registry / @dimm-city/print-md / 0.6.0

@dimm-city/print-md@0.6.0

Markdown-to-PDF converter for professional print layout using Paged.js and Ghostscript.

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicenseWildcardDependency

scanned 22 file(s), 1.31 MB of source, external domains: 127.0.0.1, api.github.com, bitbucket.org, bugzilla.mozilla.org, connect.microsoft.com, css-infos.net, cssdot.ru, dev.azure.com, developer.mozilla.org, drafts.csswg.org, drafts.fxtf.org, git.example.com, github.com, help.dottoro.com, msdn.microsoft.com, phrogz.net, registry.npmjs.org, unpkg.com, webkit.org, www.color.org, www.ghostscript.com, www.google.com, www.sitepoint.com, www.w3.org

Source & flagged code

2 flagged

dist/index-4e7f2b7j.jsView file

Lines 373-413javascript

373async function renderChaptersToFile(inputDir, outDir, opts = {}) {

374 await mkdir(outDir, { recursive: true });

375 const html = await renderChapters(inputDir, {

376 title: opts.title,

377 styles: opts.styles,

378 files: opts.files,

379 plugins: opts.plugins,

380 pluginCss: opts.pluginCss

381 });

382 const outFile = join(outDir, BOOK_HTML_FILENAME);

383 await writeFile(outFile, html);

384 return outFile;

385}

386

387// src/lib/markdown/plugins.ts

388import { existsSync as existsSync3 } from "node:fs";

389import { resolve as resolve2, join as join2 } from "node:path";

390import { pathToFileURL } from "node:url";

391import { createRequire } from "node:module";

392async function loadNpmPackage(packageName, baseDir) {

393 try {

394 const manifestRequire = createRequire(join2(baseDir, "package.json"));

395 const packagePath = manifestRequire.resolve(packageName);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index-4e7f2b7j.jsView on unpkg · L393

396 return await import(pathToFileURL(packagePath).href);

397 } catch {}

398 try {

399 return await import(packageName);

400 } catch {}

401 throw new Error(`Plugin "${packageName}" not found. Install it in your project:

402 cd ${baseDir} && bun add ${packageName}

403or reference a local file:

404 plugins:

405 - path: ./plugins/${packageName}.js`);

406}

407function extractPluginExports(pluginModule, pluginRef) {

408 const mod = pluginModule;

409 let plugin;

410 let metadata = mod.metadata;

411 let css = mod.css;

412 if (typeof mod.default === "function") {

413 plugin = mod.default;

dist/favicon-wkbm9cjn.icoView file

•path = dist/favicon-wkbm9cjn.ico kind = high_entropy_blob sizeBytes = 61444 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/favicon-wkbm9cjn.icoView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code