Feat/add nodemailer lib

.eslintrc.js

@@ -1,6 +1,7 @@
 module.exports = {
   extends: 'airbnb-base',
   rules: {
+    'linebreak-style': 'off',
   },
   env: {
     node: true,

.nsprc

@@ -1,30 +1,6 @@
 {
-  "GHSA-fjxv-7rqg-78g4": {
+  "GHSA-p8p7-x288-28g6": {
     "active": true,
-    "notes": "This vulnerability is in form-data used transitively via deprecated 'request' library. We do not use form-data directly. Waiting on upstream libraries to upgrade."
-  },
-  "GHSA-869p-cjfg-cm3x": {
-    "active": true,
-    "notes": "jws vulnerability in jsonwebtoken (via @elastic.io/maester-client -> elasticio-sailor-nodejs). This is a transitive dependency from sailor. Waiting on upstream libraries to upgrade."
-  },
-  "GHSA-6rw7-vpxm-498p": {
-    "active": true,
-    "notes": "qs vulnerability in request (via co-request). This is a transitive dependency. The deprecated 'request' library is used by co-request. Waiting on upstream libraries to upgrade."
-  },
-  "GHSA-43fc-jf86-j433": {
-    "active": true,
-    "notes": "Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig. This is a transitive dependency. Waiting on upstream libraries to upgrade."
-  },
-    "GHSA-3ppc-4f35-3m26": {
-    "active": true,
-    "notes": "minimatch ReDoS via repeated wildcards. minimatch is only used with static, developer-defined glob patterns in this project; no user input is passed as patterns. Waiting on upstream libraries to upgrade."
-  },
-  "GHSA-7r86-cg39-jmmj": {
-    "active": true,
-    "notes": "minimatch ReDoS via multiple non-adjacent GLOBSTAR segments. minimatch is only used with static, developer-defined glob patterns in this project; no user input is passed as patterns. Waiting on upstream libraries to upgrade."
-  },
-  "GHSA-23c5-xmqv-rm74": {
-    "active": true,
-    "notes": "minimatch ReDoS via nested extglobs. minimatch is only used with static, developer-defined glob patterns in this project; no user input is passed as patterns. Waiting on upstream libraries to upgrade."
+    "notes": "Server-Side Request Forgery in deprecated 'request' library. Used by co-request. No fix available without replacing the library, which is currently restricted for backward compatibility."
   }
 }

CHANGELOG.md

@@ -1,3 +1,10 @@
+## 1.2.16 (May 11, 2026)
+
+* Added `nodemailer` `8.0.7` lib support
+* Updated the following dependencies:
+ * axios `1.13.5` -> `1.16.0`
+ * strong-soap `5.0.2` -> `5.0.9`
+
 ## 1.2.15 (February 27, 2026)
 
 * Add `strong-soap` v5.0.7 lib support

README.md

@@ -36,6 +36,7 @@ Built-in Node.js global objects are also supported.
 - [`request`](https://github.com/request/request) - Http Client (wrapped in `co` - [this library](https://www.npmjs.com/package/co-request) so that it is pre-promisified)
 - [`strong-soap`](https://github.com/loopbackio/strong-soap) - SOAP client for invoking web services
 - `_` - [Lodash](https://lodash.com/)
+- [`nodemailer`](https://nodemailer.com/) - Library for sending emails from Node.js
 
 ## Code component usage Examples
 

actions/code.js

@@ -1,7 +1,7 @@
-// eslint-disable-next-line import/no-extraneous-dependencies
 const _ = require('lodash');
 const vm = require('vm');
 const co = require('co');
+const nodemailer = require('nodemailer');
 const request = require('co-request');
 const { soap } = require('strong-soap');
 
@@ -46,6 +46,7 @@ exports.process = async function (msg, conf, snapshot) {
 
     // Other Libraries
     _,
+    nodemailer,
     request,
     soap,
     wait: wait.bind(this),

component.json

@@ -1,6 +1,6 @@
 {
     "title": "Node.js Code",
-    "version": "1.2.15",
+    "version": "1.2.16-dev.3",
     "description": "You can write your own code and deploy it as part of integration process.",
     "docsUrl": "http://go2.elastic.io/code-component",
     "fields": {
@@ -30,4 +30,4 @@
             }
         }
     }
-}
+}