registry / @iobroker/legacy-testing / 2.1.1

@iobroker/legacy-testing@2.1.1

Module to test ioBroker adapters with legacy tests. For new tests please use @iobroker/testing

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 51.1 KB of source, external domains: 127.0.0.1

Source & flagged code

3 flagged

build/setup.jsView file

Lines 4-44javascript

4exports.getAdapterConfig = getAdapterConfig;

5exports.setAdapterConfig = setAdapterConfig;

6exports.startController = startController;

7exports.stopController = stopController;

8exports.setupController = setupController;

9exports.stopAdapter =

Source & flagged code

3 flagged · loading source

build/setup.jsView file

24const node_path_1 = require("node:path"); L25: const node_child_process_1 = require("node:child_process"); L26: const node_net_1 = require("node:net");

High

Child Process

Package source references child process execution.

build/setup.jsView on unpkg · L24

399console.log(`installJsController: no js-controller => install "${jsControllerVersion}" build from npm`); L400: (0, node_child_process_1.execSync)(`npm install iobroker.js-controller@${jsControllerVersion} --prefix ./ --omit=dev`, { L401: cwd: `${rootDir}tmp/`,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build/setup.jsView on unpkg · L399

build/tests/testPackageFiles.jsView file

2Object.defineProperty(exports, "__esModule", { value: true }); L3: const chai_1 = require("chai"); L4: const node_fs_1 = require("node:fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/tests/testPackageFiles.jsView on unpkg · L2

Findings

2 High3 Medium5 Low

HighChild Processbuild/setup.js

HighRuntime Package Installbuild/setup.js

MediumDynamic Requirebuild/tests/testPackageFiles.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Lines 379-419javascript

379 stdio: [0, 1, 2, 'ipc'],

380 });

381 }

382 await waitForEndAsync(__pid);

383 await checkIsControllerInstalledAsync();

384 }

385 else {

386 // check if port 9000 is free, else admin adapter will be added to running instance

387 const client = new node_net_1.Socket();

388 client.on('error', () => {

389 // ignore

390 });

391 client.connect(9000, '127.0.0.1', () => {

392 console.error('Cannot initiate the first run of test, because one instance of application is running on this PC. Stop it and repeat.');

393 process.exit(0);

394 });

395 await new Promise(resolve => setTimeout(resolve, 1000));

396 client.destroy();

397 if (!(0, node_fs_1.existsSync)(`${rootDir}tmp/node_modules/iobroker.js-controller`)) {

398 const jsControllerVersion = getJsControllerVersion();

399 console.log(`installJsController: no js-controller => install "${jsControllerVersion}" build from npm`);

400 (0, node_child_process_1.execSync)(`npm install iobroker.js-controller@${jsControllerVersion} --prefix ./ --omit=dev`, {

401 cwd: `${rootDir}tmp/`,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build/setup.jsView on unpkg · L399

402 stdio: [0, 1, 2],

403 });

404 }

405 else {

406 console.log('Setup js-controller...');

407 let __pid;

408 if (debug) {

409 // start controller

410 __pid = (0, node_child_process_1.exec)(`node iobroker.js setup first`, {

411 cwd: `${rootDir}tmp/node_modules/iobroker.js-controller`,

412 });

413 }

414 else {

415 __pid = (0, node_child_process_1.fork)(`iobroker.js`, ['setup', 'first'], {

416 cwd: `${rootDir}tmp/node_modules/iobroker.js-controller`,

417 stdio: [0, 1, 2, 'ipc'],

418 });

419 }

build/tests/testPackageFiles.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const chai_1 = require("chai");

4const node_fs_1 = require("node:fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/tests/testPackageFiles.jsView on unpkg · L2

5// node_modules/@iobroker/legacy-testing/tests/testPackageFiles.js

6const adapterDir = process.env.IOBROKER_ROOT_DIR || `${__dirname}/../../../../`;

7const alternativeAdapterDir = `${__dirname}/../../../../`;

8describe('Test package.json and io-package.json', () => {

9 it('Test package files', done => {

10 console.log();

11 const fileContentIOPackage = (0, node_fs_1.readFileSync)(`${adapterDir}/io-package.json`, 'utf8');

12 const ioPackage = JSON.parse(fileContentIOPackage);

13 const fileContentNPMPackage = (0, node_fs_1.readFileSync)(`${adapterDir}/package.json`, 'utf8');

14 const npmPackage = JSON.parse(fileContentNPMPackage);

15 (0, chai_1.expect)(ioPackage).to.be.an('object');

16 (0, chai_1.expect)(npmPackage).to.be.an('object');

17 (0, chai_1.expect)(ioPackage.common.version, 'ERROR: Version number in io-package.json needs to exist').to.exist;

18 (0, chai_1.expect)(npmPackage.version, 'ERROR: Version number in package.json needs to exist').to.exist;

19 (0, chai_1.expect)(ioPackage.common.version, 'ERROR: Version numbers in package.json and io-package.json needs to match').to.be.equal(npmPackage.version);

20 if (!ioPackage.common.news || !ioPackage.common.news[ioPackage.common.version]) {

21 console.log('WARNING: No news entry for current version exists in io-package.json, no rollback in Admin possible!');

22 console.log();