registry  /  @bleedingdev/modern-js-create  /  3.5.0-ultramodern.40

@bleedingdev/modern-js-create@3.5.0-ultramodern.40

A Progressive React Framework for modern web development.

Static Scan Results

scanned 53m ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 384 file(s), 1.61 MB of source, external domains: example.com, mise.run, modernjs.dev, workspace.example.workers.dev, www.sitemaps.org, www.w3.org

Source & flagged code

3 flagged · loading source
dist/esm/cli/project-setup.jsView file
1import { execFileSync } from "node:child_process"; L2: import node_fs from "node:fs";
High
Child Process

Package source references child process execution.

dist/esm/cli/project-setup.jsView on unpkg · L1
bin/run.jsView file
8const __dirname = path.dirname(__filename); L9: const require = createRequire(import.meta.url); L10:
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/run.jsView on unpkg · L8
dist/esm/ultramodern-workspace/module-federation/config.jsView file
177process.env.EFFECT_TSGO_BIN?.trim() || L178: execFileSync('npx', ['effect-tsgo', 'get-exe-path'], { L179: encoding: 'utf8',
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/esm/ultramodern-workspace/module-federation/config.jsView on unpkg · L177

Findings

3 High4 Medium4 Low
HighChild Processdist/esm/cli/project-setup.js
HighShell
HighRuntime Package Installdist/esm/ultramodern-workspace/module-federation/config.js
MediumDynamic Requirebin/run.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings