registry  /  @garyr/pt-cli  /  0.40.1

@garyr/pt-cli@0.40.1

Project Template CLI - Learn structures and initialize projects

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 42 file(s), 390 KB of source, external domains: example.com

Source & flagged code

2 flagged · loading source
dist/safety.jsView file
36'chmod -R', 'chown -R', 'chgrp -R', L37: // PowerShell (Windows) L38: 'powershell', 'pwsh', 'Invoke-Expression', 'IEX', ... L83: // Skip flags (starting with - or /flag on Windows) L84: if (arg.startsWith('-') || (process.platform === 'win32' && arg.startsWith('/'))) { L85: continue; ... L113: }); L114: return { success: true, stdout: output }; L115: } ... L134: template: templateName, L135: user: os.userInfo().username, L136: result,
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/safety.jsView on unpkg · L36
dist/commands/updateCommand.jsView file
•matchType = previous_version_dangerous_delta matchedPackage = @garyr/pt-cli@0.39.1 matchedIdentity = npm:QGdhcnlyL3B0LWNsaQ:0.39.1 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/updateCommand.jsView on unpkg

Findings

1 High2 Medium6 Low
HighPrevious Version Dangerous Deltadist/commands/updateCommand.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/safety.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings