registry / @danielhritcu/zenstack-custom / 1.2.57

@danielhritcu/zenstack-custom@1.2.57

ZenStack codegen pipeline and Drizzle helpers for custom ORM schema generation

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 695 KB of source

Source & flagged code

3 flagged

dist/cli.jsView file

Lines 2996-3036javascript

2996 const positional = [];

2997 for (const arg of args) {

2998 if (arg.startsWith("--")) {

2999 const [key, ...rest] = arg.slice(2).split("=");

3000 flags[key] = rest.join("=") || "true";

3001 } else {

3002 positional.push(arg);

3003 }

3004 }

3005 const subcommand = positional[0];

3006 const filePath = positional[1];

3007 if (subcommand !== "generate" || !filePath) {

3008 console.error("Usage: zen-orm generate <config-file> [--ignore-cfk=col1,col2]");

3009 process.exit(1);

3010 }

3011 const codegenOptions = {};

3012 if (flags["ignore-cfk"]) {

3013 codegenOptions.ignoreCompositeFkColumns = flags["ignore-cfk"].split(",").map((s) => s.trim());

3014 }

3015 const resolvedPath = path.resolve(process.cwd(), filePath);

3016 if (resolvedPath.endsWith(".ts") && !process.env["__ZEN_TSX_REEXEC"]) {

3017 const { execFileSync } = await import("child_process");

3018 const tsxBin = await findTsx();

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L3016

3019 if (!tsxBin) {

3020 console.error("Error: tsx is required to load .ts config files. Install it: pnpm add -D tsx");

3021 process.exit(1);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L3016

3022 }

3023 const cliPath = new URL(import.meta.url).pathname.replace(/^\/([A-Za-z]:)/, "$1");

3024 try {

3025 execFileSync(tsxBin, [

3026 cliPath,

3027 ...process.argv.slice(2)

3028 ], {

3029 stdio: "inherit",

3030 shell: process.platform === "win32",

3031 env: {

3032 ...process.env,

3033 __ZEN_TSX_REEXEC: "1"

3034 }

3035 });

3036 } catch {

dist/codegen/index.cjsView file

Lines 94-134javascript

94 return {

95 tables: drizzleTables,

96 schema: config.schema,

97 default: config.default,

98 derived: derived2,

99 models,

100 rls: config.rls

101 };

102}

103__name(defineConfig, "defineConfig"

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

3016if (resolvedPath.endsWith(".ts") && !process.env["__ZEN_TSX_REEXEC"]) { L3017: const { execFileSync } = await import("child_process"); L3018: const tsxBin = await findTsx();

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code