registry / @frontmcp/testing / 1.5.4

@frontmcp/testing@1.5.4

E2E testing framework for FrontMCP servers - MCP client, auth mocks, Playwright integration

Static Scan Results

scanned 9h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 1.06 MB of source, external domains: api.example.com, api.github.com, cdn.example.com, test.frontmcp.local

Source & flagged code

1 flagged

esm/perf/index.mjsView file

Lines 3012-3052javascript

3012 }

3013 return {

3014 keys: [this.jwk]

3015 };

3016 }

3017 /**

3018 * Get the issuer URL

3019 */

3020 getIssuer() {

3021 return this.issuer;

3022 }

3023 /**

3024 * Get the audience

3025 */

3026 getAudience() {

3027 return this.audience;

3028 }

3029};

3030

3031// libs/testing/src/server/test-server.ts

3032import { spawn } from "child_process";

3033import { sha256Hex } from "@frontmcp/utils";

3034

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

esm/perf/index.mjsView on unpkg · L3032

3035// libs/testing/src/errors/index.ts

3036var TestClientError = class extends Error {

3037 constructor(message) {

3038 super(message);

3039 this.name = "TestClientError";

3040 Object.setPrototypeOf(this, new.target.prototype);

3041 }

3042};

3043var ServerStartError = class extends TestClientError {

3044 constructor(message, cause) {

3045 super(message);

3046 this.cause = cause;

3047 this.name = "ServerStartError";

3048 Object.setPrototypeOf(this, new.target.prototype);

3049 }

3050 cause;

3051};

3052

Source & flagged code

1 flagged · loading source

esm/perf/index.mjsView file

3032

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code