registry / @atlaskit/afm-i18n-platform-elements-emoji / 2.178.0

@atlaskit/afm-i18n-platform-elements-emoji@2.178.0

NPM i18n package for AFM platform-elements-emoji published by Traduki

Static Scan Results

scanned 7h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 94 file(s), 387 KB of source

Source & flagged code

2 flagged

build.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execSync } = require('child_process');

4const fs = require('fs');

High

Child Process

Package source references child process execution.

build.jsView on unpkg · L2

5const path = require('path');

7console.log('🚀 Starting build process...');

9// Clean dist directory

10console.log('🧹 Cleaning dist directory...');

11if (fs.existsSync('./dist')) {

12 fs.rmSync('./dist', { recursive: true, force: true });

13}

15// Create dist directories

16console.log('📁 Creating dist directories...');

17fs.mkdirSync('./dist/esm', { recursive: true });

18fs.mkdirSync('./dist/cjs', { recursive: true });

19fs.mkdirSync('./dist/types', { recursive: true });

22// Generate i18n/index.ts file dynamically

Lines 44-84javascript

44`;

46 fs.writeFileSync(i18nIndexPath, i18nIndexContent);

47 console.log(`✅ i18n/index.ts generated successfully with ${languages.length} languages`);

48 } else {

49 console.log('⚠️ No language files found for i18n/index.ts generation');

50 }

51}

53// Generate root index.ts file

54console.log('📝 Generating root index.ts...');

Source & flagged code

2 flagged · loading source

build.jsView file

2L3: const { execSync } = require('child_process'); L4: const fs = require('fs');

High

Child Process

Package source references child process execution.

build.jsView on unpkg · L2

64try { L65: execSync('npx tsc --project tsconfig.json', { stdio: 'inherit' }); L66: console.log('✅ ES modules built successfully');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build.jsView on unpkg · L64

Findings

3 High1 Medium4 Low

HighChild Processbuild.js

HighShell

HighRuntime Package Installbuild.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

build.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execSync } = require('child_process');

4const fs = require('fs');

High

Child Process

Package source references child process execution.

build.jsView on unpkg · L2

5const path = require('path');

7console.log('🚀 Starting build process...');

9// Clean dist directory

10console.log('🧹 Cleaning dist directory...');

11if (fs.existsSync('./dist')) {

12 fs.rmSync('./dist', { recursive: true, force: true });

13}

15// Create dist directories

16console.log('📁 Creating dist directories...');

17fs.mkdirSync('./dist/esm', { recursive: true });

18fs.mkdirSync('./dist/cjs', { recursive: true });

19fs.mkdirSync('./dist/types', { recursive: true });

22// Generate i18n/index.ts file dynamically

Lines 44-84javascript

44`;

46 fs.writeFileSync(i18nIndexPath, i18nIndexContent);

47 console.log(`✅ i18n/index.ts generated successfully with ${languages.length} languages`);

48 } else {

49 console.log('⚠️ No language files found for i18n/index.ts generation');

50 }

51}

53// Generate root index.ts file

54console.log('📝 Generating root index.ts...');