registry / @atlaskit/afm-i18n-platform-bitbucket-panel / 2.173.0

@atlaskit/afm-i18n-platform-bitbucket-panel@2.173.0

NPM i18n package for AFM platform-bitbucket-panel published by Traduki

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 82 file(s), 31.6 KB of source

Source & flagged code

2 flagged

build.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execSync } = require('child_process');

4const fs = require('fs');

High

Child Process

Package source references child process execution.

build.jsView on unpkg · L2

5const path = require('path');

7console.log('🚀 Starting build process...');

9// Clean dist directory

10console.log('🧹 Cleaning dist directory...');

11if (fs.existsSync('./dist')) {

12 fs.rmSync('./dist', { recursive: true, force: true });

13}

15// Create dist directories

16console.log('📁 Creating dist directories...');

17fs.mkdirSync('./dist/esm', { recursive: true });

18fs.mkdirSync('./dist/cjs', { recursive: true });

19fs.mkdirSync('./dist/types', { recursive: true });

22// Generate i18n/index.ts file dynamically

Lines 44-84javascript

44`;

46 fs.writeFileSync(i18nIndexPath, i18nIndexContent);

47 console.log(`✅ i18n/index.ts generated successfully with ${languages.length} languages`);

48 } else {

49 console.log('⚠️ No language files found for i18n/index.ts generation');

50 }

51}

53// Generate root index.ts file

54console.log('📝 Generating root index.ts...');

Source & flagged code

2 flagged · loading source

build.jsView file

2L3: const { execSync } = require('child_process'); L4: const fs = require('fs');

High

Child Process

Package source references child process execution.

build.jsView on unpkg · L2

64try { L65: execSync('npx tsc --project tsconfig.json', { stdio: 'inherit' }); L66: console.log('✅ ES modules built successfully');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build.jsView on unpkg · L64

Findings

3 High3 Low

HighChild Processbuild.js

HighShell

HighRuntime Package Installbuild.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Source & flagged code

2 flagged

build.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execSync } = require('child_process');

4const fs = require('fs');

High

Child Process

Package source references child process execution.

build.jsView on unpkg · L2

5const path = require('path');

7console.log('🚀 Starting build process...');

9// Clean dist directory

10console.log('🧹 Cleaning dist directory...');

11if (fs.existsSync('./dist')) {

12 fs.rmSync('./dist', { recursive: true, force: true });

13}

15// Create dist directories

16console.log('📁 Creating dist directories...');

17fs.mkdirSync('./dist/esm', { recursive: true });

18fs.mkdirSync('./dist/cjs', { recursive: true });

19fs.mkdirSync('./dist/types', { recursive: true });

22// Generate i18n/index.ts file dynamically

Lines 44-84javascript

44`;

46 fs.writeFileSync(i18nIndexPath, i18nIndexContent);

47 console.log(`✅ i18n/index.ts generated successfully with ${languages.length} languages`);

48 } else {

49 console.log('⚠️ No language files found for i18n/index.ts generation');

50 }

51}

53// Generate root index.ts file

54console.log('📝 Generating root index.ts...');