[bench] continue adding harnesses and metadata

bench/packages/is-my-json-valid-2.20.0/harness.js

@@ -0,0 +1,14 @@
+const validator = require("is-my-json-valid");
+const esl = require("esl_symbolic");
+var prop = esl.string("prop");
+var schema = {
+  type: "object",
+  properties: {
+    [prop]: {
+    required: true,
+    type: "string",
+   },
+  },
+};
+let validate = validator(schema);
+validate({});

bench/packages/is-my-json-valid-2.20.0/package.json

@@ -0,0 +1,14 @@
+{
+  "dependencies": {
+    "is-my-json-valid": "2.20.0"
+  },
+  "vulnerability": {
+    "type": "code-injection",
+    "ghsa": "https://github.com/advisories/GHSA-f522-ffg8-j8r6",
+    "sink": {
+      "file": "index.js",
+      "line": 571,
+      "code": "validate = validate.toFunction(scope)"
+    }
+  }
+}

bench/packages/json-ptr-2.0.0/harness.js

@@ -0,0 +1,8 @@
+const { JsonPointer } = require("json-ptr");
+const esl_symbolic = require("esl_symbolic");
+var payload = esl_symbolic.string("payload");
+//`/aaa'])) !== 'undefined') {return it;}; ${customSpawn}; spawnSync("touch",["json-ptr"]); if(((['a`
+JsonPointer.get(
+  {},
+  payload
+);

bench/packages/json-ptr-2.0.0/package.json

@@ -0,0 +1,14 @@
+{
+  "dependencies": {
+    "json-ptr": "2.0.0"
+  },
+  "vulnerabilities": {
+    "type": "code-injection",
+    "github": "https://github.com/advisories/GHSA-x5r6-x823-9848",
+    "sink": {
+      "code": "return new Function('it', body);",
+      "file": "src/util.ts",
+      "line": 159,
+    }
+  }
+}

bench/packages/node-rules-3.0.0/harness.js

@@ -0,0 +1,9 @@
+const A = require("node-rules");
+const esl = require("esl_symbolic");
+
+var a = new A();
+var rules = {
+  condition: esl.string("condition"),
+  consequence: esl.string("consequence")
+};
+a.fromJSON(rules);

bench/packages/node-rules-3.0.0/package.json

@@ -0,0 +1,15 @@
+{
+  "index": "index.js",
+  "dependencies": {
+    "node-rules": "3.0.0"
+  },
+  "vulnerability": {
+    "type": "code-injection",
+    "ghsa": "https://github.com/advisories/GHSA-f78f-353m-cf4j",
+    "sink": {
+      "file": "lib/node-rules.js",
+      "lineno": 244,
+      "code": "rules.condition = eval(\"(\"+rules.condition+\")\");"
+    }
+  }
+}

bench/packages/node-rules-4.0.2/harness.js

@@ -0,0 +1,10 @@
+const A = require("node-rules");
+const esl = require("esl_symbolic");
+
+var a = new A();
+var rules = [
+  { condition: esl.string("condition")
+  , consequence: esl.string("consequence")
+  }
+]
+a.fromJSON(rules);

bench/packages/node-rules-4.0.2/package.json

@@ -0,0 +1,14 @@
+{
+  "dependencies": {
+    "node-rules": "4.0.2"
+  },
+  "vulnerability": {
+    "cwe": "code-injection",
+    "ghsa": "https://github.com/advisories/GHSA-8whr-v3gm-w8h9",
+    "sink": {
+      "file": "lib/node-rules.js",
+      "line": 152,
+      "code": "rule.condition = eval(rule.condition);"
+    }
+  }
+}