registry / @explorins/web3-ts / 0.3.94

@explorins/web3-ts@0.3.94

Enterprise TypeScript library for blockchain operations with Ethers.js and Web3.js support, transaction management, and smart contract interactions across multiple networks including Ethereum, Polygon, and PERS Besu private blockchains.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 207 file(s), 1.04 MB of source, external domains: alfajores-forno.celo-testnet.org, api-amoy.polygonscan.com, api-mumbai.polygonscan.com, api.nftport.xyz, api.polygonscan.com, baklava-forno.celo-testnet.org, bsc-dataseed1.defibit.io, bscscan.com, clo-geth.0xinfra.com, core.poa.network, dai.poa.network, ethereumclassic.network, etherscan.io, explorer-mainnet.maticvigil.com, explorer-mumbai.maticvigil.com, forno.celo.org, gateway.pinata.cloud, goerli.infura.io, kovan.infura.io, mainnet.infura.io, polygon-amoy.infura.io, polygon-mainnet.infura.io, polygon-mumbai.infura.io, public-node.rsk.co, rinkeby.etherscan.io, rinkeby.infura.io, ropsten.infura.io, sokol.poa.network, testnet.bscscan.com, www.oklink.com

Source & flagged code

3 flagged

dist/types/utils/http-client.jsView file

Lines 24-64javascript

24 text: () => response.text(),

25 json: () => response.json()

26 };

27 }

28 finally {

29 if (timeoutId)

30 clearTimeout(timeoutId);

31 }

32}

33// Node.js implementation - only define if not in browser

34const makeNodeRequest = !exports.isBrowser ? async (url, options) => {

35 // Handle different Node.js environments (Lambda, Jest, etc.)

36 let https;

37 try {

38 // Try multiple approaches to get the https module

39 if (typeof require !== 'undefined') {

40 // Standard Node.js environment (including Lambda)

41 https = require('https');

42 }

43 else {

44 // Fallback for restricted environments

45 const requireFn = new Function('moduleName', 'return require(moduleName)');

46 https = requireFn('https');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/types/utils/http-client.jsView on unpkg · L44

47 }

48 }

49 catch (error) {

50 // Environment doesn't support Node.js modules

51 throw new Error(`HTTPS module not available in this environment: ${error instanceof Error ? error.message : 'Unknown error'}`);

52 }

53 const parsedUrl = new URL(url);

54 return new Promise((resolve, reject) => {

55 const req = https.request({

56 hostname: parsedUrl.hostname,

57 port: parsedUrl.port ? parseInt(parsedUrl.port, 10) : 443,

58 path: parsedUrl.pathname + parsedUrl.search,

59 method: options.method || 'POST',

60 headers: options.headers,

61 timeout: options.timeout

62 }, (res) => {

63 let data = '';

64 res.on('data', (chunk) => data += chunk);

dist/types/types-index.jsView file

Lines 1-18javascript

1"use strict";

2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {

3 if (k2 === undefined) k2 = k;

package.jsonView file

Lines 46-86json

46 "import": "./dist/esm/PERS-contracts/functions/PERS_METHOD_BUILDER.ethers.functions.js",

47 "types": "./dist/cjs/PERS-contracts/functions/PERS_METHOD_BUILDER.ethers.functions.d.ts"

48 },

49 "./PERS-contracts/read-ethers": {

50 "require": "./dist/cjs/PERS-contracts/functions/readContract.PERS.ethers.functions.js",

51 "import": "./dist/esm/PERS-contracts/functions/readContract.PERS.ethers.functions.js",

Source & flagged code

3 flagged · loading source

dist/types/utils/http-client.jsView file

44// Fallback for restricted environments L45: const requireFn = new Function('moduleName', 'return require(moduleName)'); L46: https = requireFn('https');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/types/utils/http-client.jsView on unpkg · L44

dist/types/types-index.jsView file

16Object.defineProperty(exports, "__esModule", { value: true }); L17: __exportStar(require("./types"), exports);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/types/types-index.jsView on unpkg · L16

package.jsonView file

•Runtime dependency names matching Node built-ins: https

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

Findings

1 High3 Medium4 Low

HighNode Builtin Dependency Squatpackage.json

MediumDynamic Requiredist/types/types-index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvaldist/types/utils/http-client.js

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/types/utils/http-client.jsView file

Lines 24-64javascript

24 text: () => response.text(),

25 json: () => response.json()

26 };

27 }

28 finally {

29 if (timeoutId)

30 clearTimeout(timeoutId);

31 }

32}

33// Node.js implementation - only define if not in browser

34const makeNodeRequest = !exports.isBrowser ? async (url, options) => {

35 // Handle different Node.js environments (Lambda, Jest, etc.)

36 let https;

37 try {

38 // Try multiple approaches to get the https module

39 if (typeof require !== 'undefined') {

40 // Standard Node.js environment (including Lambda)

41 https = require('https');

42 }

43 else {

44 // Fallback for restricted environments

45 const requireFn = new Function('moduleName', 'return require(moduleName)');

46 https = requireFn('https');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/types/utils/http-client.jsView on unpkg · L44

47 }

48 }

49 catch (error) {

50 // Environment doesn't support Node.js modules

51 throw new Error(`HTTPS module not available in this environment: ${error instanceof Error ? error.message : 'Unknown error'}`);

52 }

53 const parsedUrl = new URL(url);

54 return new Promise((resolve, reject) => {

55 const req = https.request({

56 hostname: parsedUrl.hostname,

57 port: parsedUrl.port ? parseInt(parsedUrl.port, 10) : 443,

58 path: parsedUrl.pathname + parsedUrl.search,

59 method: options.method || 'POST',

60 headers: options.headers,

61 timeout: options.timeout

62 }, (res) => {

63 let data = '';

64 res.on('data', (chunk) => data += chunk);

dist/types/types-index.jsView file

Lines 1-18javascript

1"use strict";

2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {

3 if (k2 === undefined) k2 = k;

package.jsonView file

Lines 46-86json

46 "import": "./dist/esm/PERS-contracts/functions/PERS_METHOD_BUILDER.ethers.functions.js",

47 "types": "./dist/cjs/PERS-contracts/functions/PERS_METHOD_BUILDER.ethers.functions.d.ts"

48 },

49 "./PERS-contracts/read-ethers": {

50 "require": "./dist/cjs/PERS-contracts/functions/readContract.PERS.ethers.functions.js",

51 "import": "./dist/esm/PERS-contracts/functions/readContract.PERS.ethers.functions.js",