registry / @adep/cli / 0.0.4

@adep/cli@0.0.4

`adep` 命令行工具包位：登录 / 初始化 / 本地调试 / 部署 / 数据库维护 / 云存储 / 静态托管 / 微前端组件（widget），实现见任务单 CLI-001 ~ CLI-003 与 FE-002

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 267 KB of source, external domains: 127.0.0.1, adep.jajabjbj.top, registry.npmjs.org

Source & flagged code

3 flagged

dist/index.jsView file

Lines 8-48javascript

8 for (var name in all)

9 __defProp(target, name, { get: all[name], enumerable: true });

10};

12// packages/cli/src/credentials.ts

13import { mkdir, open, readFile, rm, stat } from "node:fs/promises";

14import { dirname } from "node:path";

15async function saveCredentials(paths, credentials) {

16 await mkdir(dirname(paths.credentialsFile), { recursive: true });

17 const handle = await open(paths.credentialsFile, "w", 384);

18 try {

19 await handle.writeFile(JSON.stringify(credentials, null, 2));

20 } finally {

21 await handle.close();

22 }

23 await chmodStrict(paths.credentialsFile);

24}

25async function chmodStrict(file) {

26 const info = await stat(file);

27 const mode = info.mode & 511;

28 if (mode !== 384) {

29 const { chmod } = await import("node:fs/promises");

30 await chmod(file, 384);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L28

31 }

32}

33async function loadCredentials(paths) {

34 try {

35 const raw = await readFile(paths.credentialsFile, "utf8");

36 const parsed = JSON.parse(raw);

37 if (typeof parsed["server"] !== "string" || typeof parsed["email"] !== "string" || typeof parsed["encodedToken"] !== "string") {

38 return null;

39 }

40 return {

41 server: parsed["server"],

42 email: parsed["email"],

43 encodedToken: parsed["encodedToken"]

44 };

45 } catch {

46 return null;

47 }

48}

dist/worker-entry.jsView file

Lines 225-265javascript

225 const bareCache = /* @__PURE__ */ new Map();

226 const entryExports = loadModule(entry, files, sandboxGlobals, cache, resolveBare, bareCache);

227 const

Source & flagged code

3 flagged · loading source

dist/index.jsView file

@adep/cli@0.0.4

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code