feat: update dependencies and refactor to remove elasticio-node (#61)

A3a3e1 · web-flow · commit f38dd74398a9 · 2025-11-19T17:08:58.000+02:00
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -95,7 +95,7 @@ jobs:
       - node/install:
           node-version: << pipeline.parameters.node-version >>
       - setup_remote_docker:
-          version: 19.03.13
+          version: default
           docker_layer_caching: true
       # build and push Docker image
       - run:
diff --git a/.grype-ignore.yaml b/.grype-ignore.yaml
@@ -0,0 +1,15 @@
+ignore:
+  - vulnerability: CVE-2023-2650
+    package:
+      name: libssl3
+      version: 3.1.0-r4
+
+  - vulnerability: CVE-2023-2650
+    package:
+      name: libcrypto3
+      version: 3.1.0-r4
+
+  - vulnerability: CVE-2023-45853
+    package:
+      name: zlib
+      version: 1.3.1-r2
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## 1.1.0 (November 19, 2025)
+
+*   Updated dependencies to the latest versions
+*   Removed unused `request` and `bunyan` dependencies
+*   Refactored the code to remove `elasticio-node` dependency to fix security vulnerabilities
+*   Improved `README.md`
+
 ## 1.0.13 (March 22, 2024)
 
 * Updated Sailor version to 2.7.2
diff --git a/Dockerfile b/Dockerfile
@@ -0,0 +1,20 @@
+FROM node:18-alpine AS base
+RUN apk add --update git tini python3 make g++ && rm -rf /var/cache/apk/*
+WORKDIR /home/node
+COPY --chown=node:node . ./
+FROM base AS dependencies
+ENV LOG_OUTPUT_MODE=short
+USER node
+RUN npm config set update-notifier false
+RUN npm install --no-audit
+RUN npm test
+RUN npm prune --production
+RUN rm -rf spec* .circleci README.md LICENSE .idea
+FROM node:18-alpine AS release
+LABEL elastic.io.component="{\"title\":\"Transformation\",\"version\":\"1.0.13\",\"description\":\"Generic Data Transformation Component\",\"docsUrl\":\"https://docs.elastic.io/components/jsonata/index.html\",\"actions\":{\"transform\":{\"title\":\"Transform\",\"main\":\"./lib/actions/transform.js\",\"fields\":{\"expression\":{\"label\":\"JSONata Expression\",\"required\":true,\"viewClass\":\"JSONataView\"}},\"metadata\":{\"out\":{}}}},\"sailor_version\":\"2.7.7\",\"language\":\"nodejs\"}"
+LABEL elastic.io.logo="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"
+WORKDIR /home/node
+COPY --from=base --chown=node:node /sbin/tini /sbin/tini
+COPY --from=dependencies --chown=node:node /home/node /home/node
+USER node
+ENTRYPOINT ["/sbin/tini", "-v", "-e", "143", "--"]
diff --git a/README.md b/README.md
@@ -1,17 +1,16 @@
-# jsonata-transform-component [![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Dependency Status][daviddm-image]][daviddm-url]
-> Dedicated data transformation component for elastic.io platform based on JSONata
+# JSONata Transform Component [![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Dependency Status][daviddm-image]][daviddm-url]
+
+> A dedicated data transformation component for the elastic.io platform that is based on JSONata.
 
 ## Authentication
 
 This component requires no authentication.
 
 ## How it works
 
-This component takes the incoming message body and applies the configured JSONata tranformation on it. It uses 
-a fact that JSONata expression is a superset of JSON document so that by default any valid JSON document is
-a valid JSONata expression.
+This component takes the incoming message body and applies the configured JSONata transformation to it. It uses the fact that a JSONata expression is a superset of a JSON document, so by default, any valid JSON document is a valid JSONata expression.
 
-For example let's take this sample incoming message body:
+For example, let's take this sample incoming message body:
 
 ```json
 {
@@ -56,7 +55,7 @@ For example let's take this sample incoming message body:
 }
 ```
 
-You can use following JSONata expressions to transform it:
+You can use the following JSONata expression to transform it:
 
 ```jsonata
 {
@@ -65,7 +64,7 @@ You can use following JSONata expressions to transform it:
 }
 ```
 
-result of that transofrmation will be the following JSON document ([jsonata link](http://try.jsonata.org/B1ctn36ub)):
+The result of that transformation will be the following JSON document ([JSONata link](http://try.jsonata.org/B1ctn36ub)):
 
 ```json
 {
@@ -87,7 +86,7 @@ I hope you've got the idea. Now you can also do something more complicated, like
 }
 ```
 
-resulting in ([jsonata link](http://try.jsonata.org/B1ctn36ub)):
+Resulting in ([JSONata link](http://try.jsonata.org/B1ctn36ub)):
 
 ```json
 {
diff --git a/component.json b/component.json
@@ -1,6 +1,6 @@
 {
   "title": "Transformation",
-  "version": "1.0.13",
+  "version": "1.1.0",
   "description": "Generic Data Transformation Component",
   "docsUrl": "https://docs.elastic.io/components/jsonata/index.html",
   "actions": {
diff --git a/lib/actions/transform.js b/lib/actions/transform.js
@@ -1,5 +1,5 @@
-const eioUtils = require('elasticio-node').messages;
 const { JsonataTransform } = require('@elastic.io/component-commons-library');
+const { messages } = require('../utils');
 
 /**
  * This method will be called from elastic.io platform providing following data
@@ -27,13 +27,13 @@ async function processAction(msg, cfg) {
     // eslint-disable-next-line no-restricted-syntax
     for (const item of result) {
       // eslint-disable-next-line no-await-in-loop
-      await this.emit('data', eioUtils.newMessageWithBody(item));
+      await this.emit('data', messages.newMessageWithBody(item));
     }
 
     return Promise.resolve();
   }
   this.logger.info('1 message will be send to the next step');
-  return Promise.resolve(eioUtils.newMessageWithBody(result));
+  return Promise.resolve(messages.newMessageWithBody(result));
 }
 
 module.exports.process = processAction;
diff --git a/lib/utils.js b/lib/utils.js
@@ -0,0 +1,4 @@
+exports.messages = {
+  newMessageWithBody: (body) => ({ body, headers: {} }),
+  newEmptyMessage: () => ({ body: {}, headers: {} }),
+};
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
diff --git a/spec/transform.spec.js b/spec/transform.spec.js

Original file line number	Diff line number	Diff line change
`@@ -1,17 +1,16 @@`
`1`		`-# jsonata-transform-component [![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Dependency Status][daviddm-image]][daviddm-url]`
`2`		`-> Dedicated data transformation component for elastic.io platform based on JSONata`
	`1`	`+# JSONata Transform Component [![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Dependency Status][daviddm-image]][daviddm-url]`
	`2`	`+`
	`3`	`+> A dedicated data transformation component for the elastic.io platform that is based on JSONata.`
`3`	`4`
`4`	`5`	`## Authentication`
`5`	`6`
`6`	`7`	`This component requires no authentication.`
`7`	`8`
`8`	`9`	`## How it works`
`9`	`10`
`10`		`-This component takes the incoming message body and applies the configured JSONata tranformation on it. It uses`
`11`		`-a fact that JSONata expression is a superset of JSON document so that by default any valid JSON document is`
`12`		`-a valid JSONata expression.`
	`11`	`+This component takes the incoming message body and applies the configured JSONata transformation to it. It uses the fact that a JSONata expression is a superset of a JSON document, so by default, any valid JSON document is a valid JSONata expression.`
`13`	`12`
`14`		`-For example let's take this sample incoming message body:`
	`13`	`+For example, let's take this sample incoming message body:`
`15`	`14`
`16`	`15`	```json
`17`	`16`	`{`
`@@ -56,7 +55,7 @@ For example let's take this sample incoming message body:`
`56`	`55`	`}`
`57`	`56`	```
`58`	`57`
`59`		`-You can use following JSONata expressions to transform it:`
	`58`	`+You can use the following JSONata expression to transform it:`
`60`	`59`
`61`	`60`	```jsonata
`62`	`61`	`{`
`@@ -65,7 +64,7 @@ You can use following JSONata expressions to transform it:`
`65`	`64`	`}`
`66`	`65`	```
`67`	`66`
`68`		`-result of that transofrmation will be the following JSON document ([jsonata link](http://try.jsonata.org/B1ctn36ub)):`
	`67`	`+The result of that transformation will be the following JSON document ([JSONata link](http://try.jsonata.org/B1ctn36ub)):`
`69`	`68`
`70`	`69`	```json
`71`	`70`	`{`
`@@ -87,7 +86,7 @@ I hope you've got the idea. Now you can also do something more complicated, like`
`87`	`86`	`}`
`88`	`87`	```
`89`	`88`
`90`		`-resulting in ([jsonata link](http://try.jsonata.org/B1ctn36ub)):`
	`89`	`+Resulting in ([JSONata link](http://try.jsonata.org/B1ctn36ub)):`
`91`	`90`
`92`	`91`	```json
`93`	`92`	`{`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"title": "Transformation",`
`3`		`- "version": "1.0.13",`
	`3`	`+ "version": "1.1.0",`
`4`	`4`	`"description": "Generic Data Transformation Component",`
`5`	`5`	`"docsUrl": "https://docs.elastic.io/components/jsonata/index.html",`
`6`	`6`	`"actions": {`
Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`		`-const eioUtils = require('elasticio-node').messages;`
`2`	`1`	`const { JsonataTransform } = require('@elastic.io/component-commons-library');`
	`2`	`+const { messages } = require('../utils');`
`3`	`3`
`4`	`4`	`/**`
`5`	`5`	`* This method will be called from elastic.io platform providing following data`
`@@ -27,13 +27,13 @@ async function processAction(msg, cfg) {`
`27`	`27`	`// eslint-disable-next-line no-restricted-syntax`
`28`	`28`	`for (const item of result) {`
`29`	`29`	`// eslint-disable-next-line no-await-in-loop`
`30`		`- await this.emit('data', eioUtils.newMessageWithBody(item));`
	`30`	`+ await this.emit('data', messages.newMessageWithBody(item));`
`31`	`31`	`}`
`32`	`32`
`33`	`33`	`return Promise.resolve();`
`34`	`34`	`}`
`35`	`35`	`this.logger.info('1 message will be send to the next step');`
`36`		`- return Promise.resolve(eioUtils.newMessageWithBody(result));`
	`36`	`+ return Promise.resolve(messages.newMessageWithBody(result));`
`37`	`37`	`}`
`38`	`38`
`39`	`39`	`module.exports.process = processAction;`