registry / @bemedev/dev-utils / 1.0.2

@bemedev/dev-utils@1.0.2

A collection of utilities for Node.js development, including build tools, testing utilities, and configuration management.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 115 file(s), 93.4 KB of source

Source & flagged code

3 flagged

lib/build-tests/cleanup.jsView file

Lines 1-12javascript

1import { TEARDOWN_COMMAND } from "./constants.js";

2import sh from "shelljs";

3//#region src/build-tests/cleanup.ts

High

Shell

Package source references shell execution.

lib/build-tests/cleanup.jsView on unpkg · L1

4const cleanup = () =>

Source & flagged code

3 flagged · loading source

lib/build-tests/cleanup.jsView file

1import { TEARDOWN_COMMAND } from "./constants.js"; L2: import sh from "shelljs"; L3: //#region src/build-tests/cleanup.ts

High

Shell

Package source references shell execution.

lib/build-tests/cleanup.jsView on unpkg · L1

lib/vitest-extended/project.cjsView file

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L2: let vitest_config = require("vitest/config"); L3: //#region src/vitest-extended/project.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/vitest-extended/project.cjsView on unpkg · L1

lib/build-tests/addTarball.cjsView file

13const packed = `${require_build_tests_constants.FILE_ORIGIN}:${await require_build_tests_pack.pack()}`; L14: shelljs.default.exec(`pnpm add -D ${require_build_tests_constants.THIS1}@${packed}`); L15: const file = (0, edit_json_file.default)(require_build_tests_constants.PACKAGE_PATH);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/build-tests/addTarball.cjsView on unpkg · L13

Findings

3 High3 Medium2 Low

HighChild Process

HighShelllib/build-tests/cleanup.js

HighRuntime Package Installlib/build-tests/addTarball.cjs

MediumDynamic Requirelib/vitest-extended/project.cjs

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

lib/vitest-extended/project.cjsView file

Lines 1-21javascript

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

2let vitest_config = require("vitest/config");

3//#region src/vitest-extended/project.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/vitest-extended/project.cjsView on unpkg · L1

4const defineProject = (conf) => {

5 const _env = conf.test?.env ?? {};

6 return (0, vitest_config.defineConfig)({

7 resolve: { tsconfigPaths: true },

8 ...conf,

9 test: {

10 globals: true,

11 logHeapUsage: false,

12 env: {

13 NODE_ENV: "test",

14 ..._env

15 },

16 ...conf.test

17 }

18 });

19};

20//#endregion

21exports.defineProject = defineProject;

lib/build-tests/addTarball.cjsView file

Lines 1-23javascript

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

2const require_runtime = require("../_virtual/_rolldown/runtime.cjs");

3const require_build_tests_constants = require("./constants.cjs");

4const require_build_tests_pack = require("./pack.cjs");

5let shelljs = require("shelljs");

6shelljs = require_runtime.__toESM(shelljs, 1);

7let edit_json_file = require("edit-json-file");

8edit_json_file = require_runtime.__toESM(edit_json_file, 1);

9let sort_keys = require("sort-keys");

10sort_keys = require_runtime.__toESM(sort_keys, 1);

11//#region src/build-tests/addTarball.ts

12const addTarball = async () => {

13 const packed = `${require_build_tests_constants.FILE_ORIGIN}:${await require_build_tests_pack.pack()}`;

14 shelljs.default.exec(`pnpm add -D ${require_build_tests_constants.THIS1}@${packed}`);

15 const file = (0, edit_json_file.default)(require_build_tests_constants.PACKAGE_PATH);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/build-tests/addTarball.cjsView on unpkg · L13

16 const devDeps = (0, sort_keys.default)(file.get(require_build_tests_constants.devKey));

17 file.set(require_build_tests_constants.devKey, devDeps);

18 file.save();

19};

20//#endregion

21exports.addTarball = addTarball;

23//# sourceMappingURL=addTarball.cjs.map