registry  /  @acomo/cli  /  1.0.78

@acomo/cli@1.0.78

Official CLI for acomo workflow management platform

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 606 KB of source, external domains: acomo.app, github.com, yargs.js.org

Source & flagged code

3 flagged · loading source
dist/index.jsView file
7634patternName = generic_password severity = medium line = 7634 matchedText = Emailpas...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L7634
927} else { L928: config = mixin2.require(resolvedConfigPath); L929: }
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L927
247function getWindowWidth() { L248: if (typeof process === "object" && process.stdout && process.stdout.columns) { L249: return process.stdout.columns; ... L1275: var _c; L1276: var minNodeVersion = process && process.env && process.env.YARGS_MIN_NODE_VERSION ? Number(process.env.YARGS_MIN_NODE_VERSION) : 12; L1277: var nodeVersion = (_b = (_a = process === null || process === void 0 ? void 0 : process.versions) === null || _a === void 0 ? void 0 : _a.node) !== null && _b !== void 0 ? _b : (_c... ... L1280: if (major < minNodeVersion) { L1281: throw Error(`yargs parser supports a minimum Node.js version of ${minNodeVersion}. Read our version support policy: https://github.com/yargs/yargs-parser#supported-nodejs-versions`... L1282: } ... L1298: } else if (path2.match(/\.json$/)) { L1299: return JSON.parse(readFileSync(path2, "utf8")); L1300: } else {
Medium
Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L247

Findings

6 Medium5 Low
MediumSecret Patterndist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings