registry  /  @nuasite/cli  /  0.47.4

@nuasite/cli@0.47.4

`@nuasite/cli` is the cli tool that powers [Astro](https://astro.build/) projects updated by [Nua Site](https://www.nuasite.com). It wraps `astro build`, `astro dev`, and `astro preview` with the Nua defaults and adds project-level commands (`init`, `clea

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireFilesystemNetworkShell
Supply chain
HighEntropyStringsObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 6 file(s), 1.32 MB of source, external domains: mths.be

Source & flagged code

6 flagged · loading source
dist/index.jsView file
33818// src/index.ts L33819: import { spawn } from "child_process"; L33820: var [, , command, ...args] = process.argv;
High
Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L33818
33823stdio: "inherit", L33824: shell: true L33825: });
High
Shell

Package source references shell execution.

dist/index.jsView on unpkg · L33823
33821function proxyToAstroCLI(command2, args2) { L33822: const astro = spawn("npx", ["astro", command2, ...args2], { L33823: stdio: "inherit",
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L33821
29204patternName = generic_password severity = medium line = 29204 matchedText = password...d]",
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L29204
2205var require_log = __commonJS((exports) => { L2206: var node_process = __require("process"); L2207: function debug(logLevel, ...messages) {
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L2205
dist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.nodeView file
•path = dist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.node kind = native_binary sizeBytes = 3076872 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

dist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.nodeView on unpkg

Findings

3 High6 Medium5 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighRuntime Package Installdist/index.js
MediumSecret Patterndist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumProtestware
MediumShips Native Binarydist/tailwindcss-oxide.linux-x64-gnu-mvf0mxqy.node
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings