registry / @adobe/helix-onedrive-cli / 1.11.418

@adobe/helix-onedrive-cli@1.11.418

Helix OneDrive CLI

Static Scan Results

scanned 7h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 24 file(s), 54.2 KB of source, external domains: 01fe5492.ngrok.io, adobe-my.sharepoint.com, adobeioruntime.net, github.com

Source & flagged code

1 flagged

src/utils.jsView file

Lines 1-25javascript

1/*

3 * This file is licensed to you under the Apache License, Version 2.0 (the "License");

4 * you may not use this file except in compliance with the License. You may obtain a copy

5 * of the License at http://www.apache.org/licenses/LICENSE-2.0

6 *

7 * Unless required by applicable law or agreed to in writing, software distributed under

8 * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS

9 * OF ANY KIND, either express or implied. See the License for the specific language

10 * governing permissions and limitations under the License.

11 */

12import path from 'path';

13import fs from 'fs/promises';

15export async function loadCommands(yargs, dir) {

16 const d = await fs.readdir(dir);

17 for (const filename of d) {

18 if (filename.endsWith('.js')) {

19 // eslint-disable-next-line no-await-in-loop

20 const cmd = (await import(path.resolve(dir, filename))).default;

21 yargs.command(cmd);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/utils.jsView on unpkg · L19

22 }

23 }

24}

Source & flagged code

1 flagged · loading source

src/utils.jsView file

19// eslint-disable-next-line no-await-in-loop L20: const cmd = (await import(path.resolve(dir, filename))).default; L21: yargs.command(cmd);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/utils.jsView on unpkg · L19

Findings

2 Medium5 Low

MediumDynamic Requiresrc/utils.js

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

src/utils.jsView file

Lines 1-25javascript

1/*

3 * This file is licensed to you under the Apache License, Version 2.0 (the "License");

4 * you may not use this file except in compliance with the License. You may obtain a copy

5 * of the License at http://www.apache.org/licenses/LICENSE-2.0

6 *

7 * Unless required by applicable law or agreed to in writing, software distributed under

8 * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS

9 * OF ANY KIND, either express or implied. See the License for the specific language

10 * governing permissions and limitations under the License.

11 */

12import path from 'path';

13import fs from 'fs/promises';

15export async function loadCommands(yargs, dir) {

16 const d = await fs.readdir(dir);

17 for (const filename of d) {

18 if (filename.endsWith('.js')) {

19 // eslint-disable-next-line no-await-in-loop

20 const cmd = (await import(path.resolve(dir, filename))).default;

21 yargs.command(cmd);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/utils.jsView on unpkg · L19

22 }

23 }

24}