registry / @nocobase/ai / 2.1.25

@nocobase/ai@2.1.25

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 58 file(s), 183 KB of source

Source & flagged code

2 flagged

lib/tools-manager/index.jsView file

Lines 26-66javascript

26 }

27 return to;

28};

29var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));

30var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

31 // If the importer is in node compatibility mode or this is not an ESM

32 // file that has been converted to a CommonJS file using a Babel-

33 // compatible transform (i.e. "__esModule" has not been set), then set

34 // "default" to the CommonJS "module.exports" for node compatibility.

35 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

36 mod

37));

38var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

39var tools_manager_exports = {};

40__export(tools_manager_exports, {

41 DefaultToolsManager: () => DefaultToolsManager,

42 SYSTEM_TOOLS: () => SYSTEM_TOOLS,

43 defineTools: () => defineTools,

44 listSystemTools: () => listSystemTools

45});

46module.exports = __toCommonJS(tools_manager_exports);

47var import_utils = require("@nocobase/utils");

48var import_lodash = __toESM(require("lodash"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/tools-manager/index.jsView on unpkg · L46

49__reExport(tools_manager_exports, require("./types"), module.exports);

50const _DefaultToolsManager = class _DefaultToolsManager {

51 constructor(tools = new import_utils.Registry(), dynamicTools = []) {

52 this.tools = tools;

53 this.dynamicTools = dynamicTools;

54 }

55 async getTools(toolName, filter) {

56 const target = this.tools.get(toolName);

57 if (target) {

58 return target;

59 }

60 const dynamicTools = await this.syncDynamicTools(filter);

61 return dynamicTools.find((x) => x.definition.name === toolName);

62 }

63 async listTools(filter) {

64 const toolsList = await this.getToolsList(filter);

65 return toolsList.filter((x) => {

66 if (!filter) {

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Source & flagged code

2 flagged · loading source

lib/tools-manager/index.jsView file

46module.exports = __toCommonJS(tools_manager_exports); L47: var import_utils = require("@nocobase/utils"); L48: var import_lodash = __toESM(require("lodash"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/tools-manager/index.jsView on unpkg · L46

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

2 Medium1 Low

MediumDynamic Requirelib/tools-manager/index.js

MediumRemote Tarball Dependencypackage.json

LowFilesystem

Source & flagged code

2 flagged

lib/tools-manager/index.jsView file

Lines 26-66javascript

26 }

27 return to;

28};

29var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));

30var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

31 // If the importer is in node compatibility mode or this is not an ESM

32 // file that has been converted to a CommonJS file using a Babel-

33 // compatible transform (i.e. "__esModule" has not been set), then set

34 // "default" to the CommonJS "module.exports" for node compatibility.

35 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

36 mod

37));

38var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

39var tools_manager_exports = {};

40__export(tools_manager_exports, {

41 DefaultToolsManager: () => DefaultToolsManager,

42 SYSTEM_TOOLS: () => SYSTEM_TOOLS,

43 defineTools: () => defineTools,

44 listSystemTools: () => listSystemTools

45});

46module.exports = __toCommonJS(tools_manager_exports);

47var import_utils = require("@nocobase/utils");

48var import_lodash = __toESM(require("lodash"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/tools-manager/index.jsView on unpkg · L46

49__reExport(tools_manager_exports, require("./types"), module.exports);

50const _DefaultToolsManager = class _DefaultToolsManager {

51 constructor(tools = new import_utils.Registry(), dynamicTools = []) {

52 this.tools = tools;

53 this.dynamicTools = dynamicTools;

54 }

55 async getTools(toolName, filter) {

56 const target = this.tools.get(toolName);

57 if (target) {

58 return target;

59 }

60 const dynamicTools = await this.syncDynamicTools(filter);

61 return dynamicTools.find((x) => x.definition.name === toolName);

62 }

63 async listTools(filter) {

64 const toolsList = await this.getToolsList(filter);

65 return toolsList.filter((x) => {

66 if (!filter) {

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg