@mmnto/cli@1.101.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@mmnto/cli@1.101.0: Suspicious npm security report (Warn) | LPM Firewall

dist/commands/compile-templates.jsView file

Lines 286-326javascript

286Output: {"compilable": true, "severity": "warning", "pattern": "(^|\\\\s)\\\\$[a-zA-Z_]+", "message": "Quote shell variables to prevent word-splitting", "badExample": "echo $HOME", "goodExample": "echo \\"$HOME\\"", "fileGlobs": ["**/*.sh", "**/*.bash", "**/*.yml", "**/*.yaml"]}

287

288Lesson: "MCP tool returns must be wrapped in XML tags to prevent prompt injection"

289Output: {"compilable": true, "severity": "warning", "pattern": "text:\\\\s*(?!formatXmlResponse)\\\\b\\\\w+", "message": "MCP tool returns must use formatXmlResponse for injection safety", "badExample": "return { content: [{ type: 'text', text: rawUserInput }] };", "goodExample": "return { content: [{ type: 'text', text: formatXmlResponse(rawUserInput) }] };", "fileGlobs"

290

291Lesson: "Use @clack/prompts instead of inquirer for CLI interactions"

292Output: {"compilable": true, "severity": "warning", "pattern": "import.*from\\\\s+['\"]inquirer['\"]", "message": "Use @clack/prompts instead of inquirer", "badExample": "import inquirer from 'inquirer';", "goodExample": "import * as prompts from '@clack/prompts';", "fileGlobs": [

293

294## ast-grep Patterns (PREFERRED for structural rules)

295For TypeScript/JavaScript/TSX/JSX: **always prefer ast-grep over regex** when the violation involves function calls, method chains, imports, control flow, or object properties. ast

296

297### Cheat sheet

298- \`$VAR\` — matches any single expression or identifier

299- \`$$$ARGS\` — matches zero or more nodes (spread/rest capture)

300- Patterns match structurally, ignoring whitespace and formatting

301- Patterns are single AST nodes — one statement or expression

302

303### Simple patterns

304- \`console.log($ARG)\` — any console.log call

305- \`process.env.$PROP\` — any process.env property access

306- \`JSON.parse($INPUT) as $TYPE\` — unsafe type assertion on parsed JSON

307- \`eval($CODE)\` — any eval call

308

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/commands/compile-templates.jsView on unpkg · L306

309### Flat patterns with \`$$$\` captures

310These are still single-node patterns; the \`$$$\` captures absorb variable-length argument lists or nested statements within one syntactic node. Reach for compound rules (next section) when the rule needs to look outside the matched node.

311

312- \`$OBJ.replace(process.cwd(), $REPLACEMENT)\` — string replace on cwd instead of path.relative

313- \`new RegExp($SRC, $FLAGS + 'g')\` — blindly appending regex flags

314- \`$ARR.forEach(async ($ITEM) => { $$$BODY })\` — async callback in forEach (drops promises)

315

316### Patterns with object properties (\`$$$\` spread captures)

317- \`spawn($CMD, [$$$ARGS], { $$$BEFORE, shell: true, $$$AFTER })\` — shell:true with array args

318- \`{ $$$PROPS, password: $VAL, $$$REST }\` — password in object literal

319

320### Multi-statement patterns (try/catch, if/else)

321- \`try { $$$PRE; expect.fail($$$ARGS); $$$POST } catch ($ERR) { $$$CATCH }\` — expect.fail in try block

322

323Set \`"engine": "ast-grep"\` and provide an \`"astGrepPattern"\` field. Leave \`"pattern"\` as an empty string.

324

325\`\`\`json

326{

dist/commands/spine-cert-run-corpus.jsView file

Lines 31-71javascript

31const ResolvedPrDiffSchema = z.object({

32 pr: z.number().int().positive(),

33 diff: z.string(),

34 controlKind: z.enum(['corpus', 'positive', 'negative']),

35 targetRuleId: z.string().optional(),

36});

37// firingLabelId → TP|FP

38const GroundTruthSchema = z.record(z.enum(['TP', 'FP']));

39/** A zero-network ReviewThreadSource backed by committed, frozen review content. */

40function frozenSourceFrom(contents) {

41 const byPr = new Map(contents.map((c) => [c.pr, c]));

42 return {

43 async fetch(pr) {

44 const content = byPr.get(pr);

45 return content

46 ? { kind: 'ok', content }

47 : { kind: 'unreachable', detail: `no frozen review content for pr ${pr}` };

48 },

49 };

50}

51export async function readAndVerifyScoringSubstrate(gate1Dir, opts) {

52 const { SplitArtifactSchema, TotemError } = await import('@mmnto/totem');

53 const readRaw = (file) => {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/commands/spine-cert-run-corpus.jsView on unpkg · L51

54 try {

55 return fs.readFileSync(file, 'utf-8');

56 }

57 catch (err) {

58 throw new TotemError('CONFIG_INVALID', `Cert-run fixture missing: ${file}`, 'Ensure the gate-1 fixture set exists and is readable.', err);

59 }

60 };

61 const parseJson = (raw, file) => {

62 try {

63 return JSON.parse(raw);

64 }

65 catch (err) {

66 throw new TotemError('CONFIG_INVALID', `Cert-run fixture is not valid JSON (${file})`, 'Re-freeze the gate-1 fixtures with `spine windtunnel record`.', err);

67 }

68 };

69 const loadJson = (file) => parseJson(readRaw(file), file);

70 const split = SplitArtifactSchema.parse(loadJson(path.join(gate1Dir, SPLIT_FILE)));

71 // #2225 (#709 fold-2): verify-then-parse the SCORING source on a SINGLE read — the