registry / @alienplatform/testing / 2.0.0

@alienplatform/testing@2.0.0

Testing framework for Alien applications

Static Scan Results

scanned 16h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 22.8 KB of source, external domains: api.alien.dev

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-21javascript

1import { n as TestingUnsupportedPlatformError, r as withTestingContext, t as TestingOperationFailedError } from "./errors.js";

2import { execFile, spawn } from "node:child_process";

3import { existsSync, readFileSync, rmSync } from "node:fs";

4import { dirname, join, resolve } from "node:path";

5import { promisify } from "node:util";

6import { AlienError } from "@alienplatform/core";

7import getPort from "get-port";

8import { CommandsClient } from "@alienplatform/commands";

9//#region src/deployment.ts

10/**

11* Deployment — handle to a deployed application for testing

12*

13* Supports two deployment modes:

14* - Dev mode: manages a child `alien dev` process (local platform)

15* - API mode: manages a deployment via platform API (cloud platforms)

16*/

17const execFileAsync$1 = promisify(execFile);

18function signalProcessTree$1(proc, signal) {

19 if (proc.pid && process.platform !== "win32") try {

20 process.kill(-proc.pid, signal);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L1

21 return;

•matchType = previous_version_dangerous_delta matchedPackage = @alienplatform/testing@1.14.0 matchedIdentity = npm:QGFsaWVucGxhdGZvcm0vdGVzdGluZw:1.14.0 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code