@lovrabet/rabetbase-cli@2.5.1: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@lovrabet/rabetbase-cli@2.5.1: Suspicious npm security report | LPM Firewall

Source & flagged code

6 flagged

package.jsonView file

Lines 52-92json

52 "verify:release-package": "node scripts/verify-release-package.mjs",

53 "beta-release": "node scripts/beta-release.mjs",

54 "release": "node scripts/latest-release.mjs",

55 "test": "vitest run",

56 "test:run": "vitest run",

57 "test:coverage": "vitest run --coverage",

58 "test:ui": "vitest --ui",

59 "test:watch": "vitest --watch",

60 "test:unit": "vitest run test/unit",

61 "test:app": "vitest run test/unit/commands/app-shared.test.ts test/unit/commands/workspace-add.test.ts test/unit/commands/workspace-remove.test.ts test/unit/commands/app-list.test.ts test/unit/commands/workspace.test.ts test/unit/commands/app-workspace-migration.test.ts",

62 "test:integration": "vitest run test/integration",

63 "test:e2e": "vitest run test/e2e",

64 "test:e2e:daily": "RABETBASE_E2E_DAILY=1 vitest run test/e2e/daily-app-smoke.test.ts",

65 "test:windows": "node test/run-windows-tests.js",

66 "test:windows:unit": "node test/run-windows-tests.js unit",

67 "test:windows:integration": "node test/run-windows-tests.js integration",

68 "typecheck": "tsc --noEmit",

69 "publish:github": "node scripts/publish-github.mjs",

70 "generate:builtin-skill-manifest": "node scripts/generate-builtin-skill-manifest.mjs",

71 "check:builtin-skill-manifest": "node scripts/generate-builtin-skill-manifest.mjs --check",

72 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L72

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L72

73 "lint": "echo 'No linter configured yet'",

74 "check:skill-version": "node scripts/check-skill-version.mjs",

75 "check:lockfile": "node scripts/check-lockfile-integrity.mjs",

76 "ci": "npm run typecheck && npm run check:skill-version && npm run test:run && npm run build"

77 },

78 "publishConfig": {

79 "access": "public"

80 },

81 "files": [

82 "lib",

83 "skills/rabetbase",

84 "skills/rabetbase.manifest.json",

85 "scripts/postinstall.mjs",

86 "templates/generate-api",

87 "sidecar",

88 "README.md",

89 "LICENSE"

90 ],

91 "dependencies": {

92 "@inquirer/prompts": "^8.3.2",

scripts/postinstall.mjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2import { existsSync } from "node:fs";

3import { dirname, join, resolve } from "node:path";

4import { fileURLToPath, pathToFileURL } from "node:url";

5

6const

lib/core/sql-sync/hash.jsView file

Lines 1-1javascript

1(function(_0x37c359,_0x3723f6){const _0x44d3b2=a252_0x34d2,_0x1d0fe9=_0x37c359();while(!![]){try{const _0x4d409e=parseInt(_0x44d3b2

lib/generated/official-routing.jsView file

Lines 1-1javascript

1const a271_0x4bea88=a271_0x493b;function a271_0x493b(_0x194a15,_0x1125b1){_0x194a15=_0x194a15-0xa2;const _0x553eb4=a271_0x553e();let _0x493b5b=_0x553eb4[_0x194a15];

lib/core/sql-validator.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/core/sql-validator.js#virtual:normalized:round1View on unpkg