registry / @danielhritcu/zenstack-custom / 1.2.58

@danielhritcu/zenstack-custom@1.2.58

ZenStack codegen pipeline and Drizzle helpers for custom ORM schema generation

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 702 KB of source

Source & flagged code

3 flagged

dist/cli.jsView file

Lines 3024-3064javascript

3024 const positional = [];

3025 for (const arg of args) {

3026 if (arg.startsWith("--")) {

3027 const [key, ...rest] = arg.slice(2).split("=");

3028 flags[key] = rest.join("=") || "true";

3029 } else {

3030 positional.push(arg);

3031 }

3032 }

3033 const subcommand = positional[0];

3034 const filePath = positional[1];

3035 if (subcommand !== "generate" || !filePath) {

3036 console.error("Usage: zen-orm generate <config-file> [--ignore-cfk=col1,col2]");

3037 process.exit(1);

3038 }

3039 const codegenOptions = {};

3040 if (flags["ignore-cfk"]) {

3041 codegenOptions.ignoreCompositeFkColumns = flags["ignore-cfk"].split(",").map((s) => s.trim());

3042 }

3043 const resolvedPath = path.resolve(process.cwd(), filePath);

3044 if (resolvedPath.endsWith(".ts") && !process.env["__ZEN_TSX_REEXEC"]) {

3045 const { execFileSync } = await import("child_process");

3046 const tsxBin = await findTsx();

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L3044

3047 if (!tsxBin) {

3048 console.error("Error: tsx is required to load .ts config files. Install it: pnpm add -D tsx");

3049 process.exit(1);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L3044

3050 }

3051 const cliPath = new URL(import.meta.url).pathname.replace(/^\/([A-Za-z]:)/, "$1");

3052 try {

3053 execFileSync(tsxBin, [

3054 cliPath,

3055 ...process.argv.slice(2)

3056 ], {

3057 stdio: "inherit",

3058 shell: process.platform === "win32",

3059 env: {

3060 ...process.env,

3061 __ZEN_TSX_REEXEC: "1"

3062 }

3063 });

3064 } catch {

dist/codegen/index.cjsView file

Lines 94-134javascript

94 return {

95 tables: drizzleTables,

96 schema: config.schema,

97 default: config.default,

98 derived: derived2,

99 models,

100 rls: config.rls

101 };

102}

103__name(defineConfig, "defineConfig"

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

3044if (resolvedPath.endsWith(".ts") && !process.env["__ZEN_TSX_REEXEC"]) { L3045: const { execFileSync } = await import("child_process"); L3046: const tsxBin = await findTsx();

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code