registry / @geekmidas/cli / 1.12.0

@geekmidas/cli@1.12.0

CLI tools for building Lambda handlers, server applications, and generating OpenAPI specs

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 46 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 177 file(s), 2.38 MB of source, external domains: api.example.com, auth.example.com, biomejs.dev, developers.hostinger.com, dokploy.example.com, geekmidas.github.io, github.com, hpanel.hostinger.com, registry.npmjs.org, turbo.build, ui.shadcn.com

Source & flagged code

38 flagged

bin/gkm.mjsView file

Lines 2-40javascript

3import { pathToFileURL } from 'node:url';

5// Register tsx loader hooks BEFORE any .ts imports.

6// --import tsx works but register() alone doesn't override

7// Node 22's built-in strip-only type handling (which lacks enum support).

8// Using --import via NODE_OPTIONS ensures tsx fully handles .ts files.

9const nodeOptions = process.env.NODE_OPTIONS || '';

10if (

11 !nodeOptions.includes('--import tsx') &&

12 !nodeOptions.includes('--import=tsx') &&

13 !nodeOptions.includes('--import file:') &&

14 !nodeOptions.includes('--import=file:')

15) {

16 // Resolve tsx from the CLI package's own node_modules, not the cwd.

17 // This ensures it works when the CLI is run via `pnpm dlx` in a

18 // directory that doesn't have tsx installed.

19 const { createRequire } = await import('node:module');

20 const require = createRequire(import.meta.url);

21 const tsxPath = pathToFileURL(require.resolve('tsx')).href;

23 const { execFileSync } = await import('node:child_process');

24 try {

High

Child Process

Package source references child process execution.

bin/gkm.mjsView on unpkg · L22

25 execFileSync(process.execPath, process.argv.slice(1), {

26 stdio: 'inherit',

27 env: {

28 ...process.env,

29 NODE_OPTIONS: `${nodeOptions} --import ${tsxPath}`.trim(),

30 },

31 });

32 } catch (e) {

33 process.exit(e.status ?? 1);

34 }

35 process.exit(0);

36}

38// tsx is loaded — run the CLI

39await import('../dist/index.mjs');

dist/openapi-react-query-C4iIvpPf.mjsView file

Lines 1-27javascript

1import { existsSync } from "node:fs";

2import { dirname, join } from "node:path";

3import { mkdir, readFile, writeFile } from "node:fs/promises";

4import { exec } from "node:child_process"

dist/credentials-C8DWtnMY.cjsView file

Lines 1-21javascript

1const require_chunk = require('./chunk-CUT6urMc.cjs');

2const node_fs = require_chunk.__toESM(require("node:fs"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/credentials-C8DWtnMY.cjsView on unpkg · L1

dist/index.cjsView file

Lines 1602-1642javascript

1602 ignored: /(^|[/\\])\../,

1603 persistent: true,

1604 ignoreInitial: true

1605 });

1606 let restartTimeout

src/init/__tests__/generators.spec.tsView file

Lines 348-389typescript

348 const compose = files[0].content;

349 expect(compose).not.toContain('localstack');

350 // pgboss reuses postgres, no separate container

351 });

352

353

src/deploy/__tests__/env-resolver.spec.tsView file

Lines 118-177typescript

118

119 const url = buildDatabaseUrl(credentials, postgres);

120

121 expect(url).toBe(

122 'postgresql://user%40test:pass%23word!123@db.example.com:5432/app',

123 );

124

src/secrets/__tests__/storage.spec.tsView file

76patternName = generic_password severity = medium line = 76 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L76

273patternName = generic_password severity = medium line = 273 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L273

300patternName = generic_password severity = medium line = 300 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L300

324patternName = generic_password severity = medium line = 324 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/generator.spec.tsView file

112patternName = generic_password severity = medium line = 112 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L112

125patternName = generic_password severity = medium line = 125 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L125

140patternName = generic_password severity = medium line = 140 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L140

152patternName = generic_password severity = medium line = 152 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/setup/__tests__/reconcile-secrets.spec.tsView file

58patternName = generic_password severity = medium line = 58 matchedText = password...es',

Medium

Secret Pattern

Hardcoded password in src/setup/__tests__/reconcile-secrets.spec.ts

src/setup/__tests__/reconcile-secrets.spec.tsView on unpkg · L58

65patternName = generic_password severity = medium line = 65 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/setup/__tests__/reconcile-secrets.spec.ts

src/setup/__tests__/reconcile-secrets.spec.tsView on unpkg · L65

221patternName = generic_password severity = medium line = 221 matchedText = password...et',

Medium

Secret Pattern

Hardcoded password in src/setup/__tests__/reconcile-secrets.spec.ts

src/setup/__tests__/reconcile-secrets.spec.tsView on unpkg · L221

421patternName = generic_password severity = medium line = 421 matchedText = password...ss',

Medium

src/dev/__tests__/index.spec.tsView file

1271patternName = generic_password severity = medium line = 1271 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/dev/__tests__/index.spec.ts

src/dev/__tests__/index.spec.tsView on unpkg · L1271

1304patternName = generic_password severity = medium line = 1304 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/dev/__tests__/index.spec.ts

src/dev/__tests__/index.spec.tsView on unpkg · L1304

Source & flagged code

38 flagged · loading source

bin/gkm.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code