registry  /  @alienplatform/cli  /  1.13.1

@alienplatform/cli@1.13.1

Alien Developer Platform CLI

Static Scan Results

scanned 15h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemShell
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 2.19 KB of source

Source & flagged code

2 flagged · loading source
bin/alien.jsView file
2L3: import { spawn } from "node:child_process" L4: import { existsSync } from "node:fs"
High
Child Process

Package source references child process execution.

bin/alien.jsView on unpkg · L2
52console.error( L53: `Could not find alien binary for ${platformKey}.\nTry reinstalling: npm install -g @alienplatform/cli`, L54: ) ... L58: // Spawn the binary, forwarding all arguments and stdio L59: const child = spawn(binPath, process.argv.slice(2), { L60: stdio: "inherit",
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/alien.jsView on unpkg · L52

Findings

3 High1 Medium1 Low
HighChild Processbin/alien.js
HighShell
HighRuntime Package Installbin/alien.js
MediumEnvironment Vars
LowFilesystem