registry / @nodenv/node-build-prerelease / 2.0.261

@nodenv/node-build-prerelease@2.0.261

A nodenv plugin providing node-build definitions for Node.js prereleases.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

Source & flagged code

2 flagged

package.jsonView file

Lines 12-42json

12 "bugs": {

13 "url": "https://github.com/nodenv/node-build-prerelease/issues"

14 },

15 "files": [

16 "script",

17 "share"

18 ],

19 "directories": {

20 "test": "test"

21 },

22 "scripts": {

23 "clean": "git clean -f -- share",

24 "start": "npm run scrape-definitions",

25 "scrape-definitions": "nodenv-update-version-defs --nodejs-pre --nodejs-nightly -d share/node-build/",

26 "commit-definitions": "npm explore @nodenv/node-build-update-defs -- npm run defs:commit --",

27 "submit-definitions": "npm explore @nodenv/node-build-update-defs -- npm run defs:submit --",

28 "test": "bats ${CI:+--tap} test",

29 "posttest": "npm run lint",

30 "lint": "git ls-files bin script **/*.*sh | xargs shellcheck",

31 "lint:checksums": "npm explore @nodenv/node-build-update-defs -- npm run defs:verify --",

32 "postinstall": "script/postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L32

33 "preversion": "script/preversion",

34 "postversion": "git push --follow-tags"

35 },

36 "devDependencies": {

37 "@nodenv/node-build-update-defs": "2",

38 "bats": "1",

39 "prettier": "3"

40 }

41}

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = script/postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = script/postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High1 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

Source & flagged code

2 flagged

package.jsonView file

Lines 12-42json

12 "bugs": {

13 "url": "https://github.com/nodenv/node-build-prerelease/issues"

14 },

15 "files": [

16 "script",

17 "share"

18 ],

19 "directories": {

20 "test": "test"

21 },

22 "scripts": {

23 "clean": "git clean -f -- share",

24 "start": "npm run scrape-definitions",

25 "scrape-definitions": "nodenv-update-version-defs --nodejs-pre --nodejs-nightly -d share/node-build/",

26 "commit-definitions": "npm explore @nodenv/node-build-update-defs -- npm run defs:commit --",

27 "submit-definitions": "npm explore @nodenv/node-build-update-defs -- npm run defs:submit --",

28 "test": "bats ${CI:+--tap} test",

29 "posttest": "npm run lint",

30 "lint": "git ls-files bin script **/*.*sh | xargs shellcheck",

31 "lint:checksums": "npm explore @nodenv/node-build-update-defs -- npm run defs:verify --",

32 "postinstall": "script/postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L32

33 "preversion": "script/preversion",

34 "postversion": "git push --follow-tags"

35 },

36 "devDependencies": {

37 "@nodenv/node-build-update-defs": "2",

38 "bats": "1",

39 "prettier": "3"

40 }

41}