
 new Buffer(16) // create an uninitialized buffer (potentially unsafe)
 // But you can use these new explicit APIs to make clear what you want:
 Buffer.from('hey', 'utf8') // convert from many types to a Buffer
 Buffer.alloc(16) // create a zero-filled buffer (safe)
 Buffer.allocUnsafe(16) // create an uninitialized buffer (potentially unsafe)
 ```
 ## api
 ### Class Method: Buffer.from(array)
 <!-- YAML
 added: v3.0.0
 -->
 * `array` {Array}
 Allocates a new `Buffer` using an `array` of octets.
 ```js
 const buf = Buffer.from([0x62,0x75,0x66,0x66,0x65,0x72]);
  // creates a new Buffer containing ASCII bytes
  // ['b','u','f','f','e','r']
 ```
 A `TypeError` will be thrown if `array` is not an `Array`.
 ### Class Method: Buffer.from(arrayBuffer[, byteOffset[, length]])
 <!-- YAML
 added: v5.10.0
 -->
 * `arrayBuffer` {ArrayBuffer} The `.buffer` property of a `TypedArray` or
  a `new ArrayBuffer()`
 * `byteOffset` {Number} Default: `0`
 * `length` {Number} Default: `arrayBuffer.length - byteOffset`
 When passed a reference to the `.buffer` property of a `TypedArray` instance,
 the newly created `Buffer` will share the same allocated memory as the
 TypedArray.
 ```js
 const arr = new Uint16Array(2);
 arr[0] = 5000;
 arr[1] = 4000;
 const buf = Buffer.from(arr.buffer); // shares the memory with arr;
 console.log(buf);
  // Prints: <Buffer 88 13 a0 0f>
 // changing the TypedArray changes the Buffer also
 arr[1] = 6000;
 console.log(buf);
  // Prints: <Buffer 88 13 70 17>
 ```
 The optional `byteOffset` and `length` arguments specify a memory range within
 the `arrayBuffer` that will be shared by the `Buffer`.
 ```js
 const ab = new ArrayBuffer(10);
 const buf = Buffer.from(ab, 0, 2);
 console.log(buf.length);
  // Prints: 2
 ```
 A `TypeError` will be thrown if `arrayBuffer` is not an `ArrayBuffer`.
 ### Class Method: Buffer.from(buffer)
 <!-- YAML
 added: v3.0.0
 -->
 * `buffer` {Buffer}
 Copies the passed `buffer` data onto a new `Buffer` instance.
 ```js
 const buf1 = Buffer.from('buffer');
 const buf2 = Buffer.from(buf1);
 buf1[0] = 0x61;
 console.log(buf1.toString());
  // 'auffer'
 console.log(buf2.toString());
  // 'buffer' (copy is not changed)
 ```
 A `TypeError` will be thrown if `buffer` is not a `Buffer`.
 ### Class Method: Buffer.from(str[, encoding])
 <!-- YAML
 added: v5.10.0
 -->
 * `str` {String} String to encode.
 * `encoding` {String} Encoding to use, Default: `'utf8'`
 Creates a new `Buffer` containing the given JavaScript string `str`. If
 provided, the `encoding` parameter identifies the character encoding.
 If not provided, `encoding` defaults to `'utf8'`.
 ```js
 const buf1 = Buffer.from('this is a tést');
 console.log(buf1.toString());
  // prints: this is a tést
 console.log(buf1.toString('ascii'));
  // prints: this is a tC)st
 const buf2 = Buffer.from('7468697320697320612074c3a97374', 'hex');
 console.log(buf2.toString());
  // prints: this is a tést
 ```
 A `TypeError` will be thrown if `str` is not a string.
 ### Class Method: Buffer.alloc(size[, fill[, encoding]])
 <!-- YAML
 added: v5.10.0
 -->
 * `size` {Number}
 * `fill` {Value} Default: `undefined`
 * `encoding` {String} Default: `utf8`
 Allocates a new `Buffer` of `size` bytes. If `fill` is `undefined`, the
 `Buffer` will be *zero-filled*.
 ```js
 const buf = Buffer.alloc(5);
 console.log(buf);
  // <Buffer 00 00 00 00 00>
 ```
 The `size` must be less than or equal to the value of
 `require('buffer').kMaxLength` (on 64-bit architectures, `kMaxLength` is
 `(2^31)-1`). Otherwise, a [`RangeError`][] is thrown. A zero-length Buffer will
 be created if a `size` less than or equal to 0 is specified.
 If `fill` is specified, the allocated `Buffer` will be initialized by calling
 `buf.fill(fill)`. See [`buf.fill()`][] for more information.
 ```js
 const buf = Buffer.alloc(5, 'a');
 console.log(buf);
  // <Buffer 61 61 61 61 61>
 ```
 If both `fill` and `encoding` are specified, the allocated `Buffer` will be
 initialized by calling `buf.fill(fill, encoding)`. For example:
 ```js
 const buf = Buffer.alloc(11, 'aGVsbG8gd29ybGQ=', 'base64');
 console.log(buf);
  // <Buffer 68 65 6c 6c 6f 20 77 6f 72 6c 64>
 ```
 Calling `Buffer.alloc(size)` can be significantly slower than the alternative
 `Buffer.allocUnsafe(size)` but ensures that the newly created `Buffer` instance
 contents will *never contain sensitive data*.
 A `TypeError` will be thrown if `size` is not a number.
 ### Class Method: Buffer.allocUnsafe(size)
 <!-- YAML
 added: v5.10.0
 -->
 * `size` {Number}
 Allocates a new *non-zero-filled* `Buffer` of `size` bytes.  The `size` must
 be less than or equal to the value of `require('buffer').kMaxLength` (on 64-bit
 architectures, `kMaxLength` is `(2^31)-1`). Otherwise, a [`RangeError`][] is
 thrown. A zero-length Buffer will be created if a `size` less than or equal to
 0 is specified.
 The underlying memory for `Buffer` instances created in this way is *not
 initialized*. The contents of the newly created `Buffer` are unknown and
 *may contain sensitive data*. Use [`buf.fill(0)`][] to initialize such
 `Buffer` instances to zeroes.
 ```js
 const buf = Buffer.allocUnsafe(5);
 console.log(buf);
  // <Buffer 78 e0 82 02 01>
  // (octets will be different, every time)
 buf.fill(0);
 console.log(buf);
  // <Buffer 00 00 00 00 00>
 ```
 A `TypeError` will be thrown if `size` is not a number.
 Note that the `Buffer` module pre-allocates an internal `Buffer` instance of
 size `Buffer.poolSize` that is used as a pool for the fast allocation of new
 `Buffer` instances created using `Buffer.allocUnsafe(size)` (and the deprecated
 `new Buffer(size)` constructor) only when `size` is less than or equal to
 `Buffer.poolSize >> 1` (floor of `Buffer.poolSize` divided by two). The default
 value of `Buffer.poolSize` is `8192` but can be modified.
 Use of this pre-allocated internal memory pool is a key difference between
 calling `Buffer.alloc(size, fill)` vs. `Buffer.allocUnsafe(size).fill(fill)`.
 Specifically, `Buffer.alloc(size, fill)` will *never* use the internal Buffer
 pool, while `Buffer.allocUnsafe(size).fill(fill)` *will* use the internal
 Buffer pool if `size` is less than or equal to half `Buffer.poolSize`. The
 difference is subtle but can be important when an application requires the
 additional performance that `Buffer.allocUnsafe(size)` provides.
 ### Class Method: Buffer.allocUnsafeSlow(size)
 <!-- YAML
 added: v5.10.0
 -->
 * `size` {Number}
 Allocates a new *non-zero-filled* and non-pooled `Buffer` of `size` bytes.  The
 `size` must be less than or equal to the value of
 `require('buffer').kMaxLength` (on 64-bit architectures, `kMaxLength` is
 `(2^31)-1`). Otherwise, a [`RangeError`][] is thrown. A zero-length Buffer will
 be created if a `size` less than or equal to 0 is specified.
 The underlying memory for `Buffer` instances created in this way is *not
 initialized*. The contents of the newly created `Buffer` are unknown and
 *may contain sensitive data*. Use [`buf.fill(0)`][] to initialize such
 `Buffer` instances to zeroes.
 When using `Buffer.allocUnsafe()` to allocate new `Buffer` instances,
 allocations under 4KB are, by default, sliced from a single pre-allocated
 `Buffer`. This allows applications to avoid the garbage collection overhead of
 creating many individually allocated Buffers. This approach improves both
 performance and memory usage by eliminating the need to track and cleanup as
 many `Persistent` objects.
 However, in the case where a developer may need to retain a small chunk of
 memory from a pool for an indeterminate amount of time, it may be appropriate
 to create an un-pooled Buffer instance using `Buffer.allocUnsafeSlow()` then
 copy out the relevant bits.
 ```js
 // need to keep around a few small chunks of memory
 const store = [];
 socket.on('readable', () => {
  const data = socket.read();
  // allocate for retained data
  const sb = Buffer.allocUnsafeSlow(10);
  // copy the data into the new allocation
  data.copy(sb, 0, 0, 10);
  store.push(sb);
 });
 ```
 Use of `Buffer.allocUnsafeSlow()` should be used only as a last resort *after*
 a developer has observed undue memory retention in their applications.
 A `TypeError` will be thrown if `size` is not a number.
 ### All the Rest
 The rest of the `Buffer` API is exactly the same as in node.js.
 [See the docs](https://nodejs.org/api/buffer.html).
 ## Related links
 - [Node.js issue: Buffer(number) is unsafe](https://github.com/nodejs/node/issues/4660)
 - [Node.js Enhancement Proposal: Buffer.from/Buffer.alloc/Buffer.zalloc/Buffer() soft-deprecate](https://github.com/nodejs/node-eps/pull/4)
 ## Why is `Buffer` unsafe?
 Today, the node.js `Buffer` constructor is overloaded to handle many different argument
 types like `String`, `Array`, `Object`, `TypedArrayView` (`Uint8Array`, etc.),
 `ArrayBuffer`, and also `Number`.
 The API is optimized for convenience: you can throw any type at it, and it will try to do
 what you want.
 Because the Buffer constructor is so powerful, you often see code like this:
 ```js
 // Convert UTF-8 strings to hex
 function toHex (str) {
  return new Buffer(str).toString('hex')
 }
 ```
 ***But what happens if `toHex` is called with a `Number` argument?***
 ### Remote Memory Disclosure
 If an attacker can make your program call the `Buffer` constructor with a `Number`
 argument, then they can make it allocate uninitialized memory from the node.js process.
 This could potentially disclose TLS private keys, user data, or database passwords.
 When the `Buffer` constructor is passed a `Number` argument, it returns an
 **UNINITIALIZED** block of memory of the specified `size`. When you create a `Buffer` like
 this, you **MUST** overwrite the contents before returning it to the user.
 From the [node.js docs](https://nodejs.org/api/buffer.html#buffer_new_buffer_size):
 > `new Buffer(size)`
 >
 > - `size` Number
 >
 > The underlying memory for `Buffer` instances created in this way is not initialized.
 > **The contents of a newly created `Buffer` are unknown and could contain sensitive
 > data.** Use `buf.fill(0)` to initialize a Buffer to zeroes.
 (Emphasis our own.)
 Whenever the programmer intended to create an uninitialized `Buffer` you often see code
 like this:
 ```js
 var buf = new Buffer(16)
 // Immediately overwrite the uninitialized buffer with data from another buffer
 for (var i = 0; i < buf.length; i++) {
  buf[i] = otherBuf[i]
 }
 ```
 ### Would this ever be a problem in real code?
 Yes. It's surprisingly common to forget to check the type of your variables in a
 dynamically-typed language like JavaScript.
 Usually the consequences of assuming the wrong type is that your program crashes with an
 uncaught exception. But the failure mode for forgetting to check the type of arguments to
 the `Buffer` constructor is more catastrophic.
 Here's an example of a vulnerable service that takes a JSON payload and converts it to
 hex:
 ```js
 // Take a JSON payload {str: "some string"} and convert it to hex
 var server = http.createServer(function (req, res) {
  var data = ''
  req.setEncoding('utf8')
  req.on('data', function (chunk) {
    data += chunk
  })
  req.on('end', function () {
    var body = JSON.parse(data)
    res.end(new Buffer(body.str).toString('hex'))
  })
 })
 server.listen(8080)
 ```
 In this example, an http client just has to send:
 ```json
 {
  "str": 1000
 }
 ```
 and it will get back 1,000 bytes of uninitialized memory from the server.
 This is a very serious bug. It's similar in severity to the
 [the Heartbleed bug](http://heartbleed.com/) that allowed disclosure of OpenSSL process
 memory by remote attackers.
 ### Which real-world packages were vulnerable?
 #### [`bittorrent-dht`](https://www.npmjs.com/package/bittorrent-dht)
 [Mathias Buus](https://github.com/mafintosh) and I
 ([Feross Aboukhadijeh](http://feross.org/)) found this issue in one of our own packages,
 [`bittorrent-dht`](https://www.npmjs.com/package/bittorrent-dht). The bug would allow
 anyone on the internet to send a series of messages to a user of `bittorrent-dht` and get
 them to reveal 20 bytes at a time of uninitialized memory from the node.js process.
 Here's
 [the commit](https://github.com/feross/bittorrent-dht/commit/6c7da04025d5633699800a99ec3fbadf70ad35b8)
 that fixed it. We released a new fixed version, created a
 [Node Security Project disclosure](https://nodesecurity.io/advisories/68), and deprecated all
 vulnerable versions on npm so users will get a warning to upgrade to a newer version.
 #### [`ws`](https://www.npmjs.com/package/ws)
 That got us wondering if there were other vulnerable packages. Sure enough, within a short
 period of time, we found the same issue in [`ws`](https://www.npmjs.com/package/ws), the
 most popular WebSocket implementation in node.js.
 If certain APIs were called with `Number` parameters instead of `String` or `Buffer` as
 expected, then uninitialized server memory would be disclosed to the remote peer.
 These were the vulnerable methods:
 ```js
 socket.send(number)
 socket.ping(number)
 socket.pong(number)
 ```
 Here's a vulnerable socket server with some echo functionality:
 ```js
 server.on('connection', function (socket) {
  socket.on('message', function (message) {
    message = JSON.parse(message)
    if (message.type === 'echo') {
      socket.send(message.data) // send back the user's message
    }
  })
 })
 ```
 `socket.send(number)` called on the server, will disclose server memory.
 Here's [the release](https://github.com/websockets/ws/releases/tag/1.0.1) where the issue
 was fixed, with a more detailed explanation. Props to
 [Arnout Kazemier](https://github.com/3rd-Eden) for the quick fix. Here's the
 [Node Security Project disclosure](https://nodesecurity.io/advisories/67).
 ### What's the solution?
 It's important that node.js offers a fast way to get memory otherwise performance-critical
 applications would needlessly get a lot slower.
 But we need a better way to *signal our intent* as programmers. **When we want
 uninitialized memory, we should request it explicitly.**
 Sensitive functionality should not be packed into a developer-friendly API that loosely
 accepts many different types. This type of API encourages the lazy practice of passing
 variables in without checking the type very carefully.
 #### A new API: `Buffer.allocUnsafe(number)`
 The functionality of creating buffers with uninitialized memory should be part of another
 API. We propose `Buffer.allocUnsafe(number)`. This way, it's not part of an API that
 frequently gets user input of all sorts of different types passed into it.
 ```js
 var buf = Buffer.allocUnsafe(16) // careful, uninitialized memory!
 // Immediately overwrite the uninitialized buffer with data from another buffer
 for (var i = 0; i < buf.length; i++) {
  buf[i] = otherBuf[i]
 }
 ```
 ### How do we fix node.js core?
 We sent [a PR to node.js core](https://github.com/nodejs/node/pull/4514) (merged as
 `semver-major`) which defends against one case:
 ```js
 var str = 16
 new Buffer(str, 'utf8')
 ```
 In this situation, it's implied that the programmer intended the first argument to be a
 string, since they passed an encoding as a second argument. Today, node.js will allocate
 uninitialized memory in the case of `new Buffer(number, encoding)`, which is probably not
 what the programmer intended.
 But this is only a partial solution, since if the programmer does `new Buffer(variable)`
 (without an `encoding` parameter) there's no way to know what they intended. If `variable`
 is sometimes a number, then uninitialized memory will sometimes be returned.
 ### What's the real long-term fix?
 We could deprecate and remove `new Buffer(number)` and use `Buffer.allocUnsafe(number)` when
 we need uninitialized memory. But that would break 1000s of packages.
 ~~We believe the best solution is to:~~
 ~~1. Change `new Buffer(number)` to return safe, zeroed-out memory~~
 ~~2. Create a new API for creating uninitialized Buffers. We propose: `Buffer.allocUnsafe(number)`~~
 #### Update
 We now support adding three new APIs:
 - `Buffer.from(value)` - convert from any type to a buffer
 - `Buffer.alloc(size)` - create a zero-filled buffer
 - `Buffer.allocUnsafe(size)` - create an uninitialized buffer with given size
 This solves the core problem that affected `ws` and `bittorrent-dht` which is
 `Buffer(variable)` getting tricked into taking a number argument.
 This way, existing code continues working and the impact on the npm ecosystem will be
 minimal. Over time, npm maintainers can migrate performance-critical code to use
 `Buffer.allocUnsafe(number)` instead of `new Buffer(number)`.
 ### Conclusion
 We think there's a serious design issue with the `Buffer` API as it exists today. It
 promotes insecure software by putting high-risk functionality into a convenient API
 with friendly "developer ergonomics".
 This wasn't merely a theoretical exercise because we found the issue in some of the
 most popular npm packages.
 Fortunately, there's an easy fix that can be applied today. Use `safe-buffer` in place of
 `buffer`.
 ```js
 var Buffer = require('safe-buffer').Buffer
 ```
 Eventually, we hope that node.js core can switch to this new, safer behavior. We believe
 the impact on the ecosystem would be minimal since it's not a breaking change.
 Well-maintained, popular packages would be updated to use `Buffer.alloc` quickly, while
 older, insecure packages would magically become safe from this attack vector.
 ## links
 - [Node.js PR: buffer: throw if both length and enc are passed](https://github.com/nodejs/node/pull/4514)
 - [Node Security Project disclosure for `ws`](https://nodesecurity.io/advisories/67)
 - [Node Security Project disclosure for`bittorrent-dht`](https://nodesecurity.io/advisories/68)
 ## credit
 The original issues in `bittorrent-dht`
 ([disclosure](https://nodesecurity.io/advisories/68)) and
 `ws` ([disclosure](https://nodesecurity.io/advisories/67)) were discovered by
 [Mathias Buus](https://github.com/mafintosh) and
 [Feross Aboukhadijeh](http://feross.org/).
 Thanks to [Adam Baldwin](https://github.com/evilpacket) for helping disclose these issues
 and for his work running the [Node Security Project](https://nodesecurity.io/).
 Thanks to [John Hiesey](https://github.com/jhiesey) for proofreading this README and
 auditing the code.
 ## license
 MIT. Copyright (C) [Feross Aboukhadijeh](http://feross.org)
--- a/node_modules/basic-auth/node_modules/safe-buffer/index.d.ts
+++ b/node_modules/basic-auth/node_modules/safe-buffer/index.d.ts
@ -0,0 +1,187 @@
 declare module "safe-buffer" {
  export class Buffer {
    length: number
    write(string: string, offset?: number, length?: number, encoding?: string): number;
    toString(encoding?: string, start?: number, end?: number): string;
    toJSON(): { type: 'Buffer', data: any[] };
    equals(otherBuffer: Buffer): boolean;
    compare(otherBuffer: Buffer, targetStart?: number, targetEnd?: number, sourceStart?: number, sourceEnd?: number): number;
    copy(targetBuffer: Buffer, targetStart?: number, sourceStart?: number, sourceEnd?: number): number;
    slice(start?: number, end?: number): Buffer;
    writeUIntLE(value: number, offset: number, byteLength: number, noAssert?: boolean): number;
    writeUIntBE(value: number, offset: number, byteLength: number, noAssert?: boolean): number;
    writeIntLE(value: number, offset: number, byteLength: number, noAssert?: boolean): number;
    writeIntBE(value: number, offset: number, byteLength: number, noAssert?: boolean): number;
    readUIntLE(offset: number, byteLength: number, noAssert?: boolean): number;
    readUIntBE(offset: number, byteLength: number, noAssert?: boolean): number;
    readIntLE(offset: number, byteLength: number, noAssert?: boolean): number;
    readIntBE(offset: number, byteLength: number, noAssert?: boolean): number;
    readUInt8(offset: number, noAssert?: boolean): number;
    readUInt16LE(offset: number, noAssert?: boolean): number;
    readUInt16BE(offset: number, noAssert?: boolean): number;
    readUInt32LE(offset: number, noAssert?: boolean): number;
    readUInt32BE(offset: number, noAssert?: boolean): number;
    readInt8(offset: number, noAssert?: boolean): number;
    readInt16LE(offset: number, noAssert?: boolean): number;
    readInt16BE(offset: number, noAssert?: boolean): number;
    readInt32LE(offset: number, noAssert?: boolean): number;
    readInt32BE(offset: number, noAssert?: boolean): number;
    readFloatLE(offset: number, noAssert?: boolean): number;
    readFloatBE(offset: number, noAssert?: boolean): number;
    readDoubleLE(offset: number, noAssert?: boolean): number;
    readDoubleBE(offset: number, noAssert?: boolean): number;
    swap16(): Buffer;
    swap32(): Buffer;
    swap64(): Buffer;
    writeUInt8(value: number, offset: number, noAssert?: boolean): number;
    writeUInt16LE(value: number, offset: number, noAssert?: boolean): number;
    writeUInt16BE(value: number, offset: number, noAssert?: boolean): number;
    writeUInt32LE(value: number, offset: number, noAssert?: boolean): number;
    writeUInt32BE(value: number, offset: number, noAssert?: boolean): number;
    writeInt8(value: number, offset: number, noAssert?: boolean): number;
    writeInt16LE(value: number, offset: number, noAssert?: boolean): number;
    writeInt16BE(value: number, offset: number, noAssert?: boolean): number;
    writeInt32LE(value: number, offset: number, noAssert?: boolean): number;
    writeInt32BE(value: number, offset: number, noAssert?: boolean): number;
    writeFloatLE(value: number, offset: number, noAssert?: boolean): number;
    writeFloatBE(value: number, offset: number, noAssert?: boolean): number;
    writeDoubleLE(value: number, offset: number, noAssert?: boolean): number;
    writeDoubleBE(value: number, offset: number, noAssert?: boolean): number;
    fill(value: any, offset?: number, end?: number): this;
    indexOf(value: string | number | Buffer, byteOffset?: number, encoding?: string): number;
    lastIndexOf(value: string | number | Buffer, byteOffset?: number, encoding?: string): number;
    includes(value: string | number | Buffer, byteOffset?: number, encoding?: string): boolean;
    /**
     * Allocates a new buffer containing the given {str}.
     *
     * @param str String to store in buffer.
     * @param encoding encoding to use, optional.  Default is 'utf8'
     */
     constructor (str: string, encoding?: string);
    /**
     * Allocates a new buffer of {size} octets.
     *
     * @param size count of octets to allocate.
     */
    constructor (size: number);
    /**
     * Allocates a new buffer containing the given {array} of octets.
     *
     * @param array The octets to store.
     */
    constructor (array: Uint8Array);
    /**
     * Produces a Buffer backed by the same allocated memory as
     * the given {ArrayBuffer}.
     *
     *
     * @param arrayBuffer The ArrayBuffer with which to share memory.
     */
    constructor (arrayBuffer: ArrayBuffer);
    /**
     * Allocates a new buffer containing the given {array} of octets.
     *
     * @param array The octets to store.
     */
    constructor (array: any[]);
    /**
     * Copies the passed {buffer} data onto a new {Buffer} instance.
     *
     * @param buffer The buffer to copy.
     */
    constructor (buffer: Buffer);
    prototype: Buffer;
    /**
     * Allocates a new Buffer using an {array} of octets.
     *
     * @param array
     */
    static from(array: any[]): Buffer;
    /**
     * When passed a reference to the .buffer property of a TypedArray instance,
     * the newly created Buffer will share the same allocated memory as the TypedArray.
     * The optional {byteOffset} and {length} arguments specify a memory range
     * within the {arrayBuffer} that will be shared by the Buffer.
     *
     * @param arrayBuffer The .buffer property of a TypedArray or a new ArrayBuffer()
     * @param byteOffset
     * @param length
     */
    static from(arrayBuffer: ArrayBuffer, byteOffset?: number, length?: number): Buffer;
    /**
     * Copies the passed {buffer} data onto a new Buffer instance.
     *
     * @param buffer
     */
    static from(buffer: Buffer): Buffer;
    /**
     * Creates a new Buffer containing the given JavaScript string {str}.
     * If provided, the {encoding} parameter identifies the character encoding.
     * If not provided, {encoding} defaults to 'utf8'.
     *
     * @param str
     */
    static from(str: string, encoding?: string): Buffer;
    /**
     * Returns true if {obj} is a Buffer
     *
     * @param obj object to test.
     */
    static isBuffer(obj: any): obj is Buffer;
    /**
     * Returns true if {encoding} is a valid encoding argument.
     * Valid string encodings in Node 0.12: 'ascii'|'utf8'|'utf16le'|'ucs2'(alias of 'utf16le')|'base64'|'binary'(deprecated)|'hex'
     *
     * @param encoding string to test.
     */
    static isEncoding(encoding: string): boolean;
    /**
     * Gives the actual byte length of a string. encoding defaults to 'utf8'.
     * This is not the same as String.prototype.length since that returns the number of characters in a string.
     *
     * @param string string to test.
     * @param encoding encoding used to evaluate (defaults to 'utf8')
     */
    static byteLength(string: string, encoding?: string): number;
    /**
     * Returns a buffer which is the result of concatenating all the buffers in the list together.
     *
     * If the list has no items, or if the totalLength is 0, then it returns a zero-length buffer.
     * If the list has exactly one item, then the first item of the list is returned.
     * If the list has more than one item, then a new Buffer is created.
     *
     * @param list An array of Buffer objects to concatenate
     * @param totalLength Total length of the buffers when concatenated.
     *   If totalLength is not provided, it is read from the buffers in the list. However, this adds an additional loop to the function, so it is faster to provide the length explicitly.
     */
    static concat(list: Buffer[], totalLength?: number): Buffer;
    /**
     * The same as buf1.compare(buf2).
     */
    static compare(buf1: Buffer, buf2: Buffer): number;
    /**
     * Allocates a new buffer of {size} octets.
     *
     * @param size count of octets to allocate.
     * @param fill if specified, buffer will be initialized by calling buf.fill(fill).
     *    If parameter is omitted, buffer will be filled with zeros.
     * @param encoding encoding used for call to buf.fill while initalizing
     */
    static alloc(size: number, fill?: string | Buffer | number, encoding?: string): Buffer;
    /**
     * Allocates a new buffer of {size} octets, leaving memory not initialized, so the contents
     * of the newly created Buffer are unknown and may contain sensitive data.
     *
     * @param size count of octets to allocate
     */
    static allocUnsafe(size: number): Buffer;
    /**
     * Allocates a new non-pooled buffer of {size} octets, leaving memory not initialized, so the contents
     * of the newly created Buffer are unknown and may contain sensitive data.
     *
     * @param size count of octets to allocate
     */
    static allocUnsafeSlow(size: number): Buffer;
  }
 }
--- a/node_modules/basic-auth/node_modules/safe-buffer/index.js
+++ b/node_modules/basic-auth/node_modules/safe-buffer/index.js
@ -0,0 +1,62 @@
 /* eslint-disable node/no-deprecated-api */
 var buffer = require('buffer')
 var Buffer = buffer.Buffer
 // alternative to using Object.keys for old browsers
 function copyProps (src, dst) {
  for (var key in src) {
    dst[key] = src[key]
  }
 }
 if (Buffer.from && Buffer.alloc && Buffer.allocUnsafe && Buffer.allocUnsafeSlow) {
  module.exports = buffer
 } else {
  // Copy properties from require('buffer')
  copyProps(buffer, exports)
  exports.Buffer = SafeBuffer
 }
 function SafeBuffer (arg, encodingOrOffset, length) {
  return Buffer(arg, encodingOrOffset, length)
 }
 // Copy static methods from Buffer
 copyProps(Buffer, SafeBuffer)
 SafeBuffer.from = function (arg, encodingOrOffset, length) {
  if (typeof arg === 'number') {
    throw new TypeError('Argument must not be a number')
  }
  return Buffer(arg, encodingOrOffset, length)
 }
 SafeBuffer.alloc = function (size, fill, encoding) {
  if (typeof size !== 'number') {
    throw new TypeError('Argument must be a number')
  }
  var buf = Buffer(size)
  if (fill !== undefined) {
    if (typeof encoding === 'string') {
      buf.fill(fill, encoding)
    } else {
      buf.fill(fill)
    }
  } else {
    buf.fill(0)
  }
  return buf
 }
 SafeBuffer.allocUnsafe = function (size) {
  if (typeof size !== 'number') {
    throw new TypeError('Argument must be a number')
  }
  return Buffer(size)
 }
 SafeBuffer.allocUnsafeSlow = function (size) {
  if (typeof size !== 'number') {
    throw new TypeError('Argument must be a number')
  }
  return buffer.SlowBuffer(size)
 }
--- a/node_modules/basic-auth/node_modules/safe-buffer/package.json
+++ b/node_modules/basic-auth/node_modules/safe-buffer/package.json
@ -0,0 +1,37 @@
 {
  "name": "safe-buffer",
  "description": "Safer Node.js Buffer API",
  "version": "5.1.2",
  "author": {
    "name": "Feross Aboukhadijeh",
    "email": "feross@feross.org",
    "url": "http://feross.org"
  },
  "bugs": {
    "url": "https://github.com/feross/safe-buffer/issues"
  },
  "devDependencies": {
    "standard": "*",
    "tape": "^4.0.0"
  },
  "homepage": "https://github.com/feross/safe-buffer",
  "keywords": [
    "buffer",
    "buffer allocate",
    "node security",
    "safe",
    "safe-buffer",
    "security",
    "uninitialized"
  ],
  "license": "MIT",
  "main": "index.js",
  "types": "index.d.ts",
  "repository": {
    "type": "git",
    "url": "git://github.com/feross/safe-buffer.git"
  },
  "scripts": {
    "test": "standard && tape test/*.js"
  }
 }
--- a/node_modules/basic-auth/package.json
+++ b/node_modules/basic-auth/package.json
@ -0,0 +1,41 @@
 {
  "name": "basic-auth",
  "description": "node.js basic auth parser",
  "version": "2.0.1",
  "license": "MIT",
  "keywords": [
    "basic",
    "auth",
    "authorization",
    "basicauth"
  ],
  "repository": "jshttp/basic-auth",
  "dependencies": {
    "safe-buffer": "5.1.2"
  },
  "devDependencies": {
    "eslint": "5.6.0",
    "eslint-config-standard": "12.0.0",
    "eslint-plugin-import": "2.14.0",
    "eslint-plugin-markdown": "1.0.0-beta.6",
    "eslint-plugin-node": "7.0.1",
    "eslint-plugin-promise": "4.0.1",
    "eslint-plugin-standard": "4.0.0",
    "istanbul": "0.4.5",
    "mocha": "5.2.0"
  },
  "files": [
    "HISTORY.md",
    "LICENSE",
    "index.js"
  ],
  "engines": {
    "node": ">= 0.8"
  },
  "scripts": {
    "lint": "eslint --plugin markdown --ext js,md .",
    "test": "mocha --check-leaks --reporter spec --bail",
    "test-cov": "istanbul cover node_modules/mocha/bin/_mocha -- --reporter dot --check-leaks test/",
    "test-travis": "istanbul cover node_modules/mocha/bin/_mocha --report lcovonly -- --reporter spec --check-leaks test/"
  }
 }
--- a/node_modules/bcryptjs/LICENSE
+++ b/node_modules/bcryptjs/LICENSE
@ -0,0 +1,27 @@
 bcrypt.js
 ---------
 Copyright (c) 2012 Nevins Bartolomeo <nevins.bartolomeo@gmail.com>
 Copyright (c) 2012 Shane Girish <shaneGirish@gmail.com>
 Copyright (c) 2025 Daniel Wirtz <dcode@dcode.io>
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.
 3. The name of the author may not be used to endorse or promote products
   derived from this software without specific prior written permission.
 THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
--- a/node_modules/bcryptjs/README.md
+++ b/node_modules/bcryptjs/README.md
@ -0,0 +1,201 @@
 # bcrypt.js
 Optimized bcrypt in JavaScript with zero dependencies, with TypeScript support. Compatible to the C++
 [bcrypt](https://npmjs.org/package/bcrypt) binding on Node.js and also working in the browser.
 [![Build Status](https://img.shields.io/github/actions/workflow/status/dcodeIO/bcrypt.js/test.yml?branch=main&label=test&logo=github)](https://github.com/dcodeIO/bcrypt.js/actions/workflows/test.yml) [![Publish Status](https://img.shields.io/github/actions/workflow/status/dcodeIO/bcrypt.js/publish.yml?branch=main&label=publish&logo=github)](https://github.com/dcodeIO/bcrypt.js/actions/workflows/publish.yml) [![npm](https://img.shields.io/npm/v/bcryptjs.svg?label=npm&color=007acc&logo=npm)](https://www.npmjs.com/package/bcryptjs)
 ## Security considerations
 Besides incorporating a salt to protect against rainbow table attacks, bcrypt is an adaptive function: over time, the
 iteration count can be increased to make it slower, so it remains resistant to brute-force search attacks even with
 increasing computation power. ([see](http://en.wikipedia.org/wiki/Bcrypt))
 While bcrypt.js is compatible to the C++ bcrypt binding, it is written in pure JavaScript and thus slower ([about 30%](https://github.com/dcodeIO/bcrypt.js/wiki/Benchmark)), effectively reducing the number of iterations that can be
 processed in an equal time span.
 The maximum input length is 72 bytes (note that UTF-8 encoded characters use up to 4 bytes) and the length of generated
 hashes is 60 characters. Note that maximum input length is not implicitly checked by the library for compatibility with
 the C++ binding on Node.js, but should be checked with `bcrypt.truncates(password)` where necessary.
 ## Usage
 The package exports an ECMAScript module with an UMD fallback.
 ```
 $> npm install bcryptjs
 ```
 ```ts
 import bcrypt from "bcryptjs";
 ```
 ### Usage with a CDN
 - From GitHub via [jsDelivr](https://www.jsdelivr.com):<br />
  `https://cdn.jsdelivr.net/gh/dcodeIO/bcrypt.js@TAG/index.js` (ESM)
 - From npm via [jsDelivr](https://www.jsdelivr.com):<br />
  `https://cdn.jsdelivr.net/npm/bcryptjs@VERSION/index.js` (ESM)<br />
  `https://cdn.jsdelivr.net/npm/bcryptjs@VERSION/umd/index.js` (UMD)
 - From npm via [unpkg](https://unpkg.com):<br />
  `https://unpkg.com/bcryptjs@VERSION/index.js` (ESM)<br />
  `https://unpkg.com/bcryptjs@VERSION/umd/index.js` (UMD)
 Replace `TAG` respectively `VERSION` with a [specific version](https://github.com/dcodeIO/bcrypt.js/releases) or omit it (not recommended in production) to use latest.
 When using the ESM variant in a browser, the `crypto` import needs to be stubbed out, for example using an [import map](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script/type/importmap). Bundlers should omit it automatically.
 ### Usage - Sync
 To hash a password:
 ```ts
 const salt = bcrypt.genSaltSync(10);
 const hash = bcrypt.hashSync("B4c0/\/", salt);
 // Store hash in your password DB
 ```
 To check a password:
 ```ts
 // Load hash from your password DB
 bcrypt.compareSync("B4c0/\/", hash); // true
 bcrypt.compareSync("not_bacon", hash); // false
 ```
 Auto-gen a salt and hash:
 ```ts
 const hash = bcrypt.hashSync("bacon", 10);
 ```
 ### Usage - Async
 To hash a password:
 ```ts
 const salt = await bcrypt.genSalt(10);
 const hash = await bcrypt.hash("B4c0/\/", salt);
 // Store hash in your password DB
 ```
 ```ts
 bcrypt.genSalt(10, (err, salt) => {
  bcrypt.hash("B4c0/\/", salt, function (err, hash) {
    // Store hash in your password DB
  });
 });
 ```
 To check a password:
 ```ts
 // Load hash from your password DB
 await bcrypt.compare("B4c0/\/", hash); // true
 await bcrypt.compare("not_bacon", hash); // false
 ```
 ```ts
 // Load hash from your password DB
 bcrypt.compare("B4c0/\/", hash, (err, res) => {
  // res === true
 });
 bcrypt.compare("not_bacon", hash, (err, res) => {
  // res === false
 });
 ```
 Auto-gen a salt and hash:
 ```ts
 await bcrypt.hash("B4c0/\/", 10);
 // Store hash in your password DB
 ```
 ```ts
 bcrypt.hash("B4c0/\/", 10, (err, hash) => {
  // Store hash in your password DB
 });
 ```
 **Note:** Under the hood, asynchronous APIs split an operation into small chunks. After the completion of a chunk, the execution of the next chunk is placed on the back of the [JS event queue](https://developer.mozilla.org/en/docs/Web/JavaScript/EventLoop), efficiently yielding for other computation to execute.
 ### Usage - Command Line
 ```
 Usage: bcrypt <input> [rounds|salt]
 ```
 ## API
 ### Callback types
 - **Callback<`T`>**: `(err: Error | null, result?: T) => void`<br />
  Called with an error on failure or a value of type `T` upon success.
 - **ProgressCallback**: `(percentage: number) => void`<br />
  Called with the percentage of rounds completed (0.0 - 1.0), maximally once per `MAX_EXECUTION_TIME = 100` ms.
 - **RandomFallback**: `(length: number) => number[]`<br />
  Called to obtain random bytes when both [Web Crypto API](http://www.w3.org/TR/WebCryptoAPI/) and Node.js
  [crypto](http://nodejs.org/api/crypto.html) are not available.
 ### Functions
 - bcrypt.**genSaltSync**(rounds?: `number`): `string`<br />
  Synchronously generates a salt. Number of rounds defaults to 10 when omitted.
 - bcrypt.**genSalt**(rounds?: `number`): `Promise<string>`<br />
  Asynchronously generates a salt. Number of rounds defaults to 10 when omitted.
 - bcrypt.**genSalt**([rounds: `number`, ]callback: `Callback<string>`): `void`<br />
  Asynchronously generates a salt. Number of rounds defaults to 10 when omitted.
 - bcrypt.**truncates**(password: `string`): `boolean`<br />
  Tests if a password will be truncated when hashed, that is its length is greater than 72 bytes when converted to UTF-8.
 - bcrypt.**hashSync**(password: `string`, salt?: `number | string`): `string`
  Synchronously generates a hash for the given password. Number of rounds defaults to 10 when omitted.
 - bcrypt.**hash**(password: `string`, salt: `number | string`): `Promise<string>`<br />
  Asynchronously generates a hash for the given password.
 - bcrypt.**hash**(password: `string`, salt: `number | string`, callback: `Callback<string>`, progressCallback?: `ProgressCallback`): `void`<br />
  Asynchronously generates a hash for the given password.
 - bcrypt.**compareSync**(password: `string`, hash: `string`): `boolean`<br />
  Synchronously tests a password against a hash.
 - bcrypt.**compare**(password: `string`, hash: `string`): `Promise<boolean>`<br />
  Asynchronously compares a password against a hash.
 - bcrypt.**compare**(password: `string`, hash: `string`, callback: `Callback<boolean>`, progressCallback?: `ProgressCallback`)<br />
  Asynchronously compares a password against a hash.
 - bcrypt.**getRounds**(hash: `string`): `number`<br />
  Gets the number of rounds used to encrypt the specified hash.
 - bcrypt.**getSalt**(hash: `string`): `string`<br />
  Gets the salt portion from a hash. Does not validate the hash.
 - bcrypt.**setRandomFallback**(random: `RandomFallback`): `void`<br />
  Sets the pseudo random number generator to use as a fallback if neither [Web Crypto API](http://www.w3.org/TR/WebCryptoAPI/) nor Node.js [crypto](http://nodejs.org/api/crypto.html) are available. Please note: It is highly important that the PRNG used is cryptographically secure and that it is seeded properly!
 ## Building
 Building the UMD fallback:
 ```
 $> npm run build
 ```
 Running the [tests](./tests):
 ```
 $> npm test
 ```
 ## Credits
 Based on work started by Shane Girish at [bcrypt-nodejs](https://github.com/shaneGirish/bcrypt-nodejs), which is itself
 based on [javascript-bcrypt](http://code.google.com/p/javascript-bcrypt/) (New BSD-licensed).
--- a/node_modules/bcryptjs/bin/bcrypt
+++ b/node_modules/bcryptjs/bin/bcrypt
@ -0,0 +1,23 @@
 #!/usr/bin/env node
 import path from "node:path";
 import bcrypt from "../index.js";
 if (process.argv.length < 3) {
  console.log(
    "Usage: " + path.basename(process.argv[1]) + " <input> [rounds|salt]",
  );
  process.exit(1);
 } else {
  var salt;
  if (process.argv.length > 3) {
    salt = process.argv[3];
    var rounds = parseInt(salt, 10);
    if (rounds == salt) {
      salt = bcrypt.genSaltSync(rounds);
    }
  } else {
    salt = bcrypt.genSaltSync();
  }
  console.log(bcrypt.hashSync(process.argv[2], salt));
 }
--- a/node_modules/bcryptjs/index.d.ts
+++ b/node_modules/bcryptjs/index.d.ts
@ -0,0 +1,3 @@
 import * as bcrypt from "./types.js";
 export * from "./types.js";
 export default bcrypt;
--- a/node_modules/bcryptjs/index.js
+++ b/node_modules/bcryptjs/index.js
--- a/node_modules/bcryptjs/package.json
+++ b/node_modules/bcryptjs/package.json
@ -0,0 +1,76 @@
 {
  "name": "bcryptjs",
  "description": "Optimized bcrypt in plain JavaScript with zero dependencies, with TypeScript support. Compatible to 'bcrypt'.",
  "version": "3.0.2",
  "author": "Daniel Wirtz <dcode@dcode.io>",
  "contributors": [
    "Shane Girish <shaneGirish@gmail.com> (https://github.com/shaneGirish)",
    "Alex Murray <> (https://github.com/alexmurray)",
    "Nicolas Pelletier <> (https://github.com/NicolasPelletier)",
    "Josh Rogers <> (https://github.com/geekymole)",
    "Noah Isaacson <noah@nisaacson.com> (https://github.com/nisaacson)"
  ],
  "repository": {
    "type": "url",
    "url": "https://github.com/dcodeIO/bcrypt.js.git"
  },
  "bugs": {
    "url": "https://github.com/dcodeIO/bcrypt.js/issues"
  },
  "keywords": [
    "bcrypt",
    "password",
    "auth",
    "authentication",
    "encryption",
    "crypt",
    "crypto"
  ],
  "type": "module",
  "main": "umd/index.js",
  "types": "umd/index.d.ts",
  "exports": {
    ".": {
      "import": {
        "types": "./index.d.ts",
        "default": "./index.js"
      },
      "require": {
        "types": "./umd/index.d.ts",
        "default": "./umd/index.js"
      }
    }
  },
  "bin": {
    "bcrypt": "bin/bcrypt"
  },
  "license": "BSD-3-Clause",
  "scripts": {
    "build": "node scripts/build.js",
    "lint": "prettier --check .",
    "format": "prettier --write .",
    "test": "npm run test:unit && npm run test:typescript",
    "test:unit": "node tests",
    "test:typescript": "tsc --project tests/typescript/tsconfig.esnext.json && tsc --project tests/typescript/tsconfig.nodenext.json && tsc --project tests/typescript/tsconfig.commonjs.json && tsc --project tests/typescript/tsconfig.global.json"
  },
  "files": [
    "index.js",
    "index.d.ts",
    "types.d.ts",
    "umd/index.js",
    "umd/index.d.ts",
    "umd/types.d.ts",
    "umd/package.json",
    "LICENSE",
    "README.md"
  ],
  "browser": {
    "crypto": false
  },
  "devDependencies": {
    "bcrypt": "^5.1.1",
    "esm2umd": "^0.3.1",
    "prettier": "^3.5.0",
    "typescript": "^5.7.3"
  }
 }
--- a/node_modules/bcryptjs/types.d.ts
+++ b/node_modules/bcryptjs/types.d.ts
@ -0,0 +1,157 @@
 // Originally imported from https://github.com/DefinitelyTyped/DefinitelyTyped/blob/8b36dbdf95b624b8a7cd7f8416f06c15d274f9e6/types/bcryptjs/index.d.ts
 // MIT license.
 /** Called with an error on failure or a value of type `T` upon success. */
 type Callback<T> = (err: Error | null, result?: T) => void;
 /** Called with the percentage of rounds completed (0.0 - 1.0), maximally once per `MAX_EXECUTION_TIME = 100` ms. */
 type ProgressCallback = (percentage: number) => void;
 /** Called to obtain random bytes when both Web Crypto API and Node.js crypto are not available. */
 type RandomFallback = (length: number) => number[];
 /**
 * Sets the pseudo random number generator to use as a fallback if neither node's crypto module nor the Web Crypto API is available.
 * Please note: It is highly important that the PRNG used is cryptographically secure and that it is seeded properly!
 * @param  random Function taking the number of bytes to generate as its sole argument, returning the corresponding array of cryptographically secure random byte values.
 */
 export declare function setRandomFallback(random: RandomFallback): void;
 /**
 * Synchronously generates a salt.
 * @param  rounds Number of rounds to use, defaults to 10 if omitted
 * @return Resulting salt
 * @throws If a random fallback is required but not set
 */
 export declare function genSaltSync(rounds?: number): string;
 /**
 * Asynchronously generates a salt.
 * @param  rounds  Number of rounds to use, defaults to 10 if omitted
 * @return Promise with resulting salt, if callback has been omitted
 */
 export declare function genSalt(rounds?: number): Promise<string>;
 /**
 * Asynchronously generates a salt.
 * @param callback Callback receiving the error, if any, and the resulting salt
 */
 export declare function genSalt(callback: Callback<string>): void;
 /**
 * Asynchronously generates a salt.
 * @param  rounds   Number of rounds to use, defaults to 10 if omitted
 * @param  callback Callback receiving the error, if any, and the resulting salt
 */
 export declare function genSalt(
  rounds: number,
  callback: Callback<string>,
 ): void;
 /**
 * Synchronously generates a hash for the given password.
 * @param  password Password to hash
 * @param  salt Salt length to generate or salt to use, default to 10
 * @return Resulting hash
 */
 export declare function hashSync(
  password: string,
  salt?: number | string,
 ): string;
 /**
 * Asynchronously generates a hash for the given password.
 * @param password Password to hash
 * @param salt     Salt length to generate or salt to use
 * @return Promise with resulting hash, if callback has been omitted
 */
 export declare function hash(
  password: string,
  salt: number | string,
 ): Promise<string>;
 /**
 * Asynchronously generates a hash for the given password.
 * @param password         Password to hash
 * @param salt             Salt length to generate or salt to use
 * @param callback         Callback receiving the error, if any, and the resulting hash
 * @param progressCallback Callback successively called with the percentage of rounds completed (0.0 - 1.0), maximally once per MAX_EXECUTION_TIME = 100 ms.
 */
 export declare function hash(
  password: string,
  salt: number | string,
  callback?: Callback<string>,
  progressCallback?: ProgressCallback,
 ): void;
 /**
 * Synchronously tests a password against a hash.
 * @param  password Password to test
 * @param  hash     Hash to test against
 * @return true if matching, otherwise false
 */
 export declare function compareSync(password: string, hash: string): boolean;
 /**
 * Asynchronously tests a password against a hash.
 * @param  password Password to test
 * @param  hash     Hash to test against
 * @return Promise, if callback has been omitted
 */
 export declare function compare(
  password: string,
  hash: string,
 ): Promise<boolean>;
 /**
 * Asynchronously tests a password against a hash.
 * @param  password         Password to test
 * @param  hash             Hash to test against
 * @param  callback         Callback receiving the error, if any, otherwise the result
 * @param  progressCallback Callback successively called with the percentage of rounds completed (0.0 - 1.0), maximally once per MAX_EXECUTION_TIME = 100 ms.
 */
 export declare function compare(
  password: string,
  hash: string,
  callback?: Callback<boolean>,
  progressCallback?: ProgressCallback,
 ): void;
 /**
 * Gets the number of rounds used to encrypt the specified hash.
 * @param  hash Hash to extract the used number of rounds from
 * @return Number of rounds used
 */
 export declare function getRounds(hash: string): number;
 /**
 * Gets the salt portion from a hash. Does not validate the hash.
 * @param  hash Hash to extract the salt from
 * @return Extracted salt part
 */
 export declare function getSalt(hash: string): string;
 /**
 * Tests if a password will be truncated when hashed, that is its length is
 * greater than 72 bytes when converted to UTF-8.
 * @param password The password to test
 * @returns `true` if truncated, otherwise `false`
 */
 export declare function truncates(password: string): boolean;
 /**
 * Encodes a byte array to base64 with up to len bytes of input, using the custom bcrypt alphabet.
 * @function
 * @param b Byte array
 * @param len Maximum input length
 */
 export declare function encodeBase64(
  b: Readonly<ArrayLike<number>>,
  len: number,
 ): string;
 /**
 * Decodes a base64 encoded string to up to len bytes of output, using the custom bcrypt alphabet.
 * @function
 * @param s String to decode
 * @param len Maximum output length
 */
 export declare function decodeBase64(s: string, len: number): number[];
--- a/node_modules/bcryptjs/umd/index.d.ts
+++ b/node_modules/bcryptjs/umd/index.d.ts
@ -0,0 +1,3 @@
 import * as bcrypt from "./types.js";
 export = bcrypt;
 export as namespace bcrypt;
--- a/node_modules/bcryptjs/umd/index.js
+++ b/node_modules/bcryptjs/umd/index.js
--- a/node_modules/bcryptjs/umd/package.json
+++ b/node_modules/bcryptjs/umd/package.json
@ -0,0 +1,3 @@
 {
  "type": "commonjs"
 }
--- a/node_modules/bcryptjs/umd/types.d.ts
+++ b/node_modules/bcryptjs/umd/types.d.ts
@ -0,0 +1,157 @@
 // Originally imported from https://github.com/DefinitelyTyped/DefinitelyTyped/blob/8b36dbdf95b624b8a7cd7f8416f06c15d274f9e6/types/bcryptjs/index.d.ts
 // MIT license.
 /** Called with an error on failure or a value of type `T` upon success. */
 type Callback<T> = (err: Error | null, result?: T) => void;
 /** Called with the percentage of rounds completed (0.0 - 1.0), maximally once per `MAX_EXECUTION_TIME = 100` ms. */
 type ProgressCallback = (percentage: number) => void;
 /** Called to obtain random bytes when both Web Crypto API and Node.js crypto are not available. */
 type RandomFallback = (length: number) => number[];
 /**
 * Sets the pseudo random number generator to use as a fallback if neither node's crypto module nor the Web Crypto API is available.
 * Please note: It is highly important that the PRNG used is cryptographically secure and that it is seeded properly!
 * @param  random Function taking the number of bytes to generate as its sole argument, returning the corresponding array of cryptographically secure random byte values.
 */
 export declare function setRandomFallback(random: RandomFallback): void;
 /**
 * Synchronously generates a salt.
 * @param  rounds Number of rounds to use, defaults to 10 if omitted
 * @return Resulting salt
 * @throws If a random fallback is required but not set
 */
 export declare function genSaltSync(rounds?: number): string;
 /**
 * Asynchronously generates a salt.
 * @param  rounds  Number of rounds to use, defaults to 10 if omitted
 * @return Promise with resulting salt, if callback has been omitted
 */
 export declare function genSalt(rounds?: number): Promise<string>;
 /**
 * Asynchronously generates a salt.
 * @param callback Callback receiving the error, if any, and the resulting salt
 */
 export declare function genSalt(callback: Callback<string>): void;
 /**
 * Asynchronously generates a salt.
 * @param  rounds   Number of rounds to use, defaults to 10 if omitted
 * @param  callback Callback receiving the error, if any, and the resulting salt
 */
 export declare function genSalt(
  rounds: number,
  callback: Callback<string>,
 ): void;
 /**
 * Synchronously generates a hash for the given password.
 * @param  password Password to hash
 * @param  salt Salt length to generate or salt to use, default to 10
 * @return Resulting hash
 */
 export declare function hashSync(
  password: string,
  salt?: number | string,
 ): string;
 /**
 * Asynchronously generates a hash for the given password.
 * @param password Password to hash
 * @param salt     Salt length to generate or salt to use
 * @return Promise with resulting hash, if callback has been omitted
 */
 export declare function hash(
  password: string,
  salt: number | string,
 ): Promise<string>;
 /**
 * Asynchronously generates a hash for the given password.
 * @param password         Password to hash
 * @param salt             Salt length to generate or salt to use
 * @param callback         Callback receiving the error, if any, and the resulting hash
 * @param progressCallback Callback successively called with the percentage of rounds completed (0.0 - 1.0), maximally once per MAX_EXECUTION_TIME = 100 ms.
 */
 export declare function hash(
  password: string,
  salt: number | string,
  callback?: Callback<string>,
  progressCallback?: ProgressCallback,
 ): void;
 /**
 * Synchronously tests a password against a hash.
 * @param  password Password to test
 * @param  hash     Hash to test against
 * @return true if matching, otherwise false
 */
 export declare function compareSync(password: string, hash: string): boolean;
 /**
 * Asynchronously tests a password against a hash.
 * @param  password Password to test
 * @param  hash     Hash to test against
 * @return Promise, if callback has been omitted
 */
 export declare function compare(
  password: string,
  hash: string,
 ): Promise<boolean>;
 /**
 * Asynchronously tests a password against a hash.
 * @param  password         Password to test
 * @param  hash             Hash to test against
 * @param  callback         Callback receiving the error, if any, otherwise the result
 * @param  progressCallback Callback successively called with the percentage of rounds completed (0.0 - 1.0), maximally once per MAX_EXECUTION_TIME = 100 ms.
 */
 export declare function compare(
  password: string,
  hash: string,
  callback?: Callback<boolean>,
  progressCallback?: ProgressCallback,
 ): void;
 /**
 * Gets the number of rounds used to encrypt the specified hash.
 * @param  hash Hash to extract the used number of rounds from
 * @return Number of rounds used
 */
 export declare function getRounds(hash: string): number;
 /**
 * Gets the salt portion from a hash. Does not validate the hash.
 * @param  hash Hash to extract the salt from
 * @return Extracted salt part
 */
 export declare function getSalt(hash: string): string;
 /**
 * Tests if a password will be truncated when hashed, that is its length is
 * greater than 72 bytes when converted to UTF-8.
 * @param password The password to test
 * @returns `true` if truncated, otherwise `false`
 */
 export declare function truncates(password: string): boolean;
 /**
 * Encodes a byte array to base64 with up to len bytes of input, using the custom bcrypt alphabet.
 * @function
 * @param b Byte array
 * @param len Maximum input length
 */
 export declare function encodeBase64(
  b: Readonly<ArrayLike<number>>,
  len: number,
 ): string;
 /**
 * Decodes a base64 encoded string to up to len bytes of output, using the custom bcrypt alphabet.
 * @function
 * @param s String to decode
 * @param len Maximum output length
 */
 export declare function decodeBase64(s: string, len: number): number[];
--- a/node_modules/binary-extensions/binary-extensions.json
+++ b/node_modules/binary-extensions/binary-extensions.json
@ -0,0 +1,263 @@
 [
 	"3dm",
 	"3ds",
 	"3g2",
 	"3gp",
 	"7z",
 	"a",
 	"aac",
 	"adp",
 	"afdesign",
 	"afphoto",
 	"afpub",
 	"ai",
 	"aif",
 	"aiff",
 	"alz",
 	"ape",
 	"apk",
 	"appimage",
 	"ar",
 	"arj",
 	"asf",
 	"au",
 	"avi",
 	"bak",
 	"baml",
 	"bh",
 	"bin",
 	"bk",
 	"bmp",
 	"btif",
 	"bz2",
 	"bzip2",
 	"cab",
 	"caf",
 	"cgm",
 	"class",
 	"cmx",
 	"cpio",
 	"cr2",
 	"cur",
 	"dat",
 	"dcm",
 	"deb",
 	"dex",
 	"djvu",
 	"dll",
 	"dmg",
 	"dng",
 	"doc",
 	"docm",
 	"docx",
 	"dot",
 	"dotm",
 	"dra",
 	"DS_Store",
 	"dsk",
 	"dts",
 	"dtshd",
 	"dvb",
 	"dwg",
 	"dxf",
 	"ecelp4800",
 	"ecelp7470",
 	"ecelp9600",
 	"egg",
 	"eol",
 	"eot",
 	"epub",
 	"exe",
 	"f4v",
 	"fbs",
 	"fh",
 	"fla",
 	"flac",
 	"flatpak",
 	"fli",
 	"flv",
 	"fpx",
 	"fst",
 	"fvt",
 	"g3",
 	"gh",
 	"gif",
 	"graffle",
 	"gz",
 	"gzip",
 	"h261",
 	"h263",
 	"h264",
 	"icns",
 	"ico",
 	"ief",
 	"img",
 	"ipa",
 	"iso",
 	"jar",
 	"jpeg",
 	"jpg",
 	"jpgv",
 	"jpm",
 	"jxr",
 	"key",
 	"ktx",
 	"lha",
 	"lib",
 	"lvp",
 	"lz",
 	"lzh",
 	"lzma",
 	"lzo",
 	"m3u",
 	"m4a",
 	"m4v",
 	"mar",
 	"mdi",
 	"mht",
 	"mid",
 	"midi",
 	"mj2",
 	"mka",
 	"mkv",
 	"mmr",
 	"mng",
 	"mobi",
 	"mov",
 	"movie",
 	"mp3",
 	"mp4",
 	"mp4a",
 	"mpeg",
 	"mpg",
 	"mpga",
 	"mxu",
 	"nef",
 	"npx",
 	"numbers",
 	"nupkg",
 	"o",
 	"odp",
 	"ods",
 	"odt",
 	"oga",
 	"ogg",
 	"ogv",
 	"otf",
 	"ott",
 	"pages",
 	"pbm",
 	"pcx",
 	"pdb",
 	"pdf",
 	"pea",
 	"pgm",
 	"pic",
 	"png",
 	"pnm",
 	"pot",
 	"potm",
 	"potx",
 	"ppa",
 	"ppam",
 	"ppm",
 	"pps",
 	"ppsm",
 	"ppsx",
 	"ppt",
 	"pptm",
 	"pptx",
 	"psd",
 	"pya",
 	"pyc",
 	"pyo",
 	"pyv",
 	"qt",
 	"rar",
 	"ras",
 	"raw",
 	"resources",
 	"rgb",
 	"rip",
 	"rlc",
 	"rmf",
 	"rmvb",
 	"rpm",
 	"rtf",
 	"rz",
 	"s3m",
 	"s7z",
 	"scpt",
 	"sgi",
 	"shar",
 	"snap",
 	"sil",
 	"sketch",
 	"slk",
 	"smv",
 	"snk",
 	"so",
 	"stl",
 	"suo",
 	"sub",
 	"swf",
 	"tar",
 	"tbz",
 	"tbz2",
 	"tga",
 	"tgz",
 	"thmx",
 	"tif",
 	"tiff",
 	"tlz",
 	"ttc",
 	"ttf",
 	"txz",
 	"udf",
 	"uvh",
 	"uvi",
 	"uvm",
 	"uvp",
 	"uvs",
 	"uvu",
 	"viv",
 	"vob",
 	"war",
 	"wav",
 	"wax",
 	"wbmp",
 	"wdp",
 	"weba",
 	"webm",
 	"webp",
 	"whl",
 	"wim",
 	"wm",
 	"wma",
 	"wmv",
 	"wmx",
 	"woff",
 	"woff2",
 	"wrm",
 	"wvx",
 	"xbm",
 	"xif",
 	"xla",
 	"xlam",
 	"xls",
 	"xlsb",
 	"xlsm",
 	"xlsx",
 	"xlt",
 	"xltm",
 	"xltx",
 	"xm",
 	"xmind",
 	"xpi",
 	"xpm",
 	"xwd",
 	"xz",
 	"z",
 	"zip",
 	"zipx"
 ]
--- a/node_modules/binary-extensions/binary-extensions.json.d.ts
+++ b/node_modules/binary-extensions/binary-extensions.json.d.ts
@ -0,0 +1,3 @@
 declare const binaryExtensionsJson: readonly string[];
 export = binaryExtensionsJson;
--- a/node_modules/binary-extensions/index.d.ts
+++ b/node_modules/binary-extensions/index.d.ts
@ -0,0 +1,14 @@
 /**
 List of binary file extensions.
@example
 ```
 import binaryExtensions = require('binary-extensions');
 console.log(binaryExtensions);
 //=> ['3ds', '3g2', …]
 ```
 */
 declare const binaryExtensions: readonly string[];
 export = binaryExtensions;
--- a/node_modules/binary-extensions/index.js
+++ b/node_modules/binary-extensions/index.js
@ -0,0 +1 @@
 module.exports = require('./binary-extensions.json');
--- a/node_modules/binary-extensions/license
+++ b/node_modules/binary-extensions/license
@ -0,0 +1,10 @@
 MIT License
 Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
 Copyright (c) Paul Miller (https://paulmillr.com)
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
--- a/node_modules/binary-extensions/package.json
+++ b/node_modules/binary-extensions/package.json
@ -0,0 +1,40 @@
 {
 	"name": "binary-extensions",
 	"version": "2.3.0",
 	"description": "List of binary file extensions",
 	"license": "MIT",
 	"repository": "sindresorhus/binary-extensions",
 	"funding": "https://github.com/sponsors/sindresorhus",
 	"author": {
 		"name": "Sindre Sorhus",
 		"email": "sindresorhus@gmail.com",
 		"url": "https://sindresorhus.com"
 	},
 	"sideEffects": false,
 	"engines": {
 		"node": ">=8"
 	},
 	"scripts": {
 		"test": "xo && ava && tsd"
 	},
 	"files": [
 		"index.js",
 		"index.d.ts",
 		"binary-extensions.json",
 		"binary-extensions.json.d.ts"
 	],
 	"keywords": [
 		"binary",
 		"extensions",
 		"extension",
 		"file",
 		"json",
 		"list",
 		"array"
 	],
 	"devDependencies": {
 		"ava": "^1.4.1",
 		"tsd": "^0.7.2",
 		"xo": "^0.24.0"
 	}
 }
--- a/node_modules/binary-extensions/readme.md
+++ b/node_modules/binary-extensions/readme.md
@ -0,0 +1,25 @@
 # binary-extensions
 > List of binary file extensions
 The list is just a [JSON file](binary-extensions.json) and can be used anywhere.
 ## Install
 ```sh
 npm install binary-extensions
 ```
 ## Usage
 ```js
 const binaryExtensions = require('binary-extensions');
 console.log(binaryExtensions);
 //=> ['3ds', '3g2', …]
 ```
 ## Related
 - [is-binary-path](https://github.com/sindresorhus/is-binary-path) - Check if a filepath is a binary file
 - [text-extensions](https://github.com/sindresorhus/text-extensions) - List of text file extensions
--- a/node_modules/body-parser/HISTORY.md
+++ b/node_modules/body-parser/HISTORY.md
@ -0,0 +1,731 @@
 2.2.0 / 2025-03-27
 =========================
 * refactor: normalize common options for all parsers
 * deps:
  * iconv-lite@^0.6.3
 2.1.0 / 2025-02-10
 =========================
 * deps:
  * type-is@^2.0.0
  * debug@^4.4.0
  * Removed destroy
 * refactor: prefix built-in node module imports
 * use the node require cache instead of custom caching
 2.0.2 / 2024-10-31
 =========================
 * remove `unpipe` package and use native `unpipe()` method
 2.0.1 / 2024-09-10
 =========================
 * Restore expected behavior `extended` to `false`
 2.0.0 / 2024-09-10
 =========================
 * Propagate changes from 1.20.3 
 * add brotli support #406
 * Breaking Change: Node.js 18 is the minimum supported version
 2.0.0-beta.2 / 2023-02-23
 =========================
 This incorporates all changes after 1.19.1 up to 1.20.2.
  * Remove deprecated `bodyParser()` combination middleware
  * deps: debug@3.1.0
    - Add `DEBUG_HIDE_DATE` environment variable
    - Change timer to per-namespace instead of global
    - Change non-TTY date format
    - Remove `DEBUG_FD` environment variable support
    - Support 256 namespace colors
  * deps: iconv-lite@0.5.2
    - Add encoding cp720
    - Add encoding UTF-32
  * deps: raw-body@3.0.0-beta.1
 2.0.0-beta.1 / 2021-12-17
 =========================
  * Drop support for Node.js 0.8
  * `req.body` is no longer always initialized to `{}`
    - it is left `undefined` unless a body is parsed
  * `urlencoded` parser now defaults `extended` to `false`
  * Use `on-finished` to determine when body read
 1.20.3 / 2024-09-10
 ===================
  * deps: qs@6.13.0
  * add `depth` option to customize the depth level in the parser
  * IMPORTANT: The default `depth` level for parsing URL-encoded data is now `32` (previously was `Infinity`)
 1.20.2 / 2023-02-21
 ===================
  * Fix strict json error message on Node.js 19+
  * deps: content-type@~1.0.5
    - perf: skip value escaping when unnecessary
  * deps: raw-body@2.5.2
 1.20.1 / 2022-10-06
 ===================
  * deps: qs@6.11.0
  * perf: remove unnecessary object clone
 1.20.0 / 2022-04-02
 ===================
  * Fix error message for json parse whitespace in `strict`
  * Fix internal error when inflated body exceeds limit
  * Prevent loss of async hooks context
  * Prevent hanging when request already read
  * deps: depd@2.0.0
    - Replace internal `eval` usage with `Function` constructor
    - Use instance methods on `process` to check for listeners
  * deps: http-errors@2.0.0
    - deps: depd@2.0.0
    - deps: statuses@2.0.1
  * deps: on-finished@2.4.1
  * deps: qs@6.10.3
  * deps: raw-body@2.5.1
    - deps: http-errors@2.0.0
 1.19.2 / 2022-02-15
 ===================
  * deps: bytes@3.1.2
  * deps: qs@6.9.7
    * Fix handling of `__proto__` keys
  * deps: raw-body@2.4.3
    - deps: bytes@3.1.2
 1.19.1 / 2021-12-10
 ===================
  * deps: bytes@3.1.1
  * deps: http-errors@1.8.1
    - deps: inherits@2.0.4
    - deps: toidentifier@1.0.1
    - deps: setprototypeof@1.2.0
  * deps: qs@6.9.6
  * deps: raw-body@2.4.2
    - deps: bytes@3.1.1
    - deps: http-errors@1.8.1
  * deps: safe-buffer@5.2.1
  * deps: type-is@~1.6.18
 1.19.0 / 2019-04-25
 ===================
  * deps: bytes@3.1.0
    - Add petabyte (`pb`) support
  * deps: http-errors@1.7.2
    - Set constructor name when possible
    - deps: setprototypeof@1.1.1
    - deps: statuses@'>= 1.5.0 < 2'
  * deps: iconv-lite@0.4.24
    - Added encoding MIK
  * deps: qs@6.7.0
    - Fix parsing array brackets after index
  * deps: raw-body@2.4.0
    - deps: bytes@3.1.0
    - deps: http-errors@1.7.2
    - deps: iconv-lite@0.4.24
  * deps: type-is@~1.6.17
    - deps: mime-types@~2.1.24
    - perf: prevent internal `throw` on invalid type
 1.18.3 / 2018-05-14
 ===================
  * Fix stack trace for strict json parse error
  * deps: depd@~1.1.2
    - perf: remove argument reassignment
  * deps: http-errors@~1.6.3
    - deps: depd@~1.1.2
    - deps: setprototypeof@1.1.0
    - deps: statuses@'>= 1.3.1 < 2'
  * deps: iconv-lite@0.4.23
    - Fix loading encoding with year appended
    - Fix deprecation warnings on Node.js 10+
  * deps: qs@6.5.2
  * deps: raw-body@2.3.3
    - deps: http-errors@1.6.3
    - deps: iconv-lite@0.4.23
  * deps: type-is@~1.6.16
    - deps: mime-types@~2.1.18
 1.18.2 / 2017-09-22
 ===================
  * deps: debug@2.6.9
  * perf: remove argument reassignment
 1.18.1 / 2017-09-12
 ===================
  * deps: content-type@~1.0.4
    - perf: remove argument reassignment
    - perf: skip parameter parsing when no parameters
  * deps: iconv-lite@0.4.19
    - Fix ISO-8859-1 regression
    - Update Windows-1255
  * deps: qs@6.5.1
    - Fix parsing & compacting very deep objects
  * deps: raw-body@2.3.2
    - deps: iconv-lite@0.4.19
 1.18.0 / 2017-09-08
 ===================
  * Fix JSON strict violation error to match native parse error
  * Include the `body` property on verify errors
  * Include the `type` property on all generated errors
  * Use `http-errors` to set status code on errors
  * deps: bytes@3.0.0
  * deps: debug@2.6.8
  * deps: depd@~1.1.1
    - Remove unnecessary `Buffer` loading
  * deps: http-errors@~1.6.2
    - deps: depd@1.1.1
  * deps: iconv-lite@0.4.18
    - Add support for React Native
    - Add a warning if not loaded as utf-8
    - Fix CESU-8 decoding in Node.js 8
    - Improve speed of ISO-8859-1 encoding
  * deps: qs@6.5.0
  * deps: raw-body@2.3.1
    - Use `http-errors` for standard emitted errors
    - deps: bytes@3.0.0
    - deps: iconv-lite@0.4.18
    - perf: skip buffer decoding on overage chunk
  * perf: prevent internal `throw` when missing charset
 1.17.2 / 2017-05-17
 ===================
  * deps: debug@2.6.7
    - Fix `DEBUG_MAX_ARRAY_LENGTH`
    - deps: ms@2.0.0
  * deps: type-is@~1.6.15
    - deps: mime-types@~2.1.15
 1.17.1 / 2017-03-06
 ===================
  * deps: qs@6.4.0
    - Fix regression parsing keys starting with `[`
 1.17.0 / 2017-03-01
 ===================
  * deps: http-errors@~1.6.1
    - Make `message` property enumerable for `HttpError`s
    - deps: setprototypeof@1.0.3
  * deps: qs@6.3.1
    - Fix compacting nested arrays
 1.16.1 / 2017-02-10
 ===================
  * deps: debug@2.6.1
    - Fix deprecation messages in WebStorm and other editors
    - Undeprecate `DEBUG_FD` set to `1` or `2`
 1.16.0 / 2017-01-17
 ===================
  * deps: debug@2.6.0
    - Allow colors in workers
    - Deprecated `DEBUG_FD` environment variable
    - Fix error when running under React Native
    - Use same color for same namespace
    - deps: ms@0.7.2
  * deps: http-errors@~1.5.1
    - deps: inherits@2.0.3
    - deps: setprototypeof@1.0.2
    - deps: statuses@'>= 1.3.1 < 2'
  * deps: iconv-lite@0.4.15
    - Added encoding MS-31J
    - Added encoding MS-932
    - Added encoding MS-936
    - Added encoding MS-949
    - Added encoding MS-950
    - Fix GBK/GB18030 handling of Euro character
  * deps: qs@6.2.1
    - Fix array parsing from skipping empty values
  * deps: raw-body@~2.2.0
    - deps: iconv-lite@0.4.15
  * deps: type-is@~1.6.14
    - deps: mime-types@~2.1.13
 1.15.2 / 2016-06-19
 ===================
  * deps: bytes@2.4.0
  * deps: content-type@~1.0.2
    - perf: enable strict mode
  * deps: http-errors@~1.5.0
    - Use `setprototypeof` module to replace `__proto__` setting
    - deps: statuses@'>= 1.3.0 < 2'
    - perf: enable strict mode
  * deps: qs@6.2.0
  * deps: raw-body@~2.1.7
    - deps: bytes@2.4.0
    - perf: remove double-cleanup on happy path
  * deps: type-is@~1.6.13
    - deps: mime-types@~2.1.11
 1.15.1 / 2016-05-05
 ===================
  * deps: bytes@2.3.0
    - Drop partial bytes on all parsed units
    - Fix parsing byte string that looks like hex
  * deps: raw-body@~2.1.6
    - deps: bytes@2.3.0
  * deps: type-is@~1.6.12
    - deps: mime-types@~2.1.10
 1.15.0 / 2016-02-10
 ===================
  * deps: http-errors@~1.4.0
    - Add `HttpError` export, for `err instanceof createError.HttpError`
    - deps: inherits@2.0.1
    - deps: statuses@'>= 1.2.1 < 2'
  * deps: qs@6.1.0
  * deps: type-is@~1.6.11
    - deps: mime-types@~2.1.9
 1.14.2 / 2015-12-16
 ===================
  * deps: bytes@2.2.0
  * deps: iconv-lite@0.4.13
  * deps: qs@5.2.0
  * deps: raw-body@~2.1.5
    - deps: bytes@2.2.0
    - deps: iconv-lite@0.4.13
  * deps: type-is@~1.6.10
    - deps: mime-types@~2.1.8
 1.14.1 / 2015-09-27
 ===================
  * Fix issue where invalid charset results in 400 when `verify` used
  * deps: iconv-lite@0.4.12
    - Fix CESU-8 decoding in Node.js 4.x
  * deps: raw-body@~2.1.4
    - Fix masking critical errors from `iconv-lite`
    - deps: iconv-lite@0.4.12
  * deps: type-is@~1.6.9
    - deps: mime-types@~2.1.7
 1.14.0 / 2015-09-16
 ===================
  * Fix JSON strict parse error to match syntax errors
  * Provide static `require` analysis in `urlencoded` parser
  * deps: depd@~1.1.0
    - Support web browser loading
  * deps: qs@5.1.0
  * deps: raw-body@~2.1.3
    - Fix sync callback when attaching data listener causes sync read
  * deps: type-is@~1.6.8
    - Fix type error when given invalid type to match against
    - deps: mime-types@~2.1.6
 1.13.3 / 2015-07-31
 ===================
  * deps: type-is@~1.6.6
    - deps: mime-types@~2.1.4
 1.13.2 / 2015-07-05
 ===================
  * deps: iconv-lite@0.4.11
  * deps: qs@4.0.0
    - Fix dropping parameters like `hasOwnProperty`
    - Fix user-visible incompatibilities from 3.1.0
    - Fix various parsing edge cases
  * deps: raw-body@~2.1.2
    - Fix error stack traces to skip `makeError`
    - deps: iconv-lite@0.4.11
  * deps: type-is@~1.6.4
    - deps: mime-types@~2.1.2
    - perf: enable strict mode
    - perf: remove argument reassignment
 1.13.1 / 2015-06-16
 ===================
  * deps: qs@2.4.2
    - Downgraded from 3.1.0 because of user-visible incompatibilities
 1.13.0 / 2015-06-14
 ===================
  * Add `statusCode` property on `Error`s, in addition to `status`
  * Change `type` default to `application/json` for JSON parser
  * Change `type` default to `application/x-www-form-urlencoded` for urlencoded parser
  * Provide static `require` analysis
  * Use the `http-errors` module to generate errors
  * deps: bytes@2.1.0
    - Slight optimizations
  * deps: iconv-lite@0.4.10
    - The encoding UTF-16 without BOM now defaults to UTF-16LE when detection fails
    - Leading BOM is now removed when decoding
  * deps: on-finished@~2.3.0
    - Add defined behavior for HTTP `CONNECT` requests
    - Add defined behavior for HTTP `Upgrade` requests
    - deps: ee-first@1.1.1
  * deps: qs@3.1.0
    - Fix dropping parameters like `hasOwnProperty`
    - Fix various parsing edge cases
    - Parsed object now has `null` prototype
  * deps: raw-body@~2.1.1
    - Use `unpipe` module for unpiping requests
    - deps: iconv-lite@0.4.10
  * deps: type-is@~1.6.3
    - deps: mime-types@~2.1.1
    - perf: reduce try block size
    - perf: remove bitwise operations
  * perf: enable strict mode
  * perf: remove argument reassignment
  * perf: remove delete call
 1.12.4 / 2015-05-10
 ===================
  * deps: debug@~2.2.0
  * deps: qs@2.4.2
    - Fix allowing parameters like `constructor`
  * deps: on-finished@~2.2.1
  * deps: raw-body@~2.0.1
    - Fix a false-positive when unpiping in Node.js 0.8
    - deps: bytes@2.0.1
  * deps: type-is@~1.6.2
    - deps: mime-types@~2.0.11
 1.12.3 / 2015-04-15
 ===================
  * Slight efficiency improvement when not debugging
  * deps: depd@~1.0.1
  * deps: iconv-lite@0.4.8
    - Add encoding alias UNICODE-1-1-UTF-7
  * deps: raw-body@1.3.4
    - Fix hanging callback if request aborts during read
    - deps: iconv-lite@0.4.8
 1.12.2 / 2015-03-16
 ===================
  * deps: qs@2.4.1
    - Fix error when parameter `hasOwnProperty` is present
 1.12.1 / 2015-03-15
 ===================
  * deps: debug@~2.1.3
    - Fix high intensity foreground color for bold
    - deps: ms@0.7.0
  * deps: type-is@~1.6.1
    - deps: mime-types@~2.0.10
 1.12.0 / 2015-02-13
 ===================
  * add `debug` messages
  * accept a function for the `type` option
  * use `content-type` to parse `Content-Type` headers
  * deps: iconv-lite@0.4.7
    - Gracefully support enumerables on `Object.prototype`
  * deps: raw-body@1.3.3
    - deps: iconv-lite@0.4.7
  * deps: type-is@~1.6.0
    - fix argument reassignment
    - fix false-positives in `hasBody` `Transfer-Encoding` check
    - support wildcard for both type and subtype (`*/*`)
    - deps: mime-types@~2.0.9
 1.11.0 / 2015-01-30
 ===================
  * make internal `extended: true` depth limit infinity
  * deps: type-is@~1.5.6
    - deps: mime-types@~2.0.8
 1.10.2 / 2015-01-20
 ===================
  * deps: iconv-lite@0.4.6
    - Fix rare aliases of single-byte encodings
  * deps: raw-body@1.3.2
    - deps: iconv-lite@0.4.6
 1.10.1 / 2015-01-01
 ===================
  * deps: on-finished@~2.2.0
  * deps: type-is@~1.5.5
    - deps: mime-types@~2.0.7
 1.10.0 / 2014-12-02
 ===================
  * make internal `extended: true` array limit dynamic
 1.9.3 / 2014-11-21
 ==================
  * deps: iconv-lite@0.4.5
    - Fix Windows-31J and X-SJIS encoding support
  * deps: qs@2.3.3
    - Fix `arrayLimit` behavior
  * deps: raw-body@1.3.1
    - deps: iconv-lite@0.4.5
  * deps: type-is@~1.5.3
    - deps: mime-types@~2.0.3
 1.9.2 / 2014-10-27
 ==================
  * deps: qs@2.3.2
    - Fix parsing of mixed objects and values
 1.9.1 / 2014-10-22
 ==================
  * deps: on-finished@~2.1.1
    - Fix handling of pipelined requests
  * deps: qs@2.3.0
    - Fix parsing of mixed implicit and explicit arrays
  * deps: type-is@~1.5.2
    - deps: mime-types@~2.0.2
 1.9.0 / 2014-09-24
 ==================
  * include the charset in "unsupported charset" error message
  * include the encoding in "unsupported content encoding" error message
  * deps: depd@~1.0.0
 1.8.4 / 2014-09-23
 ==================
  * fix content encoding to be case-insensitive
 1.8.3 / 2014-09-19
 ==================
  * deps: qs@2.2.4
    - Fix issue with object keys starting with numbers truncated
 1.8.2 / 2014-09-15
 ==================
  * deps: depd@0.4.5
 1.8.1 / 2014-09-07
 ==================
  * deps: media-typer@0.3.0
  * deps: type-is@~1.5.1
 1.8.0 / 2014-09-05
 ==================
  * make empty-body-handling consistent between chunked requests
    - empty `json` produces `{}`
    - empty `raw` produces `new Buffer(0)`
    - empty `text` produces `''`
    - empty `urlencoded` produces `{}`
  * deps: qs@2.2.3
    - Fix issue where first empty value in array is discarded
  * deps: type-is@~1.5.0
    - fix `hasbody` to be true for `content-length: 0`
 1.7.0 / 2014-09-01
 ==================
  * add `parameterLimit` option to `urlencoded` parser
  * change `urlencoded` extended array limit to 100
  * respond with 413 when over `parameterLimit` in `urlencoded`
 1.6.7 / 2014-08-29
 ==================
  * deps: qs@2.2.2
    - Remove unnecessary cloning
 1.6.6 / 2014-08-27
 ==================
  * deps: qs@2.2.0
    - Array parsing fix
    - Performance improvements
 1.6.5 / 2014-08-16
 ==================
  * deps: on-finished@2.1.0
 1.6.4 / 2014-08-14
 ==================
  * deps: qs@1.2.2
 1.6.3 / 2014-08-10
 ==================
  * deps: qs@1.2.1
 1.6.2 / 2014-08-07
 ==================
  * deps: qs@1.2.0
    - Fix parsing array of objects
 1.6.1 / 2014-08-06
 ==================
  * deps: qs@1.1.0
    - Accept urlencoded square brackets
    - Accept empty values in implicit array notation
 1.6.0 / 2014-08-05
 ==================
  * deps: qs@1.0.2
    - Complete rewrite
    - Limits array length to 20
    - Limits object depth to 5
    - Limits parameters to 1,000
 1.5.2 / 2014-07-27
 ==================
  * deps: depd@0.4.4
    - Work-around v8 generating empty stack traces
 1.5.1 / 2014-07-26
 ==================
  * deps: depd@0.4.3
    - Fix exception when global `Error.stackTraceLimit` is too low
 1.5.0 / 2014-07-20
 ==================
  * deps: depd@0.4.2
    - Add `TRACE_DEPRECATION` environment variable
    - Remove non-standard grey color from color output
    - Support `--no-deprecation` argument
    - Support `--trace-deprecation` argument
  * deps: iconv-lite@0.4.4
    - Added encoding UTF-7
  * deps: raw-body@1.3.0
    - deps: iconv-lite@0.4.4
    - Added encoding UTF-7
    - Fix `Cannot switch to old mode now` error on Node.js 0.10+
  * deps: type-is@~1.3.2
 1.4.3 / 2014-06-19
 ==================
  * deps: type-is@1.3.1
    - fix global variable leak
 1.4.2 / 2014-06-19
 ==================
  * deps: type-is@1.3.0
    - improve type parsing
 1.4.1 / 2014-06-19
 ==================
  * fix urlencoded extended deprecation message
 1.4.0 / 2014-06-19
 ==================
  * add `text` parser
  * add `raw` parser
  * check accepted charset in content-type (accepts utf-8)
  * check accepted encoding in content-encoding (accepts identity)
  * deprecate `bodyParser()` middleware; use `.json()` and `.urlencoded()` as needed
  * deprecate `urlencoded()` without provided `extended` option
  * lazy-load urlencoded parsers
  * parsers split into files for reduced mem usage
  * support gzip and deflate bodies
    - set `inflate: false` to turn off
  * deps: raw-body@1.2.2
    - Support all encodings from `iconv-lite`
 1.3.1 / 2014-06-11
 ==================
  * deps: type-is@1.2.1
    - Switch dependency from mime to mime-types@1.0.0
 1.3.0 / 2014-05-31
 ==================
  * add `extended` option to urlencoded parser
 1.2.2 / 2014-05-27
 ==================
  * deps: raw-body@1.1.6
    - assert stream encoding on node.js 0.8
    - assert stream encoding on node.js < 0.10.6
    - deps: bytes@1
 1.2.1 / 2014-05-26
 ==================
  * invoke `next(err)` after request fully read
    - prevents hung responses and socket hang ups
 1.2.0 / 2014-05-11
 ==================
  * add `verify` option
  * deps: type-is@1.2.0
    - support suffix matching
 1.1.2 / 2014-05-11
 ==================
  * improve json parser speed
 1.1.1 / 2014-05-11
 ==================
  * fix repeated limit parsing with every request
 1.1.0 / 2014-05-10
 ==================
  * add `type` option
  * deps: pin for safety and consistency
 1.0.2 / 2014-04-14
 ==================
  * use `type-is` module
 1.0.1 / 2014-03-20
 ==================
  * lower default limits to 100kb
--- a/node_modules/body-parser/LICENSE
+++ b/node_modules/body-parser/LICENSE
@ -0,0 +1,23 @@
 (The MIT License)
 Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
 Copyright (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
 'Software'), to deal in the Software without restriction, including
 without limitation the rights to use, copy, modify, merge, publish,
 distribute, sublicense, and/or sell copies of the Software, and to
 permit persons to whom the Software is furnished to do so, subject to
 the following conditions:
 The above copyright notice and this permission notice shall be
 included in all copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
 EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
--- a/node_modules/body-parser/README.md
+++ b/node_modules/body-parser/README.md
@ -0,0 +1,491 @@
 # body-parser
 [![NPM Version][npm-version-image]][npm-url]
 [![NPM Downloads][npm-downloads-image]][npm-url]
 [![Build Status][ci-image]][ci-url]
 [![Test Coverage][coveralls-image]][coveralls-url]
 [![OpenSSF Scorecard Badge][ossf-scorecard-badge]][ossf-scorecard-visualizer]
 Node.js body parsing middleware.
 Parse incoming request bodies in a middleware before your handlers, available
 under the `req.body` property.
 **Note** As `req.body`'s shape is based on user-controlled input, all
 properties and values in this object are untrusted and should be validated
 before trusting. For example, `req.body.foo.toString()` may fail in multiple
 ways, for example the `foo` property may not be there or may not be a string,
 and `toString` may not be a function and instead a string or other user input.
 [Learn about the anatomy of an HTTP transaction in Node.js](https://nodejs.org/en/docs/guides/anatomy-of-an-http-transaction/).
 _This does not handle multipart bodies_, due to their complex and typically
 large nature. For multipart bodies, you may be interested in the following
 modules:
  * [busboy](https://www.npmjs.org/package/busboy#readme) and
    [connect-busboy](https://www.npmjs.org/package/connect-busboy#readme)
  * [multiparty](https://www.npmjs.org/package/multiparty#readme) and
    [connect-multiparty](https://www.npmjs.org/package/connect-multiparty#readme)
  * [formidable](https://www.npmjs.org/package/formidable#readme)
  * [multer](https://www.npmjs.org/package/multer#readme)
 This module provides the following parsers:
  * [JSON body parser](#bodyparserjsonoptions)
  * [Raw body parser](#bodyparserrawoptions)
  * [Text body parser](#bodyparsertextoptions)
  * [URL-encoded form body parser](#bodyparserurlencodedoptions)
 Other body parsers you might be interested in:
 - [body](https://www.npmjs.org/package/body#readme)
 - [co-body](https://www.npmjs.org/package/co-body#readme)
 ## Installation
 ```sh
 $ npm install body-parser
 ```
 ## API
 ```js
 const bodyParser = require('body-parser')
 ```
 The `bodyParser` object exposes various factories to create middlewares. All
 middlewares will populate the `req.body` property with the parsed body when
 the `Content-Type` request header matches the `type` option.
 The various errors returned by this module are described in the
 [errors section](#errors).
 ### bodyParser.json([options])
 Returns middleware that only parses `json` and only looks at requests where
 the `Content-Type` header matches the `type` option. This parser accepts any
 Unicode encoding of the body and supports automatic inflation of `gzip`,
 `br` (brotli) and `deflate` encodings.
 A new `body` object containing the parsed data is populated on the `request`
 object after the middleware (i.e. `req.body`).
 #### Options
 The `json` function takes an optional `options` object that may contain any of
 the following keys:
 ##### inflate
 When set to `true`, then deflated (compressed) bodies will be inflated; when
 `false`, deflated bodies are rejected. Defaults to `true`.
 ##### limit
 Controls the maximum request body size. If this is a number, then the value
 specifies the number of bytes; if it is a string, the value is passed to the
 [bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults
 to `'100kb'`.
 ##### reviver
 The `reviver` option is passed directly to `JSON.parse` as the second
 argument. You can find more information on this argument
 [in the MDN documentation about JSON.parse](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON/parse#Example.3A_Using_the_reviver_parameter).
 ##### strict
 When set to `true`, will only accept arrays and objects; when `false` will
 accept anything `JSON.parse` accepts. Defaults to `true`.
 ##### type
 The `type` option is used to determine what media type the middleware will
 parse. This option can be a string, array of strings, or a function. If not a
 function, `type` option is passed directly to the
 [type-is](https://www.npmjs.org/package/type-is#readme) library and this can
 be an extension name (like `json`), a mime type (like `application/json`), or
 a mime type with a wildcard (like `*/*` or `*/json`). If a function, the `type`
 option is called as `fn(req)` and the request is parsed if it returns a truthy
 value. Defaults to `application/json`.
 ##### verify
 The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`,
 where `buf` is a `Buffer` of the raw request body and `encoding` is the
 encoding of the request. The parsing can be aborted by throwing an error.
 ### bodyParser.raw([options])
 Returns middleware that parses all bodies as a `Buffer` and only looks at
 requests where the `Content-Type` header matches the `type` option. This
 parser supports automatic inflation of `gzip`, `br` (brotli) and `deflate`
 encodings.
 A new `body` object containing the parsed data is populated on the `request`
 object after the middleware (i.e. `req.body`). This will be a `Buffer` object
 of the body.
 #### Options
 The `raw` function takes an optional `options` object that may contain any of
 the following keys:
 ##### inflate
 When set to `true`, then deflated (compressed) bodies will be inflated; when
 `false`, deflated bodies are rejected. Defaults to `true`.
 ##### limit
 Controls the maximum request body size. If this is a number, then the value
 specifies the number of bytes; if it is a string, the value is passed to the
 [bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults
 to `'100kb'`.
 ##### type
 The `type` option is used to determine what media type the middleware will
 parse. This option can be a string, array of strings, or a function.
 If not a function, `type` option is passed directly to the
 [type-is](https://www.npmjs.org/package/type-is#readme) library and this
 can be an extension name (like `bin`), a mime type (like
 `application/octet-stream`), or a mime type with a wildcard (like `*/*` or
 `application/*`). If a function, the `type` option is called as `fn(req)`
 and the request is parsed if it returns a truthy value. Defaults to
 `application/octet-stream`.
 ##### verify
 The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`,
 where `buf` is a `Buffer` of the raw request body and `encoding` is the
 encoding of the request. The parsing can be aborted by throwing an error.
 ### bodyParser.text([options])
 Returns middleware that parses all bodies as a string and only looks at
 requests where the `Content-Type` header matches the `type` option. This
 parser supports automatic inflation of `gzip`, `br` (brotli) and `deflate`
 encodings.
 A new `body` string containing the parsed data is populated on the `request`
 object after the middleware (i.e. `req.body`). This will be a string of the
 body.
 #### Options
 The `text` function takes an optional `options` object that may contain any of
 the following keys:
 ##### defaultCharset
 Specify the default character set for the text content if the charset is not
 specified in the `Content-Type` header of the request. Defaults to `utf-8`.
 ##### inflate
 When set to `true`, then deflated (compressed) bodies will be inflated; when
 `false`, deflated bodies are rejected. Defaults to `true`.
 ##### limit
 Controls the maximum request body size. If this is a number, then the value
 specifies the number of bytes; if it is a string, the value is passed to the
 [bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults
 to `'100kb'`.
 ##### type
 The `type` option is used to determine what media type the middleware will
 parse. This option can be a string, array of strings, or a function. If not
 a function, `type` option is passed directly to the
 [type-is](https://www.npmjs.org/package/type-is#readme) library and this can
 be an extension name (like `txt`), a mime type (like `text/plain`), or a mime
 type with a wildcard (like `*/*` or `text/*`). If a function, the `type`
 option is called as `fn(req)` and the request is parsed if it returns a
 truthy value. Defaults to `text/plain`.
 ##### verify
 The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`,
 where `buf` is a `Buffer` of the raw request body and `encoding` is the
 encoding of the request. The parsing can be aborted by throwing an error.
 ### bodyParser.urlencoded([options])
 Returns middleware that only parses `urlencoded` bodies and only looks at
 requests where the `Content-Type` header matches the `type` option. This
 parser accepts only UTF-8 encoding of the body and supports automatic
 inflation of `gzip`, `br` (brotli) and `deflate` encodings.
 A new `body` object containing the parsed data is populated on the `request`
 object after the middleware (i.e. `req.body`). This object will contain
 key-value pairs, where the value can be a string or array (when `extended` is
 `false`), or any type (when `extended` is `true`).
 #### Options
 The `urlencoded` function takes an optional `options` object that may contain
 any of the following keys:
 ##### extended
 The "extended" syntax allows for rich objects and arrays to be encoded into the
 URL-encoded format, allowing for a JSON-like experience with URL-encoded. For
 more information, please [see the qs
 library](https://www.npmjs.org/package/qs#readme).
 Defaults to `false`.
 ##### inflate
 When set to `true`, then deflated (compressed) bodies will be inflated; when
 `false`, deflated bodies are rejected. Defaults to `true`.
 ##### limit
 Controls the maximum request body size. If this is a number, then the value
 specifies the number of bytes; if it is a string, the value is passed to the
 [bytes](https://www.npmjs.com/package/bytes) library for parsing. Defaults
 to `'100kb'`.
 ##### parameterLimit
 The `parameterLimit` option controls the maximum number of parameters that
 are allowed in the URL-encoded data. If a request contains more parameters
 than this value, a 413 will be returned to the client. Defaults to `1000`.
 ##### type
 The `type` option is used to determine what media type the middleware will
 parse. This option can be a string, array of strings, or a function. If not
 a function, `type` option is passed directly to the
 [type-is](https://www.npmjs.org/package/type-is#readme) library and this can
 be an extension name (like `urlencoded`), a mime type (like
 `application/x-www-form-urlencoded`), or a mime type with a wildcard (like
 `*/x-www-form-urlencoded`). If a function, the `type` option is called as
 `fn(req)` and the request is parsed if it returns a truthy value. Defaults
 to `application/x-www-form-urlencoded`.
 ##### verify
 The `verify` option, if supplied, is called as `verify(req, res, buf, encoding)`,
 where `buf` is a `Buffer` of the raw request body and `encoding` is the
 encoding of the request. The parsing can be aborted by throwing an error.
 ##### defaultCharset
 The default charset to parse as, if not specified in content-type. Must be
 either `utf-8` or `iso-8859-1`. Defaults to `utf-8`.
 ##### charsetSentinel
 Whether to let the value of the `utf8` parameter take precedence as the charset
 selector. It requires the form to contain a parameter named `utf8` with a value
 of `✓`. Defaults to `false`.
 ##### interpretNumericEntities
 Whether to decode numeric entities such as `&#9786;` when parsing an iso-8859-1
 form. Defaults to `false`.
 #### depth
 The `depth` option is used to configure the maximum depth of the `qs` library when `extended` is `true`. This allows you to limit the amount of keys that are parsed and can be useful to prevent certain types of abuse. Defaults to `32`. It is recommended to keep this value as low as possible.
 ## Errors
 The middlewares provided by this module create errors using the
 [`http-errors` module](https://www.npmjs.com/package/http-errors). The errors
 will typically have a `status`/`statusCode` property that contains the suggested
 HTTP response code, an `expose` property to determine if the `message` property
 should be displayed to the client, a `type` property to determine the type of
 error without matching against the `message`, and a `body` property containing
 the read body, if available.
 The following are the common errors created, though any error can come through
 for various reasons.
 ### content encoding unsupported
 This error will occur when the request had a `Content-Encoding` header that
 contained an encoding but the "inflation" option was set to `false`. The
 `status` property is set to `415`, the `type` property is set to
 `'encoding.unsupported'`, and the `charset` property will be set to the
 encoding that is unsupported.
 ### entity parse failed
 This error will occur when the request contained an entity that could not be
 parsed by the middleware. The `status` property is set to `400`, the `type`
 property is set to `'entity.parse.failed'`, and the `body` property is set to
 the entity value that failed parsing.
 ### entity verify failed
 This error will occur when the request contained an entity that could not be
 failed verification by the defined `verify` option. The `status` property is
 set to `403`, the `type` property is set to `'entity.verify.failed'`, and the
 `body` property is set to the entity value that failed verification.
 ### request aborted
 This error will occur when the request is aborted by the client before reading
 the body has finished. The `received` property will be set to the number of
 bytes received before the request was aborted and the `expected` property is
 set to the number of expected bytes. The `status` property is set to `400`
 and `type` property is set to `'request.aborted'`.
 ### request entity too large
 This error will occur when the request body's size is larger than the "limit"
 option. The `limit` property will be set to the byte limit and the `length`
 property will be set to the request body's length. The `status` property is
 set to `413` and the `type` property is set to `'entity.too.large'`.
 ### request size did not match content length
 This error will occur when the request's length did not match the length from
 the `Content-Length` header. This typically occurs when the request is malformed,
 typically when the `Content-Length` header was calculated based on characters
 instead of bytes. The `status` property is set to `400` and the `type` property
 is set to `'request.size.invalid'`.
 ### stream encoding should not be set
 This error will occur when something called the `req.setEncoding` method prior
 to this middleware. This module operates directly on bytes only and you cannot
 call `req.setEncoding` when using this module. The `status` property is set to
 `500` and the `type` property is set to `'stream.encoding.set'`.
 ### stream is not readable
 This error will occur when the request is no longer readable when this middleware
 attempts to read it. This typically means something other than a middleware from
 this module read the request body already and the middleware was also configured to
 read the same request. The `status` property is set to `500` and the `type`
 property is set to `'stream.not.readable'`.
 ### too many parameters
 This error will occur when the content of the request exceeds the configured
 `parameterLimit` for the `urlencoded` parser. The `status` property is set to
 `413` and the `type` property is set to `'parameters.too.many'`.
 ### unsupported charset "BOGUS"
 This error will occur when the request had a charset parameter in the
 `Content-Type` header, but the `iconv-lite` module does not support it OR the
 parser does not support it. The charset is contained in the message as well
 as in the `charset` property. The `status` property is set to `415`, the
 `type` property is set to `'charset.unsupported'`, and the `charset` property
 is set to the charset that is unsupported.
 ### unsupported content encoding "bogus"
 This error will occur when the request had a `Content-Encoding` header that
 contained an unsupported encoding. The encoding is contained in the message
 as well as in the `encoding` property. The `status` property is set to `415`,
 the `type` property is set to `'encoding.unsupported'`, and the `encoding`
 property is set to the encoding that is unsupported.
 ### The input exceeded the depth
 This error occurs when using `bodyParser.urlencoded` with the `extended` property set to `true` and the input exceeds the configured `depth` option. The `status` property is set to `400`. It is recommended to review the `depth` option and evaluate if it requires a higher value. When the `depth` option is set to `32` (default value), the error will not be thrown.
 ## Examples
 ### Express/Connect top-level generic
 This example demonstrates adding a generic JSON and URL-encoded parser as a
 top-level middleware, which will parse the bodies of all incoming requests.
 This is the simplest setup.
 ```js
 const express = require('express')
 const bodyParser = require('body-parser')
 const app = express()
 // parse application/x-www-form-urlencoded
 app.use(bodyParser.urlencoded())
 // parse application/json
 app.use(bodyParser.json())
 app.use(function (req, res) {
  res.setHeader('Content-Type', 'text/plain')
  res.write('you posted:\n')
  res.end(String(JSON.stringify(req.body, null, 2)))
 })
 ```
 ### Express route-specific
 This example demonstrates adding body parsers specifically to the routes that
 need them. In general, this is the most recommended way to use body-parser with
 Express.
 ```js
 const express = require('express')
 const bodyParser = require('body-parser')
 const app = express()
 // create application/json parser
 const jsonParser = bodyParser.json()
 // create application/x-www-form-urlencoded parser
 const urlencodedParser = bodyParser.urlencoded()
 // POST /login gets urlencoded bodies
 app.post('/login', urlencodedParser, function (req, res) {
  if (!req.body || !req.body.username) res.sendStatus(400)
  res.send('welcome, ' + req.body.username)
 })
 // POST /api/users gets JSON bodies
 app.post('/api/users', jsonParser, function (req, res) {
  if (!req.body) res.sendStatus(400)
  // create user in req.body
 })
 ```
 ### Change accepted type for parsers
 All the parsers accept a `type` option which allows you to change the
 `Content-Type` that the middleware will parse.
 ```js
 const express = require('express')
 const bodyParser = require('body-parser')
 const app = express()
 // parse various different custom JSON types as JSON
 app.use(bodyParser.json({ type: 'application/*+json' }))
 // parse some custom thing into a Buffer
 app.use(bodyParser.raw({ type: 'application/vnd.custom-type' }))
 // parse an HTML body into a string
 app.use(bodyParser.text({ type: 'text/html' }))
 ```
 ## License
 [MIT](LICENSE)
 [ci-image]: https://badgen.net/github/checks/expressjs/body-parser/master?label=ci
 [ci-url]: https://github.com/expressjs/body-parser/actions/workflows/ci.yml
 [coveralls-image]: https://badgen.net/coveralls/c/github/expressjs/body-parser/master
 [coveralls-url]: https://coveralls.io/r/expressjs/body-parser?branch=master
 [node-version-image]: https://badgen.net/npm/node/body-parser
 [node-version-url]: https://nodejs.org/en/download
 [npm-downloads-image]: https://badgen.net/npm/dm/body-parser
 [npm-url]: https://npmjs.org/package/body-parser
 [npm-version-image]: https://badgen.net/npm/v/body-parser
 [ossf-scorecard-badge]: https://api.scorecard.dev/projects/github.com/expressjs/body-parser/badge
 [ossf-scorecard-visualizer]: https://ossf.github.io/scorecard-visualizer/#/projects/github.com/expressjs/body-parser
--- a/node_modules/body-parser/index.js
+++ b/node_modules/body-parser/index.js
@ -0,0 +1,80 @@
 /*!
 * body-parser
 * Copyright(c) 2014-2015 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * @typedef Parsers
 * @type {function}
 * @property {function} json
 * @property {function} raw
 * @property {function} text
 * @property {function} urlencoded
 */
 /**
 * Module exports.
 * @type {Parsers}
 */
 exports = module.exports = bodyParser
 /**
 * JSON parser.
 * @public
 */
 Object.defineProperty(exports, 'json', {
  configurable: true,
  enumerable: true,
  get: () => require('./lib/types/json')
 })
 /**
 * Raw parser.
 * @public
 */
 Object.defineProperty(exports, 'raw', {
  configurable: true,
  enumerable: true,
  get: () => require('./lib/types/raw')
 })
 /**
 * Text parser.
 * @public
 */
 Object.defineProperty(exports, 'text', {
  configurable: true,
  enumerable: true,
  get: () => require('./lib/types/text')
 })
 /**
 * URL-encoded parser.
 * @public
 */
 Object.defineProperty(exports, 'urlencoded', {
  configurable: true,
  enumerable: true,
  get: () => require('./lib/types/urlencoded')
 })
 /**
 * Create a middleware to parse json and urlencoded bodies.
 *
 * @param {object} [options]
 * @return {function}
 * @deprecated
 * @public
 */
 function bodyParser () {
  throw new Error('The bodyParser() generic has been split into individual middleware to use instead.')
 }
--- a/node_modules/body-parser/lib/read.js
+++ b/node_modules/body-parser/lib/read.js
@ -0,0 +1,210 @@
 /*!
 * body-parser
 * Copyright(c) 2014-2015 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * Module dependencies.
 * @private
 */
 var createError = require('http-errors')
 var getBody = require('raw-body')
 var iconv = require('iconv-lite')
 var onFinished = require('on-finished')
 var zlib = require('node:zlib')
 /**
 * Module exports.
 */
 module.exports = read
 /**
 * Read a request into a buffer and parse.
 *
 * @param {object} req
 * @param {object} res
 * @param {function} next
 * @param {function} parse
 * @param {function} debug
 * @param {object} options
 * @private
 */
 function read (req, res, next, parse, debug, options) {
  var length
  var opts = options
  var stream
  // read options
  var encoding = opts.encoding !== null
    ? opts.encoding
    : null
  var verify = opts.verify
  try {
    // get the content stream
    stream = contentstream(req, debug, opts.inflate)
    length = stream.length
    stream.length = undefined
  } catch (err) {
    return next(err)
  }
  // set raw-body options
  opts.length = length
  opts.encoding = verify
    ? null
    : encoding
  // assert charset is supported
  if (opts.encoding === null && encoding !== null && !iconv.encodingExists(encoding)) {
    return next(createError(415, 'unsupported charset "' + encoding.toUpperCase() + '"', {
      charset: encoding.toLowerCase(),
      type: 'charset.unsupported'
    }))
  }
  // read body
  debug('read body')
  getBody(stream, opts, function (error, body) {
    if (error) {
      var _error
      if (error.type === 'encoding.unsupported') {
        // echo back charset
        _error = createError(415, 'unsupported charset "' + encoding.toUpperCase() + '"', {
          charset: encoding.toLowerCase(),
          type: 'charset.unsupported'
        })
      } else {
        // set status code on error
        _error = createError(400, error)
      }
      // unpipe from stream and destroy
      if (stream !== req) {
        req.unpipe()
        stream.destroy()
      }
      // read off entire request
      dump(req, function onfinished () {
        next(createError(400, _error))
      })
      return
    }
    // verify
    if (verify) {
      try {
        debug('verify body')
        verify(req, res, body, encoding)
      } catch (err) {
        next(createError(403, err, {
          body: body,
          type: err.type || 'entity.verify.failed'
        }))
        return
      }
    }
    // parse
    var str = body
    try {
      debug('parse body')
      str = typeof body !== 'string' && encoding !== null
        ? iconv.decode(body, encoding)
        : body
      req.body = parse(str, encoding)
    } catch (err) {
      next(createError(400, err, {
        body: str,
        type: err.type || 'entity.parse.failed'
      }))
      return
    }
    next()
  })
 }
 /**
 * Get the content stream of the request.
 *
 * @param {object} req
 * @param {function} debug
 * @param {boolean} [inflate=true]
 * @return {object}
 * @api private
 */
 function contentstream (req, debug, inflate) {
  var encoding = (req.headers['content-encoding'] || 'identity').toLowerCase()
  var length = req.headers['content-length']
  debug('content-encoding "%s"', encoding)
  if (inflate === false && encoding !== 'identity') {
    throw createError(415, 'content encoding unsupported', {
      encoding: encoding,
      type: 'encoding.unsupported'
    })
  }
  if (encoding === 'identity') {
    req.length = length
    return req
  }
  var stream = createDecompressionStream(encoding, debug)
  req.pipe(stream)
  return stream
 }
 /**
 * Create a decompression stream for the given encoding.
 * @param {string} encoding
 * @param {function} debug
 * @return {object}
 * @api private
 */
 function createDecompressionStream (encoding, debug) {
  switch (encoding) {
    case 'deflate':
      debug('inflate body')
      return zlib.createInflate()
    case 'gzip':
      debug('gunzip body')
      return zlib.createGunzip()
    case 'br':
      debug('brotli decompress body')
      return zlib.createBrotliDecompress()
    default:
      throw createError(415, 'unsupported content encoding "' + encoding + '"', {
        encoding: encoding,
        type: 'encoding.unsupported'
      })
  }
 }
 /**
 * Dump the contents of a request.
 *
 * @param {object} req
 * @param {function} callback
 * @api private
 */
 function dump (req, callback) {
  if (onFinished.isFinished(req)) {
    callback(null)
  } else {
    onFinished(req, callback)
    req.resume()
  }
 }
--- a/node_modules/body-parser/lib/types/json.js
+++ b/node_modules/body-parser/lib/types/json.js
@ -0,0 +1,206 @@
 /*!
 * body-parser
 * Copyright(c) 2014 Jonathan Ong
 * Copyright(c) 2014-2015 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * Module dependencies.
 * @private
 */
 var createError = require('http-errors')
 var debug = require('debug')('body-parser:json')
 var isFinished = require('on-finished').isFinished
 var read = require('../read')
 var typeis = require('type-is')
 var { getCharset, normalizeOptions } = require('../utils')
 /**
 * Module exports.
 */
 module.exports = json
 /**
 * RegExp to match the first non-space in a string.
 *
 * Allowed whitespace is defined in RFC 7159:
 *
 *    ws = *(
 *            %x20 /              ; Space
 *            %x09 /              ; Horizontal tab
 *            %x0A /              ; Line feed or New line
 *            %x0D )              ; Carriage return
 */
 var FIRST_CHAR_REGEXP = /^[\x20\x09\x0a\x0d]*([^\x20\x09\x0a\x0d])/ // eslint-disable-line no-control-regex
 var JSON_SYNTAX_CHAR = '#'
 var JSON_SYNTAX_REGEXP = /#+/g
 /**
 * Create a middleware to parse JSON bodies.
 *
 * @param {object} [options]
 * @return {function}
 * @public
 */
 function json (options) {
  var { inflate, limit, verify, shouldParse } = normalizeOptions(options, 'application/json')
  var reviver = options?.reviver
  var strict = options?.strict !== false
  function parse (body) {
    if (body.length === 0) {
      // special-case empty json body, as it's a common client-side mistake
      // TODO: maybe make this configurable or part of "strict" option
      return {}
    }
    if (strict) {
      var first = firstchar(body)
      if (first !== '{' && first !== '[') {
        debug('strict violation')
        throw createStrictSyntaxError(body, first)
      }
    }
    try {
      debug('parse json')
      return JSON.parse(body, reviver)
    } catch (e) {
      throw normalizeJsonSyntaxError(e, {
        message: e.message,
        stack: e.stack
      })
    }
  }
  return function jsonParser (req, res, next) {
    if (isFinished(req)) {
      debug('body already parsed')
      next()
      return
    }
    if (!('body' in req)) {
      req.body = undefined
    }
    // skip requests without bodies
    if (!typeis.hasBody(req)) {
      debug('skip empty body')
      next()
      return
    }
    debug('content-type %j', req.headers['content-type'])
    // determine if request should be parsed
    if (!shouldParse(req)) {
      debug('skip parsing')
      next()
      return
    }
    // assert charset per RFC 7159 sec 8.1
    var charset = getCharset(req) || 'utf-8'
    if (charset.slice(0, 4) !== 'utf-') {
      debug('invalid charset')
      next(createError(415, 'unsupported charset "' + charset.toUpperCase() + '"', {
        charset: charset,
        type: 'charset.unsupported'
      }))
      return
    }
    // read
    read(req, res, next, parse, debug, {
      encoding: charset,
      inflate,
      limit,
      verify
    })
  }
 }
 /**
 * Create strict violation syntax error matching native error.
 *
 * @param {string} str
 * @param {string} char
 * @return {Error}
 * @private
 */
 function createStrictSyntaxError (str, char) {
  var index = str.indexOf(char)
  var partial = ''
  if (index !== -1) {
    partial = str.substring(0, index) + JSON_SYNTAX_CHAR
    for (var i = index + 1; i < str.length; i++) {
      partial += JSON_SYNTAX_CHAR
    }
  }
  try {
    JSON.parse(partial); /* istanbul ignore next */ throw new SyntaxError('strict violation')
  } catch (e) {
    return normalizeJsonSyntaxError(e, {
      message: e.message.replace(JSON_SYNTAX_REGEXP, function (placeholder) {
        return str.substring(index, index + placeholder.length)
      }),
      stack: e.stack
    })
  }
 }
 /**
 * Get the first non-whitespace character in a string.
 *
 * @param {string} str
 * @return {function}
 * @private
 */
 function firstchar (str) {
  var match = FIRST_CHAR_REGEXP.exec(str)
  return match
    ? match[1]
    : undefined
 }
 /**
 * Normalize a SyntaxError for JSON.parse.
 *
 * @param {SyntaxError} error
 * @param {object} obj
 * @return {SyntaxError}
 */
 function normalizeJsonSyntaxError (error, obj) {
  var keys = Object.getOwnPropertyNames(error)
  for (var i = 0; i < keys.length; i++) {
    var key = keys[i]
    if (key !== 'stack' && key !== 'message') {
      delete error[key]
    }
  }
  // replace stack before message for Node.js 0.10 and below
  error.stack = obj.stack.replace(error.message, obj.message)
  error.message = obj.message
  return error
 }
--- a/node_modules/body-parser/lib/types/raw.js
+++ b/node_modules/body-parser/lib/types/raw.js
@ -0,0 +1,75 @@
 /*!
 * body-parser
 * Copyright(c) 2014-2015 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * Module dependencies.
 */
 var debug = require('debug')('body-parser:raw')
 var isFinished = require('on-finished').isFinished
 var read = require('../read')
 var typeis = require('type-is')
 var { normalizeOptions } = require('../utils')
 /**
 * Module exports.
 */
 module.exports = raw
 /**
 * Create a middleware to parse raw bodies.
 *
 * @param {object} [options]
 * @return {function}
 * @api public
 */
 function raw (options) {
  var { inflate, limit, verify, shouldParse } = normalizeOptions(options, 'application/octet-stream')
  function parse (buf) {
    return buf
  }
  return function rawParser (req, res, next) {
    if (isFinished(req)) {
      debug('body already parsed')
      next()
      return
    }
    if (!('body' in req)) {
      req.body = undefined
    }
    // skip requests without bodies
    if (!typeis.hasBody(req)) {
      debug('skip empty body')
      next()
      return
    }
    debug('content-type %j', req.headers['content-type'])
    // determine if request should be parsed
    if (!shouldParse(req)) {
      debug('skip parsing')
      next()
      return
    }
    // read
    read(req, res, next, parse, debug, {
      encoding: null,
      inflate,
      limit,
      verify
    })
  }
 }
--- a/node_modules/body-parser/lib/types/text.js
+++ b/node_modules/body-parser/lib/types/text.js
@ -0,0 +1,80 @@
 /*!
 * body-parser
 * Copyright(c) 2014-2015 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * Module dependencies.
 */
 var debug = require('debug')('body-parser:text')
 var isFinished = require('on-finished').isFinished
 var read = require('../read')
 var typeis = require('type-is')
 var { getCharset, normalizeOptions } = require('../utils')
 /**
 * Module exports.
 */
 module.exports = text
 /**
 * Create a middleware to parse text bodies.
 *
 * @param {object} [options]
 * @return {function}
 * @api public
 */
 function text (options) {
  var { inflate, limit, verify, shouldParse } = normalizeOptions(options, 'text/plain')
  var defaultCharset = options?.defaultCharset || 'utf-8'
  function parse (buf) {
    return buf
  }
  return function textParser (req, res, next) {
    if (isFinished(req)) {
      debug('body already parsed')
      next()
      return
    }
    if (!('body' in req)) {
      req.body = undefined
    }
    // skip requests without bodies
    if (!typeis.hasBody(req)) {
      debug('skip empty body')
      next()
      return
    }
    debug('content-type %j', req.headers['content-type'])
    // determine if request should be parsed
    if (!shouldParse(req)) {
      debug('skip parsing')
      next()
      return
    }
    // get charset
    var charset = getCharset(req) || defaultCharset
    // read
    read(req, res, next, parse, debug, {
      encoding: charset,
      inflate,
      limit,
      verify
    })
  }
 }
--- a/node_modules/body-parser/lib/types/urlencoded.js
+++ b/node_modules/body-parser/lib/types/urlencoded.js
@ -0,0 +1,177 @@
 /*!
 * body-parser
 * Copyright(c) 2014 Jonathan Ong
 * Copyright(c) 2014-2015 Douglas Christopher Wilson
 * MIT Licensed
 */
 'use strict'
 /**
 * Module dependencies.
 * @private
 */
 var createError = require('http-errors')
 var debug = require('debug')('body-parser:urlencoded')
 var isFinished = require('on-finished').isFinished
 var read = require('../read')
 var typeis = require('type-is')
 var qs = require('qs')
 var { getCharset, normalizeOptions } = require('../utils')
 /**
 * Module exports.
 */
 module.exports = urlencoded
 /**
 * Create a middleware to parse urlencoded bodies.
 *
 * @param {object} [options]
 * @return {function}
 * @public
 */
 function urlencoded (options) {
  var { inflate, limit, verify, shouldParse } = normalizeOptions(options, 'application/x-www-form-urlencoded')
  var defaultCharset = options?.defaultCharset || 'utf-8'
  if (defaultCharset !== 'utf-8' && defaultCharset !== 'iso-8859-1') {
    throw new TypeError('option defaultCharset must be either utf-8 or iso-8859-1')
  }
  // create the appropriate query parser
  var queryparse = createQueryParser(options)
  function parse (body, encoding) {
    return body.length
      ? queryparse(body, encoding)
      : {}
  }
  return function urlencodedParser (req, res, next) {
    if (isFinished(req)) {
      debug('body already parsed')
      next()
      return
    }
    if (!('body' in req)) {
      req.body = undefined
    }
    // skip requests without bodies
    if (!typeis.hasBody(req)) {
      debug('skip empty body')
      next()
      return
    }
    debug('content-type %j', req.headers['content-type'])
    // determine if request should be parsed
    if (!shouldParse(req)) {
      debug('skip parsing')
      next()
      return
    }
    // assert charset
    var charset = getCharset(req) || defaultCharset
    if (charset !== 'utf-8' && charset !== 'iso-8859-1') {
      debug('invalid charset')
      next(createError(415, 'unsupported charset "' + charset.toUpperCase() + '"', {
        charset: charset,
        type: 'charset.unsupported'
      }))
      return
    }
    // read
    read(req, res, next, parse, debug, {
      encoding: charset,
      inflate,
      limit,
      verify
    })
  }
 }
 /**
 * Get the extended query parser.
 *
 * @param {object} options
 */
 function createQueryParser (options) {
  var extended = Boolean(options?.extended)
  var parameterLimit = options?.parameterLimit !== undefined
    ? options?.parameterLimit
    : 1000
  var charsetSentinel = options?.charsetSentinel
  var interpretNumericEntities = options?.interpretNumericEntities
  var depth = extended ? (options?.depth !== undefined ? options?.depth : 32) : 0
  if (isNaN(parameterLimit) || parameterLimit < 1) {
    throw new TypeError('option parameterLimit must be a positive number')
  }
  if (isNaN(depth) || depth < 0) {
    throw new TypeError('option depth must be a zero or a positive number')
  }
  if (isFinite(parameterLimit)) {
    parameterLimit = parameterLimit | 0
  }
  return function queryparse (body, encoding) {
    var paramCount = parameterCount(body, parameterLimit)
    if (paramCount === undefined) {
      debug('too many parameters')
      throw createError(413, 'too many parameters', {
        type: 'parameters.too.many'
      })
    }
    var arrayLimit = extended ? Math.max(100, paramCount) : 0
    debug('parse ' + (extended ? 'extended ' : '') + 'urlencoding')
    try {
      return qs.parse(body, {
        allowPrototypes: true,
        arrayLimit: arrayLimit,
        depth: depth,
        charsetSentinel: charsetSentinel,
        interpretNumericEntities: interpretNumericEntities,
        charset: encoding,
        parameterLimit: parameterLimit,
        strictDepth: true
      })
    } catch (err) {
      if (err instanceof RangeError) {
        throw createError(400, 'The input exceeded the depth', {
          type: 'querystring.parse.rangeError'
        })
      } else {
        throw err
      }
    }
  }
 }
 /**
 * Count the number of parameters, stopping once limit reached
 *
 * @param {string} body
 * @param {number} limit
 * @api private
 */
 function parameterCount (body, limit) {
  var len = body.split('&').length
  return len > limit ? undefined : len - 1
 }
--- a/node_modules/body-parser/lib/utils.js
+++ b/node_modules/body-parser/lib/utils.js
@ -0,0 +1,83 @@
 'use strict'
 /**
 * Module dependencies.
 */
 var bytes = require('bytes')
 var contentType = require('content-type')
 var typeis = require('type-is')
 /**
 * Module exports.
 */
 module.exports = {
  getCharset,
  normalizeOptions
 }
 /**
 * Get the charset of a request.
 *
 * @param {object} req
 * @api private
 */
 function getCharset (req) {
  try {
    return (contentType.parse(req).parameters.charset || '').toLowerCase()
  } catch {
    return undefined
  }
 }
 /**
 * Get the simple type checker.
 *
 * @param {string | string[]} type
 * @return {function}
 */
 function typeChecker (type) {
  return function checkType (req) {
    return Boolean(typeis(req, type))
  }
 }
 /**
 * Normalizes the common options for all parsers.
 *
 * @param {object} options options to normalize
 * @param {string | string[] | function} defaultType default content type(s) or a function to determine it
 * @returns {object}
 */
 function normalizeOptions (options, defaultType) {
  if (!defaultType) {
    // Parsers must define a default content type
    throw new TypeError('defaultType must be provided')
  }
  var inflate = options?.inflate !== false
  var limit = typeof options?.limit !== 'number'
    ? bytes.parse(options?.limit || '100kb')
    : options?.limit
  var type = options?.type || defaultType
  var verify = options?.verify || false
  if (verify !== false && typeof verify !== 'function') {
    throw new TypeError('option verify must be function')
  }
  // create the appropriate type checking function
  var shouldParse = typeof type !== 'function'
    ? typeChecker(type)
    : type
  return {
    inflate,
    limit,
    verify,
    shouldParse
  }
 }
--- a/node_modules/body-parser/package.json
+++ b/node_modules/body-parser/package.json
@ -0,0 +1,49 @@
 {
  "name": "body-parser",
  "description": "Node.js body parsing middleware",
  "version": "2.2.0",
  "contributors": [
    "Douglas Christopher Wilson <doug@somethingdoug.com>",
    "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
  ],
  "license": "MIT",
  "repository": "expressjs/body-parser",
  "dependencies": {
    "bytes": "^3.1.2",
    "content-type": "^1.0.5",
    "debug": "^4.4.0",
    "http-errors": "^2.0.0",
    "iconv-lite": "^0.6.3",
    "on-finished": "^2.4.1",
    "qs": "^6.14.0",
    "raw-body": "^3.0.0",
    "type-is": "^2.0.0"
  },
  "devDependencies": {
    "eslint": "8.34.0",
    "eslint-config-standard": "14.1.1",
    "eslint-plugin-import": "2.27.5",
    "eslint-plugin-markdown": "3.0.0",
    "eslint-plugin-node": "11.1.0",
    "eslint-plugin-promise": "6.1.1",
    "eslint-plugin-standard": "4.1.0",
    "mocha": "^11.1.0",
    "nyc": "^17.1.0",
    "supertest": "^7.0.0"
  },
  "files": [
    "lib/",
    "LICENSE",
    "HISTORY.md",
    "index.js"
  ],
  "engines": {
    "node": ">=18"
  },
  "scripts": {
    "lint": "eslint .",
    "test": "mocha --reporter spec --check-leaks test/",
    "test-ci": "nyc --reporter=lcovonly --reporter=text npm test",
    "test-cov": "nyc --reporter=html --reporter=text npm test"
  }
 }
--- a/node_modules/brace-expansion/LICENSE
+++ b/node_modules/brace-expansion/LICENSE
@ -0,0 +1,21 @@
 MIT License
 Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
--- a/node_modules/brace-expansion/README.md
+++ b/node_modules/brace-expansion/README.md
@ -0,0 +1,129 @@
 # brace-expansion
 [Brace expansion](https://www.gnu.org/software/bash/manual/html_node/Brace-Expansion.html), 
 as known from sh/bash, in JavaScript.
 [![build status](https://secure.travis-ci.org/juliangruber/brace-expansion.svg)](http://travis-ci.org/juliangruber/brace-expansion)
 [![downloads](https://img.shields.io/npm/dm/brace-expansion.svg)](https://www.npmjs.org/package/brace-expansion)
 [![Greenkeeper badge](https://badges.greenkeeper.io/juliangruber/brace-expansion.svg)](https://greenkeeper.io/)
 [![testling badge](https://ci.testling.com/juliangruber/brace-expansion.png)](https://ci.testling.com/juliangruber/brace-expansion)
 ## Example
 ```js
 var expand = require('brace-expansion');
 expand('file-{a,b,c}.jpg')
 // => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
 expand('-v{,,}')
 // => ['-v', '-v', '-v']
 expand('file{0..2}.jpg')
 // => ['file0.jpg', 'file1.jpg', 'file2.jpg']
 expand('file-{a..c}.jpg')
 // => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
 expand('file{2..0}.jpg')
 // => ['file2.jpg', 'file1.jpg', 'file0.jpg']
 expand('file{0..4..2}.jpg')
 // => ['file0.jpg', 'file2.jpg', 'file4.jpg']
 expand('file-{a..e..2}.jpg')
 // => ['file-a.jpg', 'file-c.jpg', 'file-e.jpg']
 expand('file{00..10..5}.jpg')
 // => ['file00.jpg', 'file05.jpg', 'file10.jpg']
 expand('{{A..C},{a..c}}')
 // => ['A', 'B', 'C', 'a', 'b', 'c']
 expand('ppp{,config,oe{,conf}}')
 // => ['ppp', 'pppconfig', 'pppoe', 'pppoeconf']
 ```
 ## API
 ```js
 var expand = require('brace-expansion');
 ```
 ### var expanded = expand(str)
 Return an array of all possible and valid expansions of `str`. If none are
 found, `[str]` is returned.
 Valid expansions are:
 ```js
 /^(.*,)+(.+)?$/
 // {a,b,...}
 ```
 A comma separated list of options, like `{a,b}` or `{a,{b,c}}` or `{,a,}`.
 ```js
 /^-?\d+\.\.-?\d+(\.\.-?\d+)?$/
 // {x..y[..incr]}
 ```
 A numeric sequence from `x` to `y` inclusive, with optional increment.
 If `x` or `y` start with a leading `0`, all the numbers will be padded
 to have equal length. Negative numbers and backwards iteration work too.
 ```js
 /^-?\d+\.\.-?\d+(\.\.-?\d+)?$/
 // {x..y[..incr]}
 ```
 An alphabetic sequence from `x` to `y` inclusive, with optional increment.
 `x` and `y` must be exactly one character, and if given, `incr` must be a
 number.
 For compatibility reasons, the string `${` is not eligible for brace expansion.
 ## Installation
 With [npm](https://npmjs.org) do:
 ```bash
 npm install brace-expansion
 ```
 ## Contributors
 - [Julian Gruber](https://github.com/juliangruber)
 - [Isaac Z. Schlueter](https://github.com/isaacs)
 ## Sponsors
 This module is proudly supported by my [Sponsors](https://github.com/juliangruber/sponsors)!
 Do you want to support modules like this to improve their quality, stability and weigh in on new features? Then please consider donating to my [Patreon](https://www.patreon.com/juliangruber). Not sure how much of my modules you're using? Try [feross/thanks](https://github.com/feross/thanks)!
 ## License
 (MIT)
 Copyright (c) 2013 Julian Gruber &lt;julian@juliangruber.com&gt;
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in
 the Software without restriction, including without limitation the rights to
 use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
 of the Software, and to permit persons to whom the Software is furnished to do
 so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
--- a/node_modules/brace-expansion/index.js
+++ b/node_modules/brace-expansion/index.js
@ -0,0 +1,201 @@
 var concatMap = require('concat-map');
 var balanced = require('balanced-match');
 module.exports = expandTop;
 var escSlash = '\0SLASH'+Math.random()+'\0';
 var escOpen = '\0OPEN'+Math.random()+'\0';
 var escClose = '\0CLOSE'+Math.random()+'\0';
 var escComma = '\0COMMA'+Math.random()+'\0';
 var escPeriod = '\0PERIOD'+Math.random()+'\0';
 function numeric(str) {
  return parseInt(str, 10) == str
    ? parseInt(str, 10)
    : str.charCodeAt(0);
 }
 function escapeBraces(str) {
  return str.split('\\\\').join(escSlash)
            .split('\\{').join(escOpen)
            .split('\\}').join(escClose)
            .split('\\,').join(escComma)
            .split('\\.').join(escPeriod);
 }
 function unescapeBraces(str) {
  return str.split(escSlash).join('\\')
            .split(escOpen).join('{')
            .split(escClose).join('}')
            .split(escComma).join(',')
            .split(escPeriod).join('.');
 }
 // Basically just str.split(","), but handling cases
 // where we have nested braced sections, which should be
 // treated as individual members, like {a,{b,c},d}
 function parseCommaParts(str) {
  if (!str)
    return [''];
  var parts = [];
  var m = balanced('{', '}', str);
  if (!m)
    return str.split(',');
  var pre = m.pre;
  var body = m.body;
  var post = m.post;
  var p = pre.split(',');
  p[p.length-1] += '{' + body + '}';
  var postParts = parseCommaParts(post);
  if (post.length) {
    p[p.length-1] += postParts.shift();
    p.push.apply(p, postParts);
  }
  parts.push.apply(parts, p);
  return parts;
 }
 function expandTop(str) {
  if (!str)
    return [];
  // I don't know why Bash 4.3 does this, but it does.
  // Anything starting with {} will have the first two bytes preserved
  // but *only* at the top level, so {},a}b will not expand to anything,
  // but a{},b}c will be expanded to [a}c,abc].
  // One could argue that this is a bug in Bash, but since the goal of
  // this module is to match Bash's rules, we escape a leading {}
  if (str.substr(0, 2) === '{}') {
    str = '\\{\\}' + str.substr(2);
  }
  return expand(escapeBraces(str), true).map(unescapeBraces);
 }
 function identity(e) {
  return e;
 }
 function embrace(str) {
  return '{' + str + '}';
 }
 function isPadded(el) {
  return /^-?0\d/.test(el);
 }
 function lte(i, y) {
  return i <= y;
 }
 function gte(i, y) {
  return i >= y;
 }
 function expand(str, isTop) {
  var expansions = [];
  var m = balanced('{', '}', str);
  if (!m || /\$$/.test(m.pre)) return [str];
  var isNumericSequence = /^-?\d+\.\.-?\d+(?:\.\.-?\d+)?$/.test(m.body);
  var isAlphaSequence = /^[a-zA-Z]\.\.[a-zA-Z](?:\.\.-?\d+)?$/.test(m.body);
  var isSequence = isNumericSequence || isAlphaSequence;
  var isOptions = m.body.indexOf(',') >= 0;
  if (!isSequence && !isOptions) {
    // {a},b}
    if (m.post.match(/,(?!,).*\}/)) {
      str = m.pre + '{' + m.body + escClose + m.post;
      return expand(str);
    }
    return [str];
  }
  var n;
  if (isSequence) {
    n = m.body.split(/\.\./);
  } else {
    n = parseCommaParts(m.body);
    if (n.length === 1) {
      // x{{a,b}}y ==> x{a}y x{b}y
      n = expand(n[0], false).map(embrace);
      if (n.length === 1) {
        var post = m.post.length
          ? expand(m.post, false)
          : [''];
        return post.map(function(p) {
          return m.pre + n[0] + p;
        });
      }
    }
  }
  // at this point, n is the parts, and we know it's not a comma set
  // with a single entry.
  // no need to expand pre, since it is guaranteed to be free of brace-sets
  var pre = m.pre;
  var post = m.post.length
    ? expand(m.post, false)
    : [''];
  var N;
  if (isSequence) {
    var x = numeric(n[0]);
    var y = numeric(n[1]);
    var width = Math.max(n[0].length, n[1].length)
    var incr = n.length == 3
      ? Math.abs(numeric(n[2]))
      : 1;
    var test = lte;
    var reverse = y < x;
    if (reverse) {
      incr *= -1;
      test = gte;
    }
    var pad = n.some(isPadded);
    N = [];
    for (var i = x; test(i, y); i += incr) {
      var c;
      if (isAlphaSequence) {
        c = String.fromCharCode(i);
        if (c === '\\')
          c = '';
      } else {
        c = String(i);
        if (pad) {
          var need = width - c.length;
          if (need > 0) {
            var z = new Array(need + 1).join('0');
            if (i < 0)
              c = '-' + z + c.slice(1);
            else
              c = z + c;
          }
        }
      }
      N.push(c);
    }
  } else {
    N = concatMap(n, function(el) { return expand(el, false) });
  }
  for (var j = 0; j < N.length; j++) {
    for (var k = 0; k < post.length; k++) {
      var expansion = pre + N[j] + post[k];
      if (!isTop || isSequence || expansion)
        expansions.push(expansion);
    }
  }
  return expansions;
 }
--- a/node_modules/brace-expansion/package.json
+++ b/node_modules/brace-expansion/package.json
@ -0,0 +1,50 @@
 {
  "name": "brace-expansion",
  "description": "Brace expansion as known from sh/bash",
  "version": "1.1.12",
  "repository": {
    "type": "git",
    "url": "git://github.com/juliangruber/brace-expansion.git"
  },
  "homepage": "https://github.com/juliangruber/brace-expansion",
  "main": "index.js",
  "scripts": {
    "test": "tape test/*.js",
    "gentest": "bash test/generate.sh",
    "bench": "matcha test/perf/bench.js"
  },
  "dependencies": {
    "balanced-match": "^1.0.0",
    "concat-map": "0.0.1"
  },
  "devDependencies": {
    "matcha": "^0.7.0",
    "tape": "^4.6.0"
  },
  "keywords": [],
  "author": {
    "name": "Julian Gruber",
    "email": "mail@juliangruber.com",
    "url": "http://juliangruber.com"
  },
  "license": "MIT",
  "testling": {
    "files": "test/*.js",
    "browsers": [
      "ie/8..latest",
      "firefox/20..latest",
      "firefox/nightly",
      "chrome/25..latest",
      "chrome/canary",
      "opera/12..latest",
      "opera/next",
      "safari/5.1..latest",
      "ipad/6.0..latest",
      "iphone/6.0..latest",
      "android-browser/4.2..latest"
    ]
  },
  "publishConfig": {
    "tag": "1.x"
  }
 }
--- a/node_modules/braces/LICENSE
+++ b/node_modules/braces/LICENSE
@ -0,0 +1,21 @@
 The MIT License (MIT)
 Copyright (c) 2014-present, Jon Schlinkert.
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
--- a/node_modules/braces/README.md
+++ b/node_modules/braces/README.md
@ -0,0 +1,586 @@
 # braces [![Donate](https://img.shields.io/badge/Donate-PayPal-green.svg)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=W8YFZ425KND68) [![NPM version](https://img.shields.io/npm/v/braces.svg?style=flat)](https://www.npmjs.com/package/braces) [![NPM monthly downloads](https://img.shields.io/npm/dm/braces.svg?style=flat)](https://npmjs.org/package/braces) [![NPM total downloads](https://img.shields.io/npm/dt/braces.svg?style=flat)](https://npmjs.org/package/braces) [![Linux Build Status](https://img.shields.io/travis/micromatch/braces.svg?style=flat&label=Travis)](https://travis-ci.org/micromatch/braces)
 > Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.
 Please consider following this project's author, [Jon Schlinkert](https://github.com/jonschlinkert), and consider starring the project to show your :heart: and support.
 ## Install
 Install with [npm](https://www.npmjs.com/):
 ```sh
 $ npm install --save braces
 ```
 ## v3.0.0 Released!!
 See the [changelog](CHANGELOG.md) for details.
 ## Why use braces?
 Brace patterns make globs more powerful by adding the ability to match specific ranges and sequences of characters.
 - **Accurate** - complete support for the [Bash 4.3 Brace Expansion](www.gnu.org/software/bash/) specification (passes all of the Bash braces tests)
 - **[fast and performant](#benchmarks)** - Starts fast, runs fast and [scales well](#performance) as patterns increase in complexity.
 - **Organized code base** - The parser and compiler are easy to maintain and update when edge cases crop up.
 - **Well-tested** - Thousands of test assertions, and passes all of the Bash, minimatch, and [brace-expansion](https://github.com/juliangruber/brace-expansion) unit tests (as of the date this was written).
 - **Safer** - You shouldn't have to worry about users defining aggressive or malicious brace patterns that can break your application. Braces takes measures to prevent malicious regex that can be used for DDoS attacks (see [catastrophic backtracking](https://www.regular-expressions.info/catastrophic.html)).
 - [Supports lists](#lists) - (aka "sets") `a/{b,c}/d` => `['a/b/d', 'a/c/d']`
 - [Supports sequences](#sequences) - (aka "ranges") `{01..03}` => `['01', '02', '03']`
 - [Supports steps](#steps) - (aka "increments") `{2..10..2}` => `['2', '4', '6', '8', '10']`
 - [Supports escaping](#escaping) - To prevent evaluation of special characters.
 ## Usage
 The main export is a function that takes one or more brace `patterns` and `options`.
 ```js
 const braces = require('braces');
 // braces(patterns[, options]);
 console.log(braces(['{01..05}', '{a..e}']));
 //=> ['(0[1-5])', '([a-e])']
 console.log(braces(['{01..05}', '{a..e}'], { expand: true }));
 //=> ['01', '02', '03', '04', '05', 'a', 'b', 'c', 'd', 'e']
 ```
 ### Brace Expansion vs. Compilation
 By default, brace patterns are compiled into strings that are optimized for creating regular expressions and matching.
 **Compiled**
 ```js
 console.log(braces('a/{x,y,z}/b'));
 //=> ['a/(x|y|z)/b']
 console.log(braces(['a/{01..20}/b', 'a/{1..5}/b']));
 //=> [ 'a/(0[1-9]|1[0-9]|20)/b', 'a/([1-5])/b' ]
 ```
 **Expanded**
 Enable brace expansion by setting the `expand` option to true, or by using [braces.expand()](#expand) (returns an array similar to what you'd expect from Bash, or `echo {1..5}`, or [minimatch](https://github.com/isaacs/minimatch)):
 ```js
 console.log(braces('a/{x,y,z}/b', { expand: true }));
 //=> ['a/x/b', 'a/y/b', 'a/z/b']
 console.log(braces.expand('{01..10}'));
 //=> ['01','02','03','04','05','06','07','08','09','10']
 ```
 ### Lists
 Expand lists (like Bash "sets"):
 ```js
 console.log(braces('a/{foo,bar,baz}/*.js'));
 //=> ['a/(foo|bar|baz)/*.js']
 console.log(braces.expand('a/{foo,bar,baz}/*.js'));
 //=> ['a/foo/*.js', 'a/bar/*.js', 'a/baz/*.js']
 ```
 ### Sequences
 Expand ranges of characters (like Bash "sequences"):
 ```js
 console.log(braces.expand('{1..3}')); // ['1', '2', '3']
 console.log(braces.expand('a/{1..3}/b')); // ['a/1/b', 'a/2/b', 'a/3/b']
 console.log(braces('{a..c}', { expand: true })); // ['a', 'b', 'c']
 console.log(braces('foo/{a..c}', { expand: true })); // ['foo/a', 'foo/b', 'foo/c']
 // supports zero-padded ranges
 console.log(braces('a/{01..03}/b')); //=> ['a/(0[1-3])/b']
 console.log(braces('a/{001..300}/b')); //=> ['a/(0{2}[1-9]|0[1-9][0-9]|[12][0-9]{2}|300)/b']
 ```
 See [fill-range](https://github.com/jonschlinkert/fill-range) for all available range-expansion options.
 ### Steppped ranges
 Steps, or increments, may be used with ranges:
 ```js
 console.log(braces.expand('{2..10..2}'));
 //=> ['2', '4', '6', '8', '10']
 console.log(braces('{2..10..2}'));
 //=> ['(2|4|6|8|10)']
 ```
 When the [.optimize](#optimize) method is used, or [options.optimize](#optionsoptimize) is set to true, sequences are passed to [to-regex-range](https://github.com/jonschlinkert/to-regex-range) for expansion.
 ### Nesting
 Brace patterns may be nested. The results of each expanded string are not sorted, and left to right order is preserved.
 **"Expanded" braces**
 ```js
 console.log(braces.expand('a{b,c,/{x,y}}/e'));
 //=> ['ab/e', 'ac/e', 'a/x/e', 'a/y/e']
 console.log(braces.expand('a/{x,{1..5},y}/c'));
 //=> ['a/x/c', 'a/1/c', 'a/2/c', 'a/3/c', 'a/4/c', 'a/5/c', 'a/y/c']
 ```
 **"Optimized" braces**
 ```js
 console.log(braces('a{b,c,/{x,y}}/e'));
 //=> ['a(b|c|/(x|y))/e']
 console.log(braces('a/{x,{1..5},y}/c'));
 //=> ['a/(x|([1-5])|y)/c']
 ```
 ### Escaping
 **Escaping braces**
 A brace pattern will not be expanded or evaluted if _either the opening or closing brace is escaped_:
 ```js
 console.log(braces.expand('a\\{d,c,b}e'));
 //=> ['a{d,c,b}e']
 console.log(braces.expand('a{d,c,b\\}e'));
 //=> ['a{d,c,b}e']
 ```
 **Escaping commas**
 Commas inside braces may also be escaped:
 ```js
 console.log(braces.expand('a{b\\,c}d'));
 //=> ['a{b,c}d']
 console.log(braces.expand('a{d\\,c,b}e'));
 //=> ['ad,ce', 'abe']
 ```
 **Single items**
 Following bash conventions, a brace pattern is also not expanded when it contains a single character:
 ```js
 console.log(braces.expand('a{b}c'));
 //=> ['a{b}c']
 ```
 ## Options
 ### options.maxLength
 **Type**: `Number`
 **Default**: `10,000`
 **Description**: Limit the length of the input string. Useful when the input string is generated or your application allows users to pass a string, et cetera.
 ```js
 console.log(braces('a/{b,c}/d', { maxLength: 3 })); //=> throws an error
 ```
 ### options.expand
 **Type**: `Boolean`
 **Default**: `undefined`
 **Description**: Generate an "expanded" brace pattern (alternatively you can use the `braces.expand()` method, which does the same thing).
 ```js
 console.log(braces('a/{b,c}/d', { expand: true }));
 //=> [ 'a/b/d', 'a/c/d' ]
 ```
 ### options.nodupes
 **Type**: `Boolean`
 **Default**: `undefined`
 **Description**: Remove duplicates from the returned array.
 ### options.rangeLimit
 **Type**: `Number`
 **Default**: `1000`
 **Description**: To prevent malicious patterns from being passed by users, an error is thrown when `braces.expand()` is used or `options.expand` is true and the generated range will exceed the `rangeLimit`.
 You can customize `options.rangeLimit` or set it to `Inifinity` to disable this altogether.
 **Examples**
 ```js
 // pattern exceeds the "rangeLimit", so it's optimized automatically
 console.log(braces.expand('{1..1000}'));
 //=> ['([1-9]|[1-9][0-9]{1,2}|1000)']
 // pattern does not exceed "rangeLimit", so it's NOT optimized
 console.log(braces.expand('{1..100}'));
 //=> ['1', '2', '3', '4', '5', '6', '7', '8', '9', '10', '11', '12', '13', '14', '15', '16', '17', '18', '19', '20', '21', '22', '23', '24', '25', '26', '27', '28', '29', '30', '31', '32', '33', '34', '35', '36', '37', '38', '39', '40', '41', '42', '43', '44', '45', '46', '47', '48', '49', '50', '51', '52', '53', '54', '55', '56', '57', '58', '59', '60', '61', '62', '63', '64', '65', '66', '67', '68', '69', '70', '71', '72', '73', '74', '75', '76', '77', '78', '79', '80', '81', '82', '83', '84', '85', '86', '87', '88', '89', '90', '91', '92', '93', '94', '95', '96', '97', '98', '99', '100']
 ```
 ### options.transform
 **Type**: `Function`
 **Default**: `undefined`
 **Description**: Customize range expansion.
 **Example: Transforming non-numeric values**
 ```js
 const alpha = braces.expand('x/{a..e}/y', {
  transform(value, index) {
    // When non-numeric values are passed, "value" is a character code.
    return 'foo/' + String.fromCharCode(value) + '-' + index;
  },
 });
 console.log(alpha);
 //=> [ 'x/foo/a-0/y', 'x/foo/b-1/y', 'x/foo/c-2/y', 'x/foo/d-3/y', 'x/foo/e-4/y' ]
 ```
 **Example: Transforming numeric values**
 ```js
 const numeric = braces.expand('{1..5}', {
  transform(value) {
    // when numeric values are passed, "value" is a number
    return 'foo/' + value * 2;
  },
 });
 console.log(numeric);
 //=> [ 'foo/2', 'foo/4', 'foo/6', 'foo/8', 'foo/10' ]
 ```
 ### options.quantifiers
 **Type**: `Boolean`
 **Default**: `undefined`
 **Description**: In regular expressions, quanitifiers can be used to specify how many times a token can be repeated. For example, `a{1,3}` will match the letter `a` one to three times.
 Unfortunately, regex quantifiers happen to share the same syntax as [Bash lists](#lists)
 The `quantifiers` option tells braces to detect when [regex quantifiers](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/RegExp#quantifiers) are defined in the given pattern, and not to try to expand them as lists.
 **Examples**
 ```js
 const braces = require('braces');
 console.log(braces('a/b{1,3}/{x,y,z}'));
 //=> [ 'a/b(1|3)/(x|y|z)' ]
 console.log(braces('a/b{1,3}/{x,y,z}', { quantifiers: true }));
 //=> [ 'a/b{1,3}/(x|y|z)' ]
 console.log(braces('a/b{1,3}/{x,y,z}', { quantifiers: true, expand: true }));
 //=> [ 'a/b{1,3}/x', 'a/b{1,3}/y', 'a/b{1,3}/z' ]
 ```
 ### options.keepEscaping
 **Type**: `Boolean`
 **Default**: `undefined`
 **Description**: Do not strip backslashes that were used for escaping from the result.
 ## What is "brace expansion"?
 Brace expansion is a type of parameter expansion that was made popular by unix shells for generating lists of strings, as well as regex-like matching when used alongside wildcards (globs).
 In addition to "expansion", braces are also used for matching. In other words:
 - [brace expansion](#brace-expansion) is for generating new lists
 - [brace matching](#brace-matching) is for filtering existing lists
 <details>
 <summary><strong>More about brace expansion</strong> (click to expand)</summary>
 There are two main types of brace expansion:
 1. **lists**: which are defined using comma-separated values inside curly braces: `{a,b,c}`
 2. **sequences**: which are defined using a starting value and an ending value, separated by two dots: `a{1..3}b`. Optionally, a third argument may be passed to define a "step" or increment to use: `a{1..100..10}b`. These are also sometimes referred to as "ranges".
 Here are some example brace patterns to illustrate how they work:
 **Sets**
 ```
 {a,b,c}       => a b c
 {a,b,c}{1,2}  => a1 a2 b1 b2 c1 c2
 ```
 **Sequences**
 ```
 {1..9}        => 1 2 3 4 5 6 7 8 9
 {4..-4}       => 4 3 2 1 0 -1 -2 -3 -4
 {1..20..3}    => 1 4 7 10 13 16 19
 {a..j}        => a b c d e f g h i j
 {j..a}        => j i h g f e d c b a
 {a..z..3}     => a d g j m p s v y
 ```
 **Combination**
 Sets and sequences can be mixed together or used along with any other strings.
 ```
 {a,b,c}{1..3}   => a1 a2 a3 b1 b2 b3 c1 c2 c3
 foo/{a,b,c}/bar => foo/a/bar foo/b/bar foo/c/bar
 ```
 The fact that braces can be "expanded" from relatively simple patterns makes them ideal for quickly generating test fixtures, file paths, and similar use cases.
 ## Brace matching
 In addition to _expansion_, brace patterns are also useful for performing regular-expression-like matching.
 For example, the pattern `foo/{1..3}/bar` would match any of following strings:
 ```
 foo/1/bar
 foo/2/bar
 foo/3/bar
 ```
 But not:
 ```
 baz/1/qux
 baz/2/qux
 baz/3/qux
 ```
 Braces can also be combined with [glob patterns](https://github.com/jonschlinkert/micromatch) to perform more advanced wildcard matching. For example, the pattern `*/{1..3}/*` would match any of following strings:
 ```
 foo/1/bar
 foo/2/bar
 foo/3/bar
 baz/1/qux
 baz/2/qux
 baz/3/qux
 ```
 ## Brace matching pitfalls
 Although brace patterns offer a user-friendly way of matching ranges or sets of strings, there are also some major disadvantages and potential risks you should be aware of.
 ### tldr
 **"brace bombs"**
 - brace expansion can eat up a huge amount of processing resources
 - as brace patterns increase _linearly in size_, the system resources required to expand the pattern increase exponentially
 - users can accidentally (or intentially) exhaust your system's resources resulting in the equivalent of a DoS attack (bonus: no programming knowledge is required!)
 For a more detailed explanation with examples, see the [geometric complexity](#geometric-complexity) section.
 ### The solution
 Jump to the [performance section](#performance) to see how Braces solves this problem in comparison to other libraries.
 ### Geometric complexity
 At minimum, brace patterns with sets limited to two elements have quadradic or `O(n^2)` complexity. But the complexity of the algorithm increases exponentially as the number of sets, _and elements per set_, increases, which is `O(n^c)`.
 For example, the following sets demonstrate quadratic (`O(n^2)`) complexity:
 ```
 {1,2}{3,4}      => (2X2)    => 13 14 23 24
 {1,2}{3,4}{5,6} => (2X2X2)  => 135 136 145 146 235 236 245 246
 ```
 But add an element to a set, and we get a n-fold Cartesian product with `O(n^c)` complexity:
 ```
 {1,2,3}{4,5,6}{7,8,9} => (3X3X3) => 147 148 149 157 158 159 167 168 169 247 248
                                    249 257 258 259 267 268 269 347 348 349 357
                                    358 359 367 368 369
 ```
 Now, imagine how this complexity grows given that each element is a n-tuple:
 ```
 {1..100}{1..100}         => (100X100)     => 10,000 elements (38.4 kB)
 {1..100}{1..100}{1..100} => (100X100X100) => 1,000,000 elements (5.76 MB)
 ```
 Although these examples are clearly contrived, they demonstrate how brace patterns can quickly grow out of control.
 **More information**
 Interested in learning more about brace expansion?
 - [linuxjournal/bash-brace-expansion](http://www.linuxjournal.com/content/bash-brace-expansion)
 - [rosettacode/Brace_expansion](https://rosettacode.org/wiki/Brace_expansion)
 - [cartesian product](https://en.wikipedia.org/wiki/Cartesian_product)
 </details>
 ## Performance
 Braces is not only screaming fast, it's also more accurate the other brace expansion libraries.
 ### Better algorithms
 Fortunately there is a solution to the ["brace bomb" problem](#brace-matching-pitfalls): _don't expand brace patterns into an array when they're used for matching_.
 Instead, convert the pattern into an optimized regular expression. This is easier said than done, and braces is the only library that does this currently.
 **The proof is in the numbers**
 Minimatch gets exponentially slower as patterns increase in complexity, braces does not. The following results were generated using `braces()` and `minimatch.braceExpand()`, respectively.
 | **Pattern**                 | **braces**          | **[minimatch][]**            |
 | --------------------------- | ------------------- | ---------------------------- |
 | `{1..9007199254740991}`[^1] | `298 B` (5ms 459μs) | N/A (freezes)                |
 | `{1..1000000000000000}`     | `41 B` (1ms 15μs)   | N/A (freezes)                |
 | `{1..100000000000000}`      | `40 B` (890μs)      | N/A (freezes)                |
 | `{1..10000000000000}`       | `39 B` (2ms 49μs)   | N/A (freezes)                |
 | `{1..1000000000000}`        | `38 B` (608μs)      | N/A (freezes)                |
 | `{1..100000000000}`         | `37 B` (397μs)      | N/A (freezes)                |
 | `{1..10000000000}`          | `35 B` (983μs)      | N/A (freezes)                |
 | `{1..1000000000}`           | `34 B` (798μs)      | N/A (freezes)                |
 | `{1..100000000}`            | `33 B` (733μs)      | N/A (freezes)                |
 | `{1..10000000}`             | `32 B` (5ms 632μs)  | `78.89 MB` (16s 388ms 569μs) |
 | `{1..1000000}`              | `31 B` (1ms 381μs)  | `6.89 MB` (1s 496ms 887μs)   |
 | `{1..100000}`               | `30 B` (950μs)      | `588.89 kB` (146ms 921μs)    |
 | `{1..10000}`                | `29 B` (1ms 114μs)  | `48.89 kB` (14ms 187μs)      |
 | `{1..1000}`                 | `28 B` (760μs)      | `3.89 kB` (1ms 453μs)        |
 | `{1..100}`                  | `22 B` (345μs)      | `291 B` (196μs)              |
 | `{1..10}`                   | `10 B` (533μs)      | `20 B` (37μs)                |
 | `{1..3}`                    | `7 B` (190μs)       | `5 B` (27μs)                 |
 ### Faster algorithms
 When you need expansion, braces is still much faster.
 _(the following results were generated using `braces.expand()` and `minimatch.braceExpand()`, respectively)_
 | **Pattern**     | **braces**                  | **[minimatch][]**            |
 | --------------- | --------------------------- | ---------------------------- |
 | `{1..10000000}` | `78.89 MB` (2s 698ms 642μs) | `78.89 MB` (18s 601ms 974μs) |
 | `{1..1000000}`  | `6.89 MB` (458ms 576μs)     | `6.89 MB` (1s 491ms 621μs)   |
 | `{1..100000}`   | `588.89 kB` (20ms 728μs)    | `588.89 kB` (156ms 919μs)    |
 | `{1..10000}`    | `48.89 kB` (2ms 202μs)      | `48.89 kB` (13ms 641μs)      |
 | `{1..1000}`     | `3.89 kB` (1ms 796μs)       | `3.89 kB` (1ms 958μs)        |
 | `{1..100}`      | `291 B` (424μs)             | `291 B` (211μs)              |
 | `{1..10}`       | `20 B` (487μs)              | `20 B` (72μs)                |
 | `{1..3}`        | `5 B` (166μs)               | `5 B` (27μs)                 |
 If you'd like to run these comparisons yourself, see [test/support/generate.js](test/support/generate.js).
 ## Benchmarks
 ### Running benchmarks
 Install dev dependencies:
 ```bash
 npm i -d && npm benchmark
 ```
 ### Latest results
 Braces is more accurate, without sacrificing performance.
 ```bash
 ● expand - range (expanded)
     braces x 53,167 ops/sec ±0.12% (102 runs sampled)
  minimatch x 11,378 ops/sec ±0.10% (102 runs sampled)
 ● expand - range (optimized for regex)
     braces x 373,442 ops/sec ±0.04% (100 runs sampled)
  minimatch x 3,262 ops/sec ±0.18% (100 runs sampled)
 ● expand - nested ranges (expanded)
     braces x 33,921 ops/sec ±0.09% (99 runs sampled)
  minimatch x 10,855 ops/sec ±0.28% (100 runs sampled)
 ● expand - nested ranges (optimized for regex)
     braces x 287,479 ops/sec ±0.52% (98 runs sampled)
  minimatch x 3,219 ops/sec ±0.28% (101 runs sampled)
 ● expand - set (expanded)
     braces x 238,243 ops/sec ±0.19% (97 runs sampled)
  minimatch x 538,268 ops/sec ±0.31% (96 runs sampled)
 ● expand - set (optimized for regex)
     braces x 321,844 ops/sec ±0.10% (97 runs sampled)
  minimatch x 140,600 ops/sec ±0.15% (100 runs sampled)
 ● expand - nested sets (expanded)
     braces x 165,371 ops/sec ±0.42% (96 runs sampled)
  minimatch x 337,720 ops/sec ±0.28% (100 runs sampled)
 ● expand - nested sets (optimized for regex)
     braces x 242,948 ops/sec ±0.12% (99 runs sampled)
  minimatch x 87,403 ops/sec ±0.79% (96 runs sampled)
 ```
 ## About
 <details>
 <summary><strong>Contributing</strong></summary>
 Pull requests and stars are always welcome. For bugs and feature requests, [please create an issue](../../issues/new).
 </details>
 <details>
 <summary><strong>Running Tests</strong></summary>
 Running and reviewing unit tests is a great way to get familiarized with a library and its API. You can install dependencies and run tests with the following command:
 ```sh
 $ npm install && npm test
 ```
 </details>
 <details>
 <summary><strong>Building docs</strong></summary>
 _(This project's readme.md is generated by [verb](https://github.com/verbose/verb-generate-readme), please don't edit the readme directly. Any changes to the readme must be made in the [.verb.md](.verb.md) readme template.)_
 To generate the readme, run the following command:
 ```sh
 $ npm install -g verbose/verb#dev verb-generate-readme && verb
 ```
 </details>
 ### Contributors
 | **Commits** | **Contributor**                                               |
 | ----------- | ------------------------------------------------------------- |
 | 197         | [jonschlinkert](https://github.com/jonschlinkert)             |
 | 4           | [doowb](https://github.com/doowb)                             |
 | 1           | [es128](https://github.com/es128)                             |
 | 1           | [eush77](https://github.com/eush77)                           |
 | 1           | [hemanth](https://github.com/hemanth)                         |
 | 1           | [wtgtybhertgeghgtwtg](https://github.com/wtgtybhertgeghgtwtg) |
 ### Author
 **Jon Schlinkert**
 - [GitHub Profile](https://github.com/jonschlinkert)
 - [Twitter Profile](https://twitter.com/jonschlinkert)
 - [LinkedIn Profile](https://linkedin.com/in/jonschlinkert)
 ### License
 Copyright © 2019, [Jon Schlinkert](https://github.com/jonschlinkert).
 Released under the [MIT License](LICENSE).
 ---
 _This file was generated by [verb-generate-readme](https://github.com/verbose/verb-generate-readme), v0.8.0, on April 08, 2019._
--- a/node_modules/braces/index.js
+++ b/node_modules/braces/index.js
@ -0,0 +1,170 @@
 'use strict';
 const stringify = require('./lib/stringify');
 const compile = require('./lib/compile');
 const expand = require('./lib/expand');
 const parse = require('./lib/parse');
 /**
 * Expand the given pattern or create a regex-compatible string.
 *
 * ```js
 * const braces = require('braces');
 * console.log(braces('{a,b,c}', { compile: true })); //=> ['(a|b|c)']
 * console.log(braces('{a,b,c}')); //=> ['a', 'b', 'c']
 * ```
 * @param {String} `str`
 * @param {Object} `options`
 * @return {String}
 * @api public
 */
 const braces = (input, options = {}) => {
  let output = [];
  if (Array.isArray(input)) {
    for (const pattern of input) {
      const result = braces.create(pattern, options);
      if (Array.isArray(result)) {
        output.push(...result);
      } else {
        output.push(result);
      }
    }
  } else {
    output = [].concat(braces.create(input, options));
  }
  if (options && options.expand === true && options.nodupes === true) {
    output = [...new Set(output)];
  }
  return output;
 };
 /**
 * Parse the given `str` with the given `options`.
 *
 * ```js
 * // braces.parse(pattern, [, options]);
 * const ast = braces.parse('a/{b,c}/d');
 * console.log(ast);
 * ```
 * @param {String} pattern Brace pattern to parse
 * @param {Object} options
 * @return {Object} Returns an AST
 * @api public
 */
 braces.parse = (input, options = {}) => parse(input, options);
 /**
 * Creates a braces string from an AST, or an AST node.
 *
 * ```js
 * const braces = require('braces');
 * let ast = braces.parse('foo/{a,b}/bar');
 * console.log(stringify(ast.nodes[2])); //=> '{a,b}'
 * ```
 * @param {String} `input` Brace pattern or AST.
 * @param {Object} `options`
 * @return {Array} Returns an array of expanded values.
 * @api public
 */
 braces.stringify = (input, options = {}) => {
  if (typeof input === 'string') {
    return stringify(braces.parse(input, options), options);
  }
  return stringify(input, options);
 };
 /**
 * Compiles a brace pattern into a regex-compatible, optimized string.
 * This method is called by the main [braces](#braces) function by default.
 *
 * ```js
 * const braces = require('braces');
 * console.log(braces.compile('a/{b,c}/d'));
 * //=> ['a/(b|c)/d']
 * ```
 * @param {String} `input` Brace pattern or AST.
 * @param {Object} `options`
 * @return {Array} Returns an array of expanded values.
 * @api public
 */
 braces.compile = (input, options = {}) => {
  if (typeof input === 'string') {
    input = braces.parse(input, options);
  }
  return compile(input, options);
 };
 /**
 * Expands a brace pattern into an array. This method is called by the
 * main [braces](#braces) function when `options.expand` is true. Before
 * using this method it's recommended that you read the [performance notes](#performance))
 * and advantages of using [.compile](#compile) instead.
 *
 * ```js
 * const braces = require('braces');
 * console.log(braces.expand('a/{b,c}/d'));
 * //=> ['a/b/d', 'a/c/d'];
 * ```
 * @param {String} `pattern` Brace pattern
 * @param {Object} `options`
 * @return {Array} Returns an array of expanded values.
 * @api public
 */
 braces.expand = (input, options = {}) => {
  if (typeof input === 'string') {
    input = braces.parse(input, options);
  }
  let result = expand(input, options);
  // filter out empty strings if specified
  if (options.noempty === true) {
    result = result.filter(Boolean);
  }
  // filter out duplicates if specified
  if (options.nodupes === true) {
    result = [...new Set(result)];
  }
  return result;
 };
 /**
 * Processes a brace pattern and returns either an expanded array
 * (if `options.expand` is true), a highly optimized regex-compatible string.
 * This method is called by the main [braces](#braces) function.
 *
 * ```js
 * const braces = require('braces');
 * console.log(braces.create('user-{200..300}/project-{a,b,c}-{1..10}'))
 * //=> 'user-(20[0-9]|2[1-9][0-9]|300)/project-(a|b|c)-([1-9]|10)'
 * ```
 * @param {String} `pattern` Brace pattern
 * @param {Object} `options`
 * @return {Array} Returns an array of expanded values.
 * @api public
 */
 braces.create = (input, options = {}) => {
  if (input === '' || input.length < 3) {
    return [input];
  }
  return options.expand !== true
    ? braces.compile(input, options)
    : braces.expand(input, options);
 };
 /**
 * Expose "braces"
 */
 module.exports = braces;
--- a/node_modules/braces/lib/compile.js
+++ b/node_modules/braces/lib/compile.js
@ -0,0 +1,60 @@
 'use strict';
 const fill = require('fill-range');
 const utils = require('./utils');
 const compile = (ast, options = {}) => {
  const walk = (node, parent = {}) => {
    const invalidBlock = utils.isInvalidBrace(parent);
    const invalidNode = node.invalid === true && options.escapeInvalid === true;
    const invalid = invalidBlock === true || invalidNode === true;
    const prefix = options.escapeInvalid === true ? '\\' : '';
    let output = '';
    if (node.isOpen === true) {
      return prefix + node.value;
    }
    if (node.isClose === true) {
      console.log('node.isClose', prefix, node.value);
      return prefix + node.value;
    }
    if (node.type === 'open') {
      return invalid ? prefix + node.value : '(';
    }
    if (node.type === 'close') {
      return invalid ? prefix + node.value : ')';
    }
    if (node.type === 'comma') {
      return node.prev.type === 'comma' ? '' : invalid ? node.value : '|';
    }
    if (node.value) {
      return node.value;
    }
    if (node.nodes && node.ranges > 0) {
      const args = utils.reduce(node.nodes);
      const range = fill(...args, { ...options, wrap: false, toRegex: true, strictZeros: true });
      if (range.length !== 0) {
        return args.length > 1 && range.length > 1 ? `(${range})` : range;
      }
    }
    if (node.nodes) {
      for (const child of node.nodes) {
        output += walk(child, node);
      }
    }
    return output;
  };
  return walk(ast);
 };
 module.exports = compile;
--- a/node_modules/braces/lib/constants.js
+++ b/node_modules/braces/lib/constants.js
@ -0,0 +1,57 @@
 'use strict';
 module.exports = {
  MAX_LENGTH: 10000,
  // Digits
  CHAR_0: '0', /* 0 */
  CHAR_9: '9', /* 9 */
  // Alphabet chars.
  CHAR_UPPERCASE_A: 'A', /* A */
  CHAR_LOWERCASE_A: 'a', /* a */
  CHAR_UPPERCASE_Z: 'Z', /* Z */
  CHAR_LOWERCASE_Z: 'z', /* z */
  CHAR_LEFT_PARENTHESES: '(', /* ( */
  CHAR_RIGHT_PARENTHESES: ')', /* ) */
  CHAR_ASTERISK: '*', /* * */
  // Non-alphabetic chars.
  CHAR_AMPERSAND: '&', /* & */
  CHAR_AT: '@', /* @ */
  CHAR_BACKSLASH: '\\', /* \ */
  CHAR_BACKTICK: '`', /* ` */
  CHAR_CARRIAGE_RETURN: '\r', /* \r */
  CHAR_CIRCUMFLEX_ACCENT: '^', /* ^ */
  CHAR_COLON: ':', /* : */
  CHAR_COMMA: ',', /* , */
  CHAR_DOLLAR: '$', /* . */
  CHAR_DOT: '.', /* . */
  CHAR_DOUBLE_QUOTE: '"', /* " */
  CHAR_EQUAL: '=', /* = */
  CHAR_EXCLAMATION_MARK: '!', /* ! */
  CHAR_FORM_FEED: '\f', /* \f */
  CHAR_FORWARD_SLASH: '/', /* / */
  CHAR_HASH: '#', /* # */
  CHAR_HYPHEN_MINUS: '-', /* - */
  CHAR_LEFT_ANGLE_BRACKET: '<', /* < */
  CHAR_LEFT_CURLY_BRACE: '{', /* { */
  CHAR_LEFT_SQUARE_BRACKET: '[', /* [ */
  CHAR_LINE_FEED: '\n', /* \n */
  CHAR_NO_BREAK_SPACE: '\u00A0', /* \u00A0 */
  CHAR_PERCENT: '%', /* % */
  CHAR_PLUS: '+', /* + */
  CHAR_QUESTION_MARK: '?', /* ? */
  CHAR_RIGHT_ANGLE_BRACKET: '>', /* > */
  CHAR_RIGHT_CURLY_BRACE: '}', /* } */
  CHAR_RIGHT_SQUARE_BRACKET: ']', /* ] */
  CHAR_SEMICOLON: ';', /* ; */
  CHAR_SINGLE_QUOTE: '\'', /* ' */
  CHAR_SPACE: ' ', /*   */
  CHAR_TAB: '\t', /* \t */
  CHAR_UNDERSCORE: '_', /* _ */
  CHAR_VERTICAL_LINE: '|', /* | */
  CHAR_ZERO_WIDTH_NOBREAK_SPACE: '\uFEFF' /* \uFEFF */
 };
--- a/node_modules/braces/lib/expand.js
+++ b/node_modules/braces/lib/expand.js
@ -0,0 +1,113 @@
 'use strict';
 const fill = require('fill-range');
 const stringify = require('./stringify');
 const utils = require('./utils');
 const append = (queue = '', stash = '', enclose = false) => {
  const result = [];
  queue = [].concat(queue);
  stash = [].concat(stash);
  if (!stash.length) return queue;
  if (!queue.length) {
    return enclose ? utils.flatten(stash).map(ele => `{${ele}}`) : stash;
  }
  for (const item of queue) {
    if (Array.isArray(item)) {
      for (const value of item) {
        result.push(append(value, stash, enclose));
      }
    } else {
      for (let ele of stash) {
        if (enclose === true && typeof ele === 'string') ele = `{${ele}}`;
        result.push(Array.isArray(ele) ? append(item, ele, enclose) : item + ele);
      }
    }
  }
  return utils.flatten(result);
 };
 const expand = (ast, options = {}) => {
  const rangeLimit = options.rangeLimit === undefined ? 1000 : options.rangeLimit;
  const walk = (node, parent = {}) => {
    node.queue = [];
    let p = parent;
    let q = parent.queue;
    while (p.type !== 'brace' && p.type !== 'root' && p.parent) {
      p = p.parent;
      q = p.queue;
    }
    if (node.invalid || node.dollar) {
      q.push(append(q.pop(), stringify(node, options)));
      return;
    }
    if (node.type === 'brace' && node.invalid !== true && node.nodes.length === 2) {
      q.push(append(q.pop(), ['{}']));
      return;
    }
    if (node.nodes && node.ranges > 0) {
      const args = utils.reduce(node.nodes);
      if (utils.exceedsLimit(...args, options.step, rangeLimit)) {
        throw new RangeError('expanded array length exceeds range limit. Use options.rangeLimit to increase or disable the limit.');
      }
      let range = fill(...args, options);
      if (range.length === 0) {
        range = stringify(node, options);
      }
      q.push(append(q.pop(), range));
      node.nodes = [];
      return;
    }
    const enclose = utils.encloseBrace(node);
    let queue = node.queue;
    let block = node;
    while (block.type !== 'brace' && block.type !== 'root' && block.parent) {
      block = block.parent;
      queue = block.queue;
    }
    for (let i = 0; i < node.nodes.length; i++) {
      const child = node.nodes[i];
      if (child.type === 'comma' && node.type === 'brace') {
        if (i === 1) queue.push('');
        queue.push('');
        continue;
      }
      if (child.type === 'close') {
        q.push(append(q.pop(), queue, enclose));
        continue;
      }
      if (child.value && child.type !== 'open') {
        queue.push(append(queue.pop(), child.value));
        continue;
      }
      if (child.nodes) {
        walk(child, node);
      }
    }
    return queue;
  };
  return utils.flatten(walk(ast));
 };
 module.exports = expand;
--- a/node_modules/braces/lib/parse.js
+++ b/node_modules/braces/lib/parse.js
@ -0,0 +1,331 @@
 'use strict';
 const stringify = require('./stringify');
 /**
 * Constants
 */
 const {
  MAX_LENGTH,
  CHAR_BACKSLASH, /* \ */
  CHAR_BACKTICK, /* ` */
  CHAR_COMMA, /* , */
  CHAR_DOT, /* . */
  CHAR_LEFT_PARENTHESES, /* ( */
  CHAR_RIGHT_PARENTHESES, /* ) */
  CHAR_LEFT_CURLY_BRACE, /* { */
  CHAR_RIGHT_CURLY_BRACE, /* } */
  CHAR_LEFT_SQUARE_BRACKET, /* [ */
  CHAR_RIGHT_SQUARE_BRACKET, /* ] */
  CHAR_DOUBLE_QUOTE, /* " */
  CHAR_SINGLE_QUOTE, /* ' */
  CHAR_NO_BREAK_SPACE,
  CHAR_ZERO_WIDTH_NOBREAK_SPACE
 } = require('./constants');
 /**
 * parse
 */
 const parse = (input, options = {}) => {
  if (typeof input !== 'string') {
    throw new TypeError('Expected a string');
  }
  const opts = options || {};
  const max = typeof opts.maxLength === 'number' ? Math.min(MAX_LENGTH, opts.maxLength) : MAX_LENGTH;
  if (input.length > max) {
    throw new SyntaxError(`Input length (${input.length}), exceeds max characters (${max})`);
  }
  const ast = { type: 'root', input, nodes: [] };
  const stack = [ast];
  let block = ast;
  let prev = ast;
  let brackets = 0;
  const length = input.length;
  let index = 0;
  let depth = 0;
  let value;
  /**
   * Helpers
   */
  const advance = () => input[index++];
  const push = node => {
    if (node.type === 'text' && prev.type === 'dot') {
      prev.type = 'text';
    }
    if (prev && prev.type === 'text' && node.type === 'text') {
      prev.value += node.value;
      return;
    }
    block.nodes.push(node);
    node.parent = block;
    node.prev = prev;
    prev = node;
    return node;
  };
  push({ type: 'bos' });
  while (index < length) {
    block = stack[stack.length - 1];
    value = advance();
    /**
     * Invalid chars
     */
    if (value === CHAR_ZERO_WIDTH_NOBREAK_SPACE || value === CHAR_NO_BREAK_SPACE) {
      continue;
    }
    /**
     * Escaped chars
     */
    if (value === CHAR_BACKSLASH) {
      push({ type: 'text', value: (options.keepEscaping ? value : '') + advance() });
      continue;
    }
    /**
     * Right square bracket (literal): ']'
     */
    if (value === CHAR_RIGHT_SQUARE_BRACKET) {
      push({ type: 'text', value: '\\' + value });
      continue;
    }
    /**
     * Left square bracket: '['
     */
    if (value === CHAR_LEFT_SQUARE_BRACKET) {
      brackets++;
      let next;
      while (index < length && (next = advance())) {
        value += next;
        if (next === CHAR_LEFT_SQUARE_BRACKET) {
          brackets++;
          continue;
        }
        if (next === CHAR_BACKSLASH) {
          value += advance();
          continue;
        }
        if (next === CHAR_RIGHT_SQUARE_BRACKET) {
          brackets--;
          if (brackets === 0) {
            break;
          }
        }
      }
      push({ type: 'text', value });
      continue;
    }
    /**
     * Parentheses
     */
    if (value === CHAR_LEFT_PARENTHESES) {
      block = push({ type: 'paren', nodes: [] });
      stack.push(block);
      push({ type: 'text', value });
      continue;
    }
    if (value === CHAR_RIGHT_PARENTHESES) {
      if (block.type !== 'paren') {
        push({ type: 'text', value });
        continue;
      }
      block = stack.pop();
      push({ type: 'text', value });
      block = stack[stack.length - 1];
      continue;
    }
    /**
     * Quotes: '|"|`
     */
    if (value === CHAR_DOUBLE_QUOTE || value === CHAR_SINGLE_QUOTE || value === CHAR_BACKTICK) {
      const open = value;
      let next;
      if (options.keepQuotes !== true) {
        value = '';
      }
      while (index < length && (next = advance())) {
        if (next === CHAR_BACKSLASH) {
          value += next + advance();
          continue;
        }
        if (next === open) {
          if (options.keepQuotes === true) value += next;
          break;
        }
        value += next;
      }
      push({ type: 'text', value });
      continue;
    }
    /**
     * Left curly brace: '{'
     */
    if (value === CHAR_LEFT_CURLY_BRACE) {
      depth++;
      const dollar = prev.value && prev.value.slice(-1) === '$' || block.dollar === true;
      const brace = {
        type: 'brace',
        open: true,
        close: false,
        dollar,
        depth,
        commas: 0,
        ranges: 0,
        nodes: []
      };
      block = push(brace);
      stack.push(block);
      push({ type: 'open', value });
      continue;
    }
    /**
     * Right curly brace: '}'
     */
    if (value === CHAR_RIGHT_CURLY_BRACE) {
      if (block.type !== 'brace') {
        push({ type: 'text', value });
        continue;
      }
      const type = 'close';
      block = stack.pop();
      block.close = true;
      push({ type, value });
      depth--;
      block = stack[stack.length - 1];
      continue;
    }
    /**
     * Comma: ','
     */
    if (value === CHAR_COMMA && depth > 0) {
      if (block.ranges > 0) {
        block.ranges = 0;
        const open = block.nodes.shift();
        block.nodes = [open, { type: 'text', value: stringify(block) }];
      }
      push({ type: 'comma', value });
      block.commas++;
      continue;
    }
    /**
     * Dot: '.'
     */
    if (value === CHAR_DOT && depth > 0 && block.commas === 0) {
      const siblings = block.nodes;
      if (depth === 0 || siblings.length === 0) {
        push({ type: 'text', value });
        continue;
      }
      if (prev.type === 'dot') {
        block.range = [];
        prev.value += value;
        prev.type = 'range';
        if (block.nodes.length !== 3 && block.nodes.length !== 5) {
          block.invalid = true;
          block.ranges = 0;
          prev.type = 'text';
          continue;
        }
        block.ranges++;
        block.args = [];
        continue;
      }
      if (prev.type === 'range') {
        siblings.pop();
        const before = siblings[siblings.length - 1];
        before.value += prev.value + value;
        prev = before;
        block.ranges--;
        continue;
      }
      push({ type: 'dot', value });
      continue;
    }
    /**
     * Text
     */
    push({ type: 'text', value });
  }
  // Mark imbalanced braces and brackets as invalid
  do {
    block = stack.pop();
    if (block.type !== 'root') {
      block.nodes.forEach(node => {
        if (!node.nodes) {
          if (node.type === 'open') node.isOpen = true;
          if (node.type === 'close') node.isClose = true;
          if (!node.nodes) node.type = 'text';
          node.invalid = true;
        }
      });
      // get the location of the block on parent.nodes (block's siblings)
      const parent = stack[stack.length - 1];
      const index = parent.nodes.indexOf(block);
      // replace the (invalid) block with it's nodes
      parent.nodes.splice(index, 1, ...block.nodes);
    }
  } while (stack.length > 0);
  push({ type: 'eos' });
  return ast;
 };
 module.exports = parse;
--- a/node_modules/braces/lib/stringify.js
+++ b/node_modules/braces/lib/stringify.js
@ -0,0 +1,32 @@
 'use strict';
 const utils = require('./utils');
 module.exports = (ast, options = {}) => {
  const stringify = (node, parent = {}) => {
    const invalidBlock = options.escapeInvalid && utils.isInvalidBrace(parent);
    const invalidNode = node.invalid === true && options.escapeInvalid === true;
    let output = '';
    if (node.value) {
      if ((invalidBlock || invalidNode) && utils.isOpenOrClose(node)) {
        return '\\' + node.value;
      }
      return node.value;
    }
    if (node.value) {
      return node.value;
    }
    if (node.nodes) {
      for (const child of node.nodes) {
        output += stringify(child);
      }
    }
    return output;
  };
  return stringify(ast);
 };
--- a/node_modules/braces/lib/utils.js
+++ b/node_modules/braces/lib/utils.js
@ -0,0 +1,122 @@
 'use strict';
 exports.isInteger = num => {
  if (typeof num === 'number') {
    return Number.isInteger(num);
  }
  if (typeof num === 'string' && num.trim() !== '') {
    return Number.isInteger(Number(num));
  }
  return false;
 };
 /**
 * Find a node of the given type
 */
 exports.find = (node, type) => node.nodes.find(node => node.type === type);
 /**
 * Find a node of the given type
 */
 exports.exceedsLimit = (min, max, step = 1, limit) => {
  if (limit === false) return false;
  if (!exports.isInteger(min) || !exports.isInteger(max)) return false;
  return ((Number(max) - Number(min)) / Number(step)) >= limit;
 };
 /**
 * Escape the given node with '\\' before node.value
 */
 exports.escapeNode = (block, n = 0, type) => {
  const node = block.nodes[n];
  if (!node) return;
  if ((type && node.type === type) || node.type === 'open' || node.type === 'close') {
    if (node.escaped !== true) {
      node.value = '\\' + node.value;
      node.escaped = true;
    }
  }
 };
 /**
 * Returns true if the given brace node should be enclosed in literal braces
 */
 exports.encloseBrace = node => {
  if (node.type !== 'brace') return false;
  if ((node.commas >> 0 + node.ranges >> 0) === 0) {
    node.invalid = true;
    return true;
  }
  return false;
 };
 /**
 * Returns true if a brace node is invalid.
 */
 exports.isInvalidBrace = block => {
  if (block.type !== 'brace') return false;
  if (block.invalid === true || block.dollar) return true;
  if ((block.commas >> 0 + block.ranges >> 0) === 0) {
    block.invalid = true;
    return true;
  }
  if (block.open !== true || block.close !== true) {
    block.invalid = true;
    return true;
  }
  return false;
 };
 /**
 * Returns true if a node is an open or close node
 */
 exports.isOpenOrClose = node => {
  if (node.type === 'open' || node.type === 'close') {
    return true;
  }
  return node.open === true || node.close === true;
 };
 /**
 * Reduce an array of text nodes.
 */
 exports.reduce = nodes => nodes.reduce((acc, node) => {
  if (node.type === 'text') acc.push(node.value);
  if (node.type === 'range') node.type = 'text';
  return acc;
 }, []);
 /**
 * Flatten an array
 */
 exports.flatten = (...args) => {
  const result = [];
  const flat = arr => {
    for (let i = 0; i < arr.length; i++) {
      const ele = arr[i];
      if (Array.isArray(ele)) {
        flat(ele);
        continue;
      }
      if (ele !== undefined) {
        result.push(ele);
      }
    }
    return result;
  };
  flat(args);
  return result;
 };
--- a/node_modules/braces/package.json
+++ b/node_modules/braces/package.json
@ -0,0 +1,77 @@
 {
  "name": "braces",
  "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.",
  "version": "3.0.3",
  "homepage": "https://github.com/micromatch/braces",
  "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
  "contributors": [
    "Brian Woodward (https://twitter.com/doowb)",
    "Elan Shanker (https://github.com/es128)",
    "Eugene Sharygin (https://github.com/eush77)",
    "hemanth.hm (http://h3manth.com)",
    "Jon Schlinkert (http://twitter.com/jonschlinkert)"
  ],
  "repository": "micromatch/braces",
  "bugs": {
    "url": "https://github.com/micromatch/braces/issues"
  },
  "license": "MIT",
  "files": [
    "index.js",
    "lib"
  ],
  "main": "index.js",
  "engines": {
    "node": ">=8"
  },
  "scripts": {
    "test": "mocha",
    "benchmark": "node benchmark"
  },
  "dependencies": {
    "fill-range": "^7.1.1"
  },
  "devDependencies": {
    "ansi-colors": "^3.2.4",
    "bash-path": "^2.0.1",
    "gulp-format-md": "^2.0.0",
    "mocha": "^6.1.1"
  },
  "keywords": [
    "alpha",
    "alphabetical",
    "bash",
    "brace",
    "braces",
    "expand",
    "expansion",
    "filepath",
    "fill",
    "fs",
    "glob",
    "globbing",
    "letter",
    "match",
    "matches",
    "matching",
    "number",
    "numerical",
    "path",
    "range",
    "ranges",
    "sh"
  ],
  "verb": {
    "toc": false,
    "layout": "default",
    "tasks": [
      "readme"
    ],
    "lint": {
      "reflinks": true
    },
    "plugins": [
      "gulp-format-md"
    ]
  }
 }
--- a/node_modules/buffer-equal-constant-time/.npmignore
+++ b/node_modules/buffer-equal-constant-time/.npmignore
@ -0,0 +1,2 @@
 .*.sw[mnop]
 node_modules/
--- a/node_modules/buffer-equal-constant-time/.travis.yml
+++ b/node_modules/buffer-equal-constant-time/.travis.yml
@ -0,0 +1,4 @@
 language: node_js
 node_js:
 - "0.11"
 - "0.10"
--- a/node_modules/buffer-equal-constant-time/LICENSE.txt
+++ b/node_modules/buffer-equal-constant-time/LICENSE.txt
@ -0,0 +1,12 @@
 Copyright (c) 2013, GoInstant Inc., a salesforce.com company
 All rights reserved.
 Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
 * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
 * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
 * Neither the name of salesforce.com, nor GoInstant, nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
--- a/node_modules/buffer-equal-constant-time/README.md
+++ b/node_modules/buffer-equal-constant-time/README.md
@ -0,0 +1,50 @@
 # buffer-equal-constant-time
 Constant-time `Buffer` comparison for node.js.  Should work with browserify too.
 [![Build Status](https://travis-ci.org/goinstant/buffer-equal-constant-time.png?branch=master)](https://travis-ci.org/goinstant/buffer-equal-constant-time)
 ```sh
  npm install buffer-equal-constant-time
 ```
 # Usage
 ```js
  var bufferEq = require('buffer-equal-constant-time');
  var a = new Buffer('asdf');
  var b = new Buffer('asdf');
  if (bufferEq(a,b)) {
    // the same!
  } else {
    // different in at least one byte!
  }
 ```
 If you'd like to install an `.equal()` method onto the node.js `Buffer` and
 `SlowBuffer` prototypes:
 ```js
  require('buffer-equal-constant-time').install();
  var a = new Buffer('asdf');
  var b = new Buffer('asdf');
  if (a.equal(b)) {
    // the same!
  } else {
    // different in at least one byte!
  }
 ```
 To get rid of the installed `.equal()` method, call `.restore()`:
 ```js
  require('buffer-equal-constant-time').restore();
 ```
 # Legal
 &copy; 2013 GoInstant Inc., a salesforce.com company
 Licensed under the BSD 3-clause license.
--- a/node_modules/buffer-equal-constant-time/index.js
+++ b/node_modules/buffer-equal-constant-time/index.js
@ -0,0 +1,41 @@
 /*jshint node:true */
 'use strict';
 var Buffer = require('buffer').Buffer; // browserify
 var SlowBuffer = require('buffer').SlowBuffer;
 module.exports = bufferEq;
 function bufferEq(a, b) {
  // shortcutting on type is necessary for correctness
  if (!Buffer.isBuffer(a) || !Buffer.isBuffer(b)) {
    return false;
  }
  // buffer sizes should be well-known information, so despite this
  // shortcutting, it doesn't leak any information about the *contents* of the
  // buffers.
  if (a.length !== b.length) {
    return false;
  }
  var c = 0;
  for (var i = 0; i < a.length; i++) {
    /*jshint bitwise:false */
    c |= a[i] ^ b[i]; // XOR
  }
  return c === 0;
 }
 bufferEq.install = function() {
  Buffer.prototype.equal = SlowBuffer.prototype.equal = function equal(that) {
    return bufferEq(this, that);
  };
 };
 var origBufEqual = Buffer.prototype.equal;
 var origSlowBufEqual = SlowBuffer.prototype.equal;
 bufferEq.restore = function() {
  Buffer.prototype.equal = origBufEqual;
  SlowBuffer.prototype.equal = origSlowBufEqual;
 };
--- a/node_modules/buffer-equal-constant-time/package.json
+++ b/node_modules/buffer-equal-constant-time/package.json
@ -0,0 +1,21 @@
 {
  "name": "buffer-equal-constant-time",
  "version": "1.0.1",
  "description": "Constant-time comparison of Buffers",
  "main": "index.js",
  "scripts": {
    "test": "mocha test.js"
  },
  "repository": "git@github.com:goinstant/buffer-equal-constant-time.git",
  "keywords": [
    "buffer",
    "equal",
    "constant-time",
    "crypto"
  ],
  "author": "GoInstant Inc., a salesforce.com company",
  "license": "BSD-3-Clause",
  "devDependencies": {
    "mocha": "~1.15.1"
  }
 }
--- a/Show More
+++ b/Show More
		`@ -0,0 +1,2 @@`
							`"use strict";`
							`Object.defineProperty(exports, "__esModule", { value: true });`
		`@ -0,0 +1,2 @@`
							`tidelift: "npm/balanced-match"`
							`patreon: juliangruber`
		`@ -0,0 +1,3 @@`
							`declare const binaryExtensionsJson: readonly string[];`

							`export = binaryExtensionsJson;`
		`@ -0,0 +1 @@`
							`module.exports = require('./binary-extensions.json');`