@kkeve/suite@0.0.9: Suspicious npm security report (Warn)

Loading npm security reports…

@kkeve/suite@0.0.9: Suspicious npm security report (Warn) | LPM Firewall

dist/core/global-setup.jsView file

Lines 18-58javascript

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys = function(o) {

20 ownKeys = Object.getOwnPropertyNames || function (o) {

21 var ar = [];

22 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

23 return ar;

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.getCdpBrowser = getCdpBrowser;

37exports.isCdpMode = isCdpMode;

38exports.default = default_1;

39const fs = __importStar(require("node:fs"));

40const path = __importStar(require("node:path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/global-setup.jsView on unpkg · L38

41const auth_1 = require("./auth");

42async function getCdpBrowser() {

43 // 如果已有共享的 browser 对象，直接复用

44 if (globalThis.__keve_cdp_browser && globalThis.__keve_cdp_browser.isConnected()) {

45 return globalThis.__keve_cdp_browser;

46 }

47 const { chromium } = await Promise.resolve().then(() => __importStar(require('@playwright/test')));

48 let wsUrl = process.env.KEVE_CDP_WS_ENDPOINT;

49 // 如果只提供了 HTTP endpoint，自动获取 WebSocket URL

50 if (!wsUrl && process.env.KEVE_CDP_ENDPOINT) {

51 const httpUrl = process.env.KEVE_CDP_ENDPOINT.replace(/\/$/, '');

52 try {

53 const resp = await fetch(`${httpUrl}/json/version`);

54 const data = await resp.json();

55 wsUrl = data.webSocketDebuggerUrl;

56 console.log(`[keve CDP] Resolved WS endpoint: ${wsUrl}`);

57 }

58 catch (e) {

@kkeve/suite@0.0.9

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code