registry / @adep/cli / 0.0.1

@adep/cli@0.0.1

该版本为 09-03 首批，功能不完整；请升级到 0.0.2 或更高版本

`adep` 命令行工具包位：登录 / 初始化 / 本地调试 / 部署 / 数据库维护 / 云存储 / 静态托管 / 微前端组件（widget），实现见任务单 CLI-001 ~ CLI-003 与 FE-002

Static Scan Results

scanned 25d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 163 KB of source, external domains: 127.0.0.1, adep.jajabjbj.top

Source & flagged code

1 flagged

dist/index.jsView file

Lines 8-48javascript

8 for (var name in all)

9 __defProp(target, name, { get: all[name], enumerable: true });

10};

12// packages/cli/src/credentials.ts

13import { mkdir, open, readFile, rm, stat } from "node:fs/promises";

14import { dirname } from "node:path";

15async function saveCredentials(paths, credentials) {

16 await mkdir(dirname(paths.credentialsFile), { recursive: true });

17 const handle = await open(paths.credentialsFile, "w", 384);

18 try {

19 await handle.writeFile(JSON.stringify(credentials, null, 2));

20 } finally {

21 await handle.close();

22 }

23 await chmodStrict(paths.credentialsFile);

24}

25async function chmodStrict(file) {

26 const info = await stat(file);

27 const mode = info.mode & 511;

28 if (mode !== 384) {

29 const { chmod } = await import("node:fs/promises");

30 await chmod(file, 384);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L28

31 }

32}

33async function loadCredentials(paths) {

34 try {

35 const raw = await readFile(paths.credentialsFile, "utf8");

36 const parsed = JSON.parse(raw);

37 if (typeof parsed["server"] !== "string" || typeof parsed["email"] !== "string" || typeof parsed["encodedToken"] !== "string") {

38 return null;

39 }

40 return {

41 server: parsed["server"],

42 email: parsed["email"],

43 encodedToken: parsed["encodedToken"]

44 };

45 } catch {

46 return null;

47 }

48}

Source & flagged code

1 flagged · loading source

dist/index.jsView file

28if (mode !== 384) { L29: const { chmod } = await import("node:fs/promises"); L30: await chmod(file, 384);

@adep/cli@0.0.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code