registry / @markw65/monkeyc-optimizer / 1.1.101

@markw65/monkeyc-optimizer@1.1.101

Source to source optimizer for Garmin Monkey C code

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 1.19 MB of source, external domains: developer.garmin.com, feross.org, github.com, www.garmin.com

Source & flagged code

2 flagged

build/chunk-UGRQCGXP.cjsView file

Lines 39-79javascript

39 globa: () => globa,

40 init_logger: () => init_logger,

41 init_util: () => init_util,

42 last_modified: () => last_modified,

43 log: () => log,

44 logPromise: () => logPromise,

45 logger: () => logger,

46 map: () => map,

47 popcount: () => popcount,

48 promiseAll: () => promiseAll,

49 pushUnique: () => pushUnique,

50 readByLine: () => readByLine,

51 reduce: () => reduce,

52 sameArrays: () => sameArrays,

53 setBanner: () => setBanner,

54 some: () => some,

55 spawnByLine: () => spawnByLine,

56 wouldLog: () => wouldLog

57});

58module.exports = __toCommonJS(chunk_UGRQCGXP_exports);

59var import_chunk_VS2QQHAK = require("./chunk-VS2QQHAK.cjs");

60var child_process = __toESM(require("child_process"));

61var fsc = __toESM(require("fs"));

High

Child Process

Package source references child process execution.

build/chunk-UGRQCGXP.cjsView on unpkg · L59

62var fs = __toESM(require("fs/promises"));

63var path = __toESM(require("path"));

64var readline = __toESM(require("readline"));

65var require_array = (0, import_chunk_VS2QQHAK.__commonJS)({

66 "node_modules/fast-glob/out/utils/array.js"(exports2) {

67 "use strict";

68 Object.defineProperty(exports2, "__esModule", { value: true });

69 exports2.splitWhen = exports2.flatten = void 0;

70 function flatten(items) {

71 return items.reduce((collection, item) => [].concat(collection, item), []);

72 }

73 exports2.flatten = flatten;

74 function splitWhen(items, predicate) {

75 const result = [[]];

76 let groupIndex = 0;

77 for (const item of items) {

78 if (predicate(item)) {

79 groupIndex++;

build/chunk-NQBJ3RKE.cjsView file

180Cross-file remote execution chain: build/chunk-NQBJ3RKE.cjs spawns build/chunk-UGRQCGXP.cjs; helper contains network access plus dynamic code execution. L180: var path3 = __toESM(require("path")); L181: var net = __toESM(require("net")); L182: var path4 = __toESM(require("path")); L183: var import_child_process = require("child_process"); L184: var import_prettier_plugin_monkeyc5 = require("@markw65/prettier-plugin-monkeyc"); ... L627: while (p < pos) { L628: if (input.charCodeAt(p) === 10) { L629: details.line++; ... L3194: } L3195: if (visitor.post) visitor.post(c); L3196: }); ... L3917: StateNodeAttributes2[StateNodeAttributes2["PROTECTED"] = 2] = "PROTECTED";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

build/chunk-NQBJ3RKE.cjsView on unpkg · L180

Source & flagged code

2 flagged · loading source

build/chunk-UGRQCGXP.cjsView file

59var import_chunk_VS2QQHAK = require("./chunk-VS2QQHAK.cjs"); L60: var child_process = __toESM(require("child_process")); L61: var fsc = __toESM(require("fs"));

High

Child Process

Package source references child process execution.

build/chunk-UGRQCGXP.cjsView on unpkg · L59

build/chunk-NQBJ3RKE.cjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

build/chunk-NQBJ3RKE.cjsView on unpkg · L180

Findings

2 High1 Medium4 Low

HighChild Processbuild/chunk-UGRQCGXP.cjs

HighCross File Remote Execution Contextbuild/chunk-NQBJ3RKE.cjs

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

build/chunk-UGRQCGXP.cjsView file

Lines 39-79javascript

39 globa: () => globa,

40 init_logger: () => init_logger,

41 init_util: () => init_util,

42 last_modified: () => last_modified,

43 log: () => log,

44 logPromise: () => logPromise,

45 logger: () => logger,

46 map: () => map,

47 popcount: () => popcount,

48 promiseAll: () => promiseAll,

49 pushUnique: () => pushUnique,

50 readByLine: () => readByLine,

51 reduce: () => reduce,

52 sameArrays: () => sameArrays,

53 setBanner: () => setBanner,

54 some: () => some,

55 spawnByLine: () => spawnByLine,

56 wouldLog: () => wouldLog

57});

58module.exports = __toCommonJS(chunk_UGRQCGXP_exports);

59var import_chunk_VS2QQHAK = require("./chunk-VS2QQHAK.cjs");

60var child_process = __toESM(require("child_process"));

61var fsc = __toESM(require("fs"));

High

Child Process

Package source references child process execution.

build/chunk-UGRQCGXP.cjsView on unpkg · L59

62var fs = __toESM(require("fs/promises"));

63var path = __toESM(require("path"));

64var readline = __toESM(require("readline"));

65var require_array = (0, import_chunk_VS2QQHAK.__commonJS)({

66 "node_modules/fast-glob/out/utils/array.js"(exports2) {

67 "use strict";

68 Object.defineProperty(exports2, "__esModule", { value: true });

69 exports2.splitWhen = exports2.flatten = void 0;

70 function flatten(items) {

71 return items.reduce((collection, item) => [].concat(collection, item), []);

72 }

73 exports2.flatten = flatten;

74 function splitWhen(items, predicate) {

75 const result = [[]];

76 let groupIndex = 0;

77 for (const item of items) {

78 if (predicate(item)) {

79 groupIndex++;

build/chunk-NQBJ3RKE.cjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

build/chunk-NQBJ3RKE.cjsView on unpkg · L180