registry  /  @averildwi/nest-prisma  /  1.0.5

@averildwi/nest-prisma@1.0.5

An interactive CLI generator to scaffold Prisma ORM with flexible version handling (stable vs latest) for NestJS projects.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 10.3 KB of source, external domains: github.com

Source & flagged code

2 flagged · loading source
index.jsView file
4const path = require('path'); L5: const { execSync } = require('child_process'); L6:
High
Child Process

Package source references child process execution.

index.jsView on unpkg · L4
101log('cyan', `\n📦 [1/5] Installing core libraries and driver adapters for ${dbChoice}...`); L102: execSync(`npm install ${mainDeps}`, { stdio: 'inherit' }); L103: execSync(`npm install --save-dev ${devDeps}`, { stdio: 'inherit' });
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L101

Findings

3 High2 Medium4 Low
HighChild Processindex.js
HighShell
HighRuntime Package Installindex.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings