v2.4.5

• fix: use LF line ending in cli.js

Full list of commits here:
2.4.4...2.4.5

v2.4.4

• fix(literalmap): fix prototype pollution vuln
• feat: remove prettier dependency
• fix(literalmap): remove debugger statement
• fix: stop using user-input for object properties

Full list of commits here:
2.4.3...2.4.4

v2.4.3

• fix lost nodes from desequence (6b1000f)

Full list of commits here:
2.4.2...2.4.3

v2.4.2

• add both source type (fc5b2b8)

Full list of commits here:
2.4.1...2.4.2

v2.4.1

• fix stringdecoder

Full list of commits here:
2.4.0...2.4.1

v2.4.0

new CLI options:

synchrony deobfuscate <file>

Deobfuscate a file

Positionals:
  file  File to deobfuscate (include extension)              [string] [required]

Options:
      --help                             Show help                     [boolean]
      --version                          Show version number           [boolean]
      --rename                           Rename symbols automatically
                                                      [boolean] [default: false]
      --ecma-version, --esversion, --es  Set ECMA version for AST parser (see
                                         acorn docs)[string] [default: "latest"]
  -c, --config                           Supply a custom deobfuscation config
                                         (see docs)                     [string]
  -o, --output                           Where to output deobfuscated file
                                                                        [string]
  -l, --loose                            Enable loose parsing
                                                      [boolean] [default: false]
      --sourceType, --type               Source type for file ('script' or
                                         'module')  [string] [default: "module"]

Example CLI config (JSON, however the CLI will require it, meaning you can use js files and module.exports = {/*config*/})

{
  "rename": true,
  "ecmaVersion": 14,
  "output": "./a.js",
  "loose": true,
  "sourceType": "module",
  "customTransformers": [
    ["Simplify", {}],
    ["jsc-controlflow", {}],
    ["Simplify", {}],

    ["jsc-calculator", {}],
    ["DeadCode", {}],
    ["Simplify", {}]
  ]
}

Full list of commits here:
2.3.0...2.4.0

v2.3.0

new CLI options:

synchrony deobfuscate 

Deobfuscate a file

Positionals:
  file  File to deobfuscate (include extension)              [string] [required]
Options:
  --help                       Show help                               [boolean]
  --version                    Show version number                     [boolean]
  --rename                     Rename symbols automatically
                                                      [boolean] [default: false]
  --ecma-version, --esversion  Set ECMA version for AST parser (see acorn docs)
                                                    [string] [default: "latest"]

rename symbols automatically if enabled
specify ecma version on command line

2.2.0...2.3.0

v2.2.0

major change

AST nodes require range property!!!, this means if you are using the API and have it deobfuscate AST you must have your parser emit range property on each node

remove dead variables (not read/wrote anywhere)
replace variables that are only read in functions (fixes terser's object unpacking to variable)
unpack arrays that start with a "null" element
demangle minified functions so that they match stringdecoder's required schemas

2.1.5...2.2.0

v2.1.5

fix control flow deflattening

Full Changelog: 2.1.4...2.1.5

v2.1.4

• fix variable reference finder in string decoder (will recurse references instead of looking at top level)
• simplify conditionalexpressions

let x = true ? 'X' : 'Y'
// becomes
let x = 'X'

• desequences in root Program node
• Fix controlflow transformer
• converts single statements if/while/for expressions into block statements
• removes dead if/while statements (e.g. if(false), while(false))
• decodes bare string arrays for kasada and old javascript-obfuscator scripts

2.1.3...2.1.4