registry / @juggernautlabs/cloud / 0.1.3

@juggernautlabs/cloud@0.1.3

Official Node.js and browser SDK for the Juggernaut Cloud Platform. Execute AI processes, manage cloud database schemas, search resources, and run plugins locally.

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsEvalNetwork

Supply chain

MinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 146 KB of source, external domains: core.juggernautlabs.ai

Source & flagged code

4 flagged

build/esm/BrowserAutomationManager.jsView file

Lines 171-199javascript

171function extractValue(command) {

172 const el = command.selector

173 ? document.querySelector(command.selector)

174 : document.body;

175 if (

Source & flagged code

4 flagged · loading source

build/esm/BrowserAutomationManager.jsView file

191try { L192: const fn = new Function('args', command.fn); L193: return { executed: true, result: fn(command.args) };

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/esm/BrowserAutomationManager.jsView on unpkg · L191

build/CloudDatabaseManager.jsView file

6exports.DatabaseSchema = void 0; L7: const CloudResourceAPI_js_1 = __importDefault(require("./CloudResourceAPI.js")); L8: class CloudDatabaseManager {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/CloudDatabaseManager.jsView on unpkg · L6

build/esm/PluginManager.jsView file

17__filename: pluginName, L18: __dirname: '', L19: process, ... L33: FileReader: globalThis.FileReader, L34: FormData: globalThis.FormData, L35: ReadableStream: globalThis.ReadableStream, ... L38: TextEncoder: globalThis.TextEncoder, L39: TextDecoder: globalThis.TextDecoder, L40: EventTarget: globalThis.EventTarget,

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

build/esm/PluginManager.jsView on unpkg · L17

build/browser.jsView file

1var JuggernautCloud=(()=>{var Q=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,s)=>(typeof require<"u"?require:e)[s]}):t)(function(t){if(typeof require<"u")ret...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

build/browser.jsView on unpkg · L1

Findings

1 High4 Medium4 Low

HighSame File Env Network Executionbuild/browser.js

MediumDynamic Requirebuild/CloudDatabaseManager.js

MediumUnsafe Vm Contextbuild/esm/PluginManager.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvalbuild/esm/BrowserAutomationManager.js

LowUrl Strings

build/CloudDatabaseManager.jsView file

Lines 1-26javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.DatabaseSchema = void 0;

7const CloudResourceAPI_js_1 = __importDefault(require("./CloudResourceAPI.js"));

8class CloudDatabaseManager {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/CloudDatabaseManager.jsView on unpkg · L6

9 static async handleDatabaseOperation(schema, operation, data = {}) {

10 if (!schema) {

11 throw new Error('Schema or database connection is not provided');

12 }

13 const request = {

14 schema: schema,

15 data

16 };

17 return CloudResourceAPI_js_1.default.executeDatabaseOperation(operation, request);

18 }

19 static async handlePublicDatabaseOperation(schema, operation, data = {}, accessPoint) {

20 if (!schema) {

21 throw new Error('Schema or database connection is not provided');

22 }

23 const request = {

24 schema: schema,

25 data

26 };

build/esm/PluginManager.jsView file

Lines 1-37javascript

1import * as vm from 'vm';

2/**

3 * Loads a plugin script inside a Node VM context and returns the exported

4 * constructor. Callers are responsible for instantiating the plugin with

5 * their own auth tokens and settings, e.g. PluginClass.create(authSettings, settings).

6 *

7 * @param script The plugin JavaScript source returned by the cloud API.

8 * @param pluginName Human-readable plugin name used for __filename.

9 * @param extraGlobals Additional globals to inject into the plugin context.

10 */

11export function loadPluginFromScript(script, pluginName = 'plugin', extraGlobals = {}) {

12 const context = vm.createContext({

13 console,

14 require,

15 module: { exports: {} },

16 exports: {},

17 __filename: pluginName,

18 __dirname: '',

19 process,

20 Buffer,

21 setTimeout,

22 clearTimeout,

23 setInterval,

24 clearInterval,

25 global,

26 URL,

27 Headers: globalThis.Headers,

28 Request: globalThis.Request,

29 Response: globalThis.Response,

30 Location: globalThis.Location,

31 Blob: globalThis.Blob,

32 File: globalThis.File,

33 FileReader: globalThis.FileReader,

34 FormData: globalThis.FormData,

35 ReadableStream: globalThis.ReadableStream,

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

build/esm/PluginManager.jsView on unpkg · L17

36 WritableStream: globalThis.WritableStream,

37 DOMException: globalThis.DOMException,

build/browser.jsView file

Lines 1-2javascript

1var JuggernautCloud=(()=>{var Q=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,s)=>(typeof require<"u"?require:e)[s]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var B=t=>{try{if(typeof process<"u"&&process.env)return process.env[t]}catch{}},p={process:{upload:"/api/resource/process/upload",ingest:"/api/process/upload",register:"/api/resource/process/register",get:"/api/resource/process/{{id}}",inputs:"/api/process/{{id}}/inputs",run:"/api/resource/process/{{id}}/run",runViaAccessPo ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

build/browser.jsView on unpkg · L1

Long lines were clipped for display.