refactor: remove trojan-source detection from SourceFile constructor

[fraxken]

No description provided.

[changeset-bot]

🦋 Changeset detected

Latest commit: 309adc6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@nodesecure/js-x-ray	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[Copilot]

Pull Request Overview

This PR refactors the placement of trojan-source detection and updates the getSastAnalysis API and related test invocations.

• Remove trojan-source verification from the SourceFile constructor and migrate it into AstAnalyser.
• Change getSastAnalysis signature to accept only a probe, dropping the initial source string parameter.
• Update all tests to call getSastAnalysis(probe) and adjust SourceFile instantiation without arguments.

Reviewed Changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
workspaces/js-x-ray/test/utils/index.ts	Updated getSastAnalysis signature; removed sourceCodeString arg
workspaces/js-x-ray/test/probes/isUnsafeCommand.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isUnsafeCallee.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isSerializeEnv.spec.ts	Dropped string param; added stray console.log
workspaces/js-x-ray/test/probes/isRequire.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isRegexObject.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isLiteralRegex.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isLiteral.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isImportDeclaration.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isBinaryExpression.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/probes/isArrayExpression.spec.ts	Dropped string parameter in getSastAnalysis calls
workspaces/js-x-ray/test/ProbeRunner.spec.ts	Updated all new SourceFile("") to new SourceFile()
workspaces/js-x-ray/src/SourceFile.ts	Removed trojan-source import and constructor logic
workspaces/js-x-ray/src/AstAnalyser.ts	Added trojan-source detection before probe execution

Comments suppressed due to low confidence (2)

workspaces/js-x-ray/test/utils/index.ts:35

• This change drops the sourceCodeString parameter from getSastAnalysis, which is a breaking API change—please update documentation or add a migration note.

export function getSastAnalysis(

workspaces/js-x-ray/src/AstAnalyser.ts:148

• Add tests to cover the trojan-source detection logic moved into AstAnalyser so that obfuscated-code warnings are verified under the new flow.

    if (trojan.verify(str)) {