registry  /  @nuasite/cli  /  0.46.2

@nuasite/cli@0.46.2

`@nuasite/cli` is the cli tool that powers [Astro](https://astro.build/) projects updated by [Nua Site](https://www.nuasite.com). It wraps `astro build`, `astro dev`, and `astro preview` with the Nua defaults and adds project-level commands (`init`, `clea

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireFilesystemNetworkShell
Supply chain
HighEntropyStringsObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 6 file(s), 1.31 MB of source, external domains: mths.be

Source & flagged code

6 flagged · loading source
dist/index.jsView file
33559// src/index.ts L33560: import { spawn } from "child_process"; L33561: var [, , command, ...args] = process.argv;
High
Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L33559
33564stdio: "inherit", L33565: shell: true L33566: });
High
Shell

Package source references shell execution.

dist/index.jsView on unpkg · L33564
33562function proxyToAstroCLI(command2, args2) { L33563: const astro = spawn("npx", ["astro", command2, ...args2], { L33564: stdio: "inherit",
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L33562
29001patternName = generic_password severity = medium line = 29001 matchedText = password...d]",
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L29001
2205var require_log = __commonJS((exports) => { L2206: var node_process = __require("process"); L2207: function debug(logLevel, ...messages) {
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L2205
dist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.nodeView file
•path = dist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.node kind = native_binary sizeBytes = 3076872 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

dist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.nodeView on unpkg

Findings

3 High6 Medium5 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighRuntime Package Installdist/index.js
MediumSecret Patterndist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumProtestware
MediumShips Native Binarydist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.node
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings