registry / @apex-stack/core / 0.1.16

@apex-stack/core@0.1.16

The full-stack meta-framework for Alpine.js — CLI and runtime

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 17 file(s), 54.7 KB of source

Source & flagged code

2 flagged

dist/server-GFQQABB4.jsView file

Lines 130-170javascript

130 ${frameHtml}

131 <details${frameHtml ? "" : " open"}><summary>Stack trace</summary><pre class="stack">${esc(stack)}</pre></details>

132 <p class="foot">Fix the error and save \u2014 this page reloads automatically.</p>`;

133 return page(`${kind} \u2014 Apex JS`, body);

134}

135function renderNotFoundPage(url, routes) {

136 const list = routes.length ? routes.map((r) => `<li>${esc(r.pattern)}</li>`).join("") : "<li>no pages yet \u2014 add pages/index.alpine</li>";

137 const body = `

138 <div class="brand">${MARK} Apex JS <span class="pill nf">404</span></div>

139 <p class="kind nf">404 \u2014 Not found</p>

140 <h1>No route matches <code>${esc(url)}</code></h1>

141 <p class="sub">These routes are available:</p>

142 <ul class="routes">${list}</ul>

143 <p class="foot">Add a file under <code>pages/</code> to create a new route.</p>`;

144 return page("404 \u2014 Apex JS", body);

145}

146

147// src/dev/server.ts

148async function startDevServer(options) {

149 const port = options.port ?? 3e3;

150 const pageId = options.pageId ?? "/pages/index.alpine";

151 const req = createRequire(import.meta.url);

152 const tryResolve = (spec) => {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server-GFQQABB4.jsView on unpkg · L150

153 try {

154 return req.resolve(spec);

155 } catch {

156 return void 0;

157 }

158 };

159 const alpine = tryResolve("alpinejs");

160 const kit = tryResolve("@apex-stack/kit");

161 const coreClient = fileURLToPath(new URL("./client.js", import.meta.url));

162 const coreSelf = fileURLToPath(new URL("./index.js", import.meta.url));

163 const alias = {

164 "@apex-stack/core/client": coreClient,

165 "@apex-stack/core": coreSelf

166 };

167 if (alpine) alias.alpinejs = alpine;

168 if (kit) alias["@apex-stack/kit"] = kit;

169 const plugins = [apex({ clientRuntime: "@apex-stack/core/client" })];

170 try {

•matchType = previous_version_dangerous_delta matchedPackage = @apex-stack/core@0.1.15 matchedIdentity = npm:QGFwZXgtc3RhY2svY29yZQ:0.1.15 similarity = 0.882 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server-GFQQABB4.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/server-GFQQABB4.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server-GFQQABB4.jsView on unpkg

150const pageId = options.pageId ?? "/pages/index.alpine"; L151: const req = createRequire(import.meta.url); L152: const tryResolve = (spec) => {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server-GFQQABB4.jsView on unpkg · L150

Findings

1 High3 Medium3 Low

HighPrevious Version Dangerous Deltadist/server-GFQQABB4.js

MediumDynamic Requiredist/server-GFQQABB4.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

dist/server-GFQQABB4.jsView file

Lines 130-170javascript

130 ${frameHtml}

131 <details${frameHtml ? "" : " open"}><summary>Stack trace</summary><pre class="stack">${esc(stack)}</pre></details>

132 <p class="foot">Fix the error and save \u2014 this page reloads automatically.</p>`;

133 return page(`${kind} \u2014 Apex JS`, body);

134}

135function renderNotFoundPage(url, routes) {

136 const list = routes.length ? routes.map((r) => `<li>${esc(r.pattern)}</li>`).join("") : "<li>no pages yet \u2014 add pages/index.alpine</li>";

137 const body = `

138 <div class="brand">${MARK} Apex JS <span class="pill nf">404</span></div>

139 <p class="kind nf">404 \u2014 Not found</p>

140 <h1>No route matches <code>${esc(url)}</code></h1>

141 <p class="sub">These routes are available:</p>

142 <ul class="routes">${list}</ul>

143 <p class="foot">Add a file under <code>pages/</code> to create a new route.</p>`;

144 return page("404 \u2014 Apex JS", body);

145}

146

147// src/dev/server.ts

148async function startDevServer(options) {

149 const port = options.port ?? 3e3;

150 const pageId = options.pageId ?? "/pages/index.alpine";

151 const req = createRequire(import.meta.url);

152 const tryResolve = (spec) => {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server-GFQQABB4.jsView on unpkg · L150

153 try {

154 return req.resolve(spec);

155 } catch {

156 return void 0;

157 }

158 };

159 const alpine = tryResolve("alpinejs");

160 const kit = tryResolve("@apex-stack/kit");

161 const coreClient = fileURLToPath(new URL("./client.js", import.meta.url));

162 const coreSelf = fileURLToPath(new URL("./index.js", import.meta.url));

163 const alias = {

164 "@apex-stack/core/client": coreClient,

165 "@apex-stack/core": coreSelf

166 };

167 if (alpine) alias.alpinejs = alpine;

168 if (kit) alias["@apex-stack/kit"] = kit;

169 const plugins = [apex({ clientRuntime: "@apex-stack/core/client" })];

170 try {

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server-GFQQABB4.jsView on unpkg