registry / @fastcar/cli / 0.2.1

@fastcar/cli@0.2.1

fastcar-cli 脚手架快速搭建

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 81 file(s), 679 KB of source, external domains: github.com, registry.npmmirror.com, www.npmjs.com

Source & flagged code

5 flagged

dist/reverse.jsView file

Lines 5-45javascript

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.initReverseConfig = initReverseConfig;

7exports.reverseGenerate = reverseGenerate;

8const fs_1 = __importDefault(require("fs"));

9const path_1 = __importDefault(require("path"));

10const process_1 = __importDefault(require("process"));

11const module_1 = require("module");

12const inquirer_1 = __importDefault(require("inquirer"));

13const yaml_1 = __importDefault(require("yaml"));

14const runtimeRequire = (0, module_1.createRequire)(__filename);

15// 默认配置文件模板

16const defaultConfig = {

17 type: "mysql",

18 tables: ["test"],

19 modelDir: "",

20 mapperDir: "",

21 dbConfig: {

22 host: "localhost",

23 port: 3306,

24 user: "root",

25 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/reverse.jsView on unpkg · L25

26 database: "test_db",

27 },

28 style: {

29 tabWidth: 4,

30 printWidth: 200,

31 trailingComma: "es5",

32 useTabs: true,

33 parser: "typescript",

34 endOfLine: "crlf",

35 },

36 ignoreCamelcase: false,

37};

38// 支持的配置文件名

39const CONFIG_FILES = {

40 json: "reverse.config.json",

41 yml: "reverse.config.yml",

42};

43// 查找已存在的配置文件

44function findExistingConfig(cwd) {

45 for (const ext of ["yml", "json"]) {

bin/cli.jsView file

Lines 1-19javascript

1#!/usr/bin/env node

3const fs = require("fs");

4const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L2

6const compiledEntry

skills/fastcar-framework/SKILL.mdView file

Lines 584-624markdown

584 { "public": "public" }

585 koaBodyParser:

586 enableTypes: ["json", "form", "text"]

587```

588

589### RPC 模板配置

590

591```yaml

592application:

593 name: "fastcar-boot-rpc"

594

595settings:

596 rpc:

597

skills/fastcar-rpc-microservices/SKILL.mdView file

Lines 52-137markdown

52 ],

53 },

54})

55class APP {}

56```

58支持的协议类型：

59- `SocketEnum.WS`：WebSocket

60- `SocketEnum.SocketIO`：Socket.IO

61- `SocketEnum.MQTT`：MQTT

62- `SocketEnum.Grpc`：gRPC

64### 安全认证

Source & flagged code

5 flagged · loading source

dist/reverse.jsView file

25patternName = generic_password severity = medium line = 25 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/reverse.jsView on unpkg · L25

bin/cli.jsView file

2L3: const fs = require("fs"); L4: const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L2

skills/fastcar-framework/SKILL.mdView file

604patternName = generic_password severity = medium line = 604 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in skills/fastcar-framework/SKILL.md

skills/fastcar-framework/SKILL.mdView on unpkg · L604

skills/fastcar-rpc-microservices/SKILL.mdView file

72patternName = generic_password severity = medium line = 72 matchedText = secure: ..." },

Medium

Secret Pattern

Hardcoded password in skills/fastcar-rpc-microservices/SKILL.md

skills/fastcar-rpc-microservices/SKILL.mdView on unpkg · L72

117patternName = generic_password severity = medium line = 117 matchedText = secure: ..." },

Medium

Secret Pattern

Hardcoded password in skills/fastcar-rpc-microservices/SKILL.md

skills/fastcar-rpc-microservices/SKILL.mdView on unpkg · L117

Findings

7 Medium4 Low

MediumSecret Patterndist/reverse.js

MediumDynamic Requirebin/cli.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternskills/fastcar-framework/SKILL.md

MediumSecret Patternskills/fastcar-rpc-microservices/SKILL.md

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

dist/reverse.jsView file

Lines 5-45javascript

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.initReverseConfig = initReverseConfig;

7exports.reverseGenerate = reverseGenerate;

8const fs_1 = __importDefault(require("fs"));

9const path_1 = __importDefault(require("path"));

10const process_1 = __importDefault(require("process"));

11const module_1 = require("module");

12const inquirer_1 = __importDefault(require("inquirer"));

13const yaml_1 = __importDefault(require("yaml"));

14const runtimeRequire = (0, module_1.createRequire)(__filename);

15// 默认配置文件模板

16const defaultConfig = {

17 type: "mysql",

18 tables: ["test"],

19 modelDir: "",

20 mapperDir: "",

21 dbConfig: {

22 host: "localhost",

23 port: 3306,

24 user: "root",

25 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/reverse.jsView on unpkg · L25

26 database: "test_db",

27 },

28 style: {

29 tabWidth: 4,

30 printWidth: 200,

31 trailingComma: "es5",

32 useTabs: true,

33 parser: "typescript",

34 endOfLine: "crlf",

35 },

36 ignoreCamelcase: false,

37};

38// 支持的配置文件名

39const CONFIG_FILES = {

40 json: "reverse.config.json",

41 yml: "reverse.config.yml",

42};

43// 查找已存在的配置文件

44function findExistingConfig(cwd) {

45 for (const ext of ["yml", "json"]) {

bin/cli.jsView file

Lines 1-19javascript

1#!/usr/bin/env node

3const fs = require("fs");

4const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L2

6const compiledEntry

skills/fastcar-framework/SKILL.mdView file

Lines 584-624markdown

584 { "public": "public" }

585 koaBodyParser:

586 enableTypes: ["json", "form", "text"]

587```

588

589### RPC 模板配置

590

591```yaml

592application:

593 name: "fastcar-boot-rpc"

594

595settings:

596 rpc:

597

skills/fastcar-rpc-microservices/SKILL.mdView file

Lines 52-137markdown

52 ],

53 },

54})

55class APP {}

56```

58支持的协议类型：

59- `SocketEnum.WS`：WebSocket

60- `SocketEnum.SocketIO`：Socket.IO

61- `SocketEnum.MQTT`：MQTT

62- `SocketEnum.Grpc`：gRPC

64### 安全认证