registry / @contract-case/case-core / 0.30.0

@contract-case/case-core@0.30.0

Core functionality for the ContractCase contract testing suite

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 162 file(s), 294 KB of source, external domains: case.contract-testing.io

Source & flagged code

1 flagged

dist/src/connectors/contractStore/contractReader.jsView file

Lines 18-58javascript

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys = function(o) {

20 ownKeys = Object.getOwnPropertyNames || function (o) {

21 var ar = [];

22 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

23 return ar;

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.makeContractStore = exports.readContract = void 0;

37const path = __importStar(require("node:path"));

38const fs = __importStar(require("node:fs"));

39const case_plugin_base_1 = require("@contract-case/case-plugin-base");

40const readContract = (pathToContract) => {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/src/connectors/contractStore/contractReader.jsView on unpkg · L38

41 let content = '';

42 try {

43 content = fs.readFileSync(pathToContract, 'utf-8');

44 }

45 catch (e) {

46 throw new case_plugin_base_1.CaseConfigurationError(`Unable to load contract file from disk at '${pathToContract}': ${e.message}`, 'DONT_ADD_LOCATION', 'DISK_IO_PROBLEM');

47 }

48 let contract;

49 try {

50 contract = JSON.parse(content);

51 }

52 catch (e) {

53 throw new case_plugin_base_1.CaseConfigurationError(`Unable to parse contract file from disk at '${pathToContract}': ${e.message}`, 'DONT_ADD_LOCATION');

54 }

55 return contract;

56};

57exports.readContract = readContract;

58const readFile = (filePath) => {

Source & flagged code

1 flagged · loading source

dist/src/connectors/contractStore/contractReader.jsView file

38package = @contract-case/case-core; repositoryIdentity = case; dependency = @contract-case/case-plugin-base L38: const fs = __importStar(require("node:fs")); L39: const case_plugin_base_1 = require("@contract-case/case-plugin-base"); L40: const readContract = (pathToContract) => {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/src/connectors/contractStore/contractReader.jsView on unpkg · L38

Findings

1 High3 Medium4 Low

HighCopied Package Dependency Bridgedist/src/connectors/contractStore/contractReader.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/src/connectors/contractStore/contractReader.jsView file

Lines 18-58javascript

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys = function(o) {

20 ownKeys = Object.getOwnPropertyNames || function (o) {

21 var ar = [];

22 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

23 return ar;

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.makeContractStore = exports.readContract = void 0;

37const path = __importStar(require("node:path"));

38const fs = __importStar(require("node:fs"));

39const case_plugin_base_1 = require("@contract-case/case-plugin-base");

40const readContract = (pathToContract) => {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/src/connectors/contractStore/contractReader.jsView on unpkg · L38

41 let content = '';

42 try {

43 content = fs.readFileSync(pathToContract, 'utf-8');

44 }

45 catch (e) {

46 throw new case_plugin_base_1.CaseConfigurationError(`Unable to load contract file from disk at '${pathToContract}': ${e.message}`, 'DONT_ADD_LOCATION', 'DISK_IO_PROBLEM');

47 }

48 let contract;

49 try {

50 contract = JSON.parse(content);

51 }

52 catch (e) {

53 throw new case_plugin_base_1.CaseConfigurationError(`Unable to parse contract file from disk at '${pathToContract}': ${e.message}`, 'DONT_ADD_LOCATION');

54 }

55 return contract;

56};

57exports.readContract = readContract;

58const readFile = (filePath) => {