registry / @mesadev/sdk / 0.40.0

@mesadev/sdk@0.40.0

Official Mesa TypeScript SDK

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNativeBindings

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 49.1 KB of source, external domains: api.mesa.dev, vcs.mesa.dev

Source & flagged code

1 flagged

dist/fs/native-loader.jsView file

Lines 1-32javascript

1import { createRequire } from 'node:module';

2const NATIVE_PACKAGE_NAME = '@mesadev/mesafs-napi';

3function createMissingNativeAddonError() {

4 return new Error(`Unable to load mesafs-napi native addon. ` +

5 `Build the local native package with pnpm --dir packages/rust/crates/mesafs-napi run build ` +

6 `or install ${NATIVE_PACKAGE_NAME}.`);

8function loadFromEnvPath(require) {

9 const envPath = process.env.MESA_NAPI_PATH;

10 if (!envPath) {

11 return null;

12 }

13 return require(envPath);

14}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/fs/native-loader.jsView on unpkg · L12

15function loadInstalledNativeAddon(require) {

16 try {

17 return require(NATIVE_PACKAGE_NAME);

18 }

19 catch (error) {

20 if (error.code !== 'MODULE_NOT_FOUND') {

21 throw error;

22 }

23 }

24 throw createMissingNativeAddonError();

25}

26export function loadNativeAddon() {

27 const require = createRequire(import.meta.url);

28 const envAddon = loadFromEnvPath(require);

29 if (envAddon) {

30 return envAddon;

31 }

32 return loadInstalledNativeAddon(require);

Source & flagged code

1 flagged · loading source

dist/fs/native-loader.jsView file

12} L13: return require(envPath); L14: }

Medium

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code