registry / @adep/cli / 0.0.9

@adep/cli@0.0.9

`adep` 命令行工具包位：登录 / 初始化 / 本地调试 / 部署 / 数据库维护 / 云存储 / 静态托管 / 微前端组件（widget），实现见任务单 CLI-001 ~ CLI-003 与 FE-002

Static Scan Results

scanned 26d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 273 KB of source, external domains: 127.0.0.1, adep.jajabjbj.top, registry.npmjs.org

Source & flagged code

2 flagged

dist/index.jsView file

Lines 22-62javascript

22 "use strict";

23 }

24});

26// packages/cli/src/credentials.ts

27import { mkdir, open, readFile, rm, stat } from "node:fs/promises";

28import { dirname } from "node:path";

29async function saveCredentials(paths, credentials) {

30 await mkdir(dirname(paths.credentialsFile), { recursive: true });

31 const handle = await open(paths.credentialsFile, "w", 384);

32 try {

33 await handle.writeFile(JSON.stringify(credentials, null, 2));

34 } finally {

35 await handle.close();

36 }

37 await chmodStrict(paths.credentialsFile);

38}

39async function chmodStrict(file) {

40 const info = await stat(file);

41 const mode = info.mode & 511;

42 if (mode !== 384) {

43 const { chmod } = await import("node:fs/promises");

44 await chmod(file, 384);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L42

45 }

46}

47async function loadCredentials(paths) {

48 try {

49 const raw = await readFile(paths.credentialsFile, "utf8");

50 const parsed = JSON.parse(raw);

51 if (typeof parsed["server"] !== "string" || typeof parsed["email"] !== "string" || typeof parsed["encodedToken"] !== "string") {

52 return null;

53 }

54 return {

55 server: parsed["server"],

56 email: parsed["email"],

57 encodedToken: parsed["encodedToken"]

58 };

59 } catch {

60 return null;

61 }

62}

dist/worker-entry.jsView file

Lines 225-265javascript

225 const bareCache = /* @__PURE__ */ new Map();

226 const entryExports = loadModule(entry, files, sandboxGlobals, cache, resolveBare, bareCache);

227 const

Source & flagged code

2 flagged · loading source

dist/index.jsView file

42if (mode !== 384) { L43: const { chmod } = await import("node:fs/promises"); L44: await chmod(file, 384);

@adep/cli@0.0.9

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code