registry  /  @contract-case/case-connector  /  0.30.0

@contract-case/case-connector@0.30.0

Connector to allow ContractCase to run as a server. Use only if you're creating a custom wrapper for a new language

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 155 file(s), 2.06 MB of source, external domains: dub.sh, git.io, github.com

Source & flagged code

7 flagged · loading source
package/case-connector.jsView file
1/*! ContractCase Connector v0.30.0. License information can be found in case-connector.js.LICENSE.txt */ L2: var __webpack_modules__={40865(e){function t(e){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}t.keys=()=>[],t.resolve=t,t.id=40865,e.exports=t},44... L3: //# sourceMappingURL=case-connector.js.map
High
Child Process

Package source references child process execution.

package/case-connector.jsView on unpkg · L1
1/*! ContractCase Connector v0.30.0. License information can be found in case-connector.js.LICENSE.txt */ L2: var __webpack_modules__={40865(e){function t(e){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}t.keys=()=>[],t.resolve=t,t.id=40865,e.exports=t},44... L3: //# sourceMappingURL=case-connector.js.map
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

package/case-connector.jsView on unpkg · L1
1/*! ContractCase Connector v0.30.0. License information can be found in case-connector.js.LICENSE.txt */ L2: var __webpack_modules__={40865(e){function t(e){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}t.keys=()=>[],t.resolve=t,t.id=40865,e.exports=t},44... L3: //# sourceMappingURL=case-connector.js.map
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

package/case-connector.jsView on unpkg · L1
2patternName = generic_password severity = medium line = 2 matchedText = var __we...17);
Medium
Secret Pattern

Package contains a possible secret pattern.

package/case-connector.jsView on unpkg · L2
1/*! ContractCase Connector v0.30.0. License information can be found in case-connector.js.LICENSE.txt */ L2: var __webpack_modules__={40865(e){function t(e){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}t.keys=()=>[],t.resolve=t,t.id=40865,e.exports=t},44... L3: //# sourceMappingURL=case-connector.js.map
Low
Eval

Package source references a known benign dynamic code generation pattern.

package/case-connector.jsView on unpkg · L1
dist/src/connectors/case-boundary/internals/BoundaryPluginLoader.jsView file
61// languages is able to import arbitrary libs, without webpack failing L62: return import(/* webpackIgnore: true */ moduleName); L63: }))
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/src/connectors/case-boundary/internals/BoundaryPluginLoader.jsView on unpkg · L61
script/write-cjs-package.shView file
•path = script/write-cjs-package.sh kind = build_helper sizeBytes = 369 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

script/write-cjs-package.shView on unpkg

Findings

4 High5 Medium5 Low
HighChild Processpackage/case-connector.js
HighSame File Env Network Executionpackage/case-connector.js
HighCommand Output Exfiltrationpackage/case-connector.js
HighObfuscated
MediumSecret Patternpackage/case-connector.js
MediumDynamic Requiredist/src/connectors/case-boundary/internals/BoundaryPluginLoader.js
MediumEnvironment Vars
MediumShips Build Helperscript/write-cjs-package.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalpackage/case-connector.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings