registry / @hypequery/cli / 1.2.1

@hypequery/cli@1.2.1

Command-line interface for hypequery

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 28 file(s), 89.0 KB of source, external domains: hypequery.com

Source & flagged code

3 flagged

dist/commands/init.jsView file

Lines 197-237javascript

197 const envExists = await hasEnvFile();

198 if (envExists) {

199 const existingEnv = await readFile(envPath, 'utf-8');

200 const newEnv = appendToEnv(existingEnv, generateEnvTemplate(connectionConfig));

201 await writeFile(envPath, newEnv);

202 logger.success('Updated .env');

203 }

204 else {

205 await writeFile(envPath, generateEnvTemplate(connectionConfig));

206 logger.success('Created .env');

207 }

208 }

209 else {

210 // Create placeholder .env

211 const envPath = path.join(process.cwd(), '.env');

212 const envExists = await hasEnvFile();

213 const placeholderConfig = {

214 url: 'YOUR_CLICKHOUSE_URL',

215 database: 'YOUR_DATABASE',

216 username: 'YOUR_USERNAME',

217 password: 'YOUR_PASSWORD',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/commands/init.jsView on unpkg · L217

218 };

219 if (!envExists) {

220 await writeFile(envPath, generateEnvTemplate(placeholderConfig));

221 logger.success('Created .env (configure your credentials)');

222 }

223 }

224 // Step 9: Generate types from schema (only if we have a valid connection)

225 const schemaPath = path.join(resolvedOutputDir, 'schema.ts');

226 if (hasValidConnection) {

227 const typeSpinner = ora('Generating TypeScript types...').start();

228 try {

229 const generator = getTypeGenerator('clickhouse');

230 await generator({ outputPath: schemaPath });

231 typeSpinner.succeed(`Generated TypeScript types (${path.relative(process.cwd(), schemaPath)})`);

232 }

233 catch (error) {

234 typeSpinner.fail('Failed to generate types');

235 logger.error(error instanceof Error ? error.message : String(error));

236 process.exit(1);

237 }

dist/utils/load-api.jsView file

Lines 59-99javascript

59 }

60 return api;

61}

62export async function loadModule(modulePath) {

63 const resolved = path.resolve

dist/commands/dev.jsView file

Lines 80-120javascript

80 const baseUrl = `http://${hostname}:${port}`;

81 const docsPath = api.docs?.path ?? '/docs';

82 const

Source & flagged code

3 flagged · loading source

dist/commands/init.jsView file

217

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code