@nx/workspace: Suspicious npm security report (Warn)

Loading npm security reports…

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 77 file(s), 168 KB of source, external domains: errors.nx.dev, nx.dev

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-23javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.convertToNxProjectGenerator = exports.runCommandsGenerator = exports.removeGenerator = exports.moveGenerator = exports.serializeTarget = exports.parseTarget = exports.editTarget = exports.getWorkspacePath = exports.readPackageJson = exports.output = exports.names = exports.createDirectory = exports.copyFile = exports.updateJsonFile = exports.renameSync = exports.projectRootDir = exports.ProjectType = exports.readTsConfig = void 0;

4var ts_config_1 = require("./src/utilities/ts-config");

5Object.defineProperty(exports, "readTsConfig", { enumerable: true, get: function () { return ts_config_1.readTsConfig; } });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L3

6var project_type_1 = require("./src/utils/project-type");

7Object.defineProperty(exports, "ProjectType", { enumerable: true, get: function () { return project_type_1.ProjectType; } });

8Object.defineProperty(exports, "projectRootDir", { enumerable: true, get: function () { return project_type_1.projectRootDir; } });

9var fileutils_1 = require("./src/utilities/fileutils");

10Object.defineProperty(exports, "renameSync", { enumerable: true, get: function () { return fileutils_1.renameSync; } });

11Object.defineProperty(exports, "updateJsonFile", { enumerable: true, get: function () { return fileutils_1.updateJsonFile; } });

12Object.defineProperty(exports, "copyFile", { enumerable: true, get: function () { return fileutils_1.copyFile; } });

13Object.defineProperty(exports, "createDirectory", { enumerable: true, get: function () { return fileutils_1.createDirectory; } });

14var devkit_1 = require("@nx/devkit");

15Object.defineProperty(exports, "names", { enumerable: true, get: function () { return devkit_1.names; } });

16var output_1 = require("./src/utilities/output");

17Object.defineProperty(exports, "output", { enumerable: true, get: function () { return output_1.output; } });

18var file_utils_1 = require("nx/src/project-graph/file-utils");

19Object.defineProperty(exports, "readPackageJson", { enumerable: true, get: function () { return file_utils_1.readPackageJson; } });

20var cli_config_utils_1 = require("./src/utils/cli-config-utils");

21Object.defineProperty(exports, "getWorkspacePath", { enumerable: true, get: function () { return cli_config_utils_1.getWorkspacePath; } });

22Object.defineProperty(exports, "editTarget", { enumerable: true, get: function () { return cli_config_utils_1.editTarget; } });

23Object.defineProperty(exports, "parseTarget", { enumerable: true, get: function () { return cli_config_utils_1.parseTarget; } });

dist/src/generators/move/lib/extract-base-configs.jsView file

Lines 1-25javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.maybeExtractTsConfigBase = maybeExtractTsConfigBase;

4exports.maybeExtractJestConfigBase = maybeExtractJestConfigBase;

5exports

Source & flagged code

2 flagged · loading source

dist/index.jsView file

3exports.convertToNxProjectGenerator = exports.runCommandsGenerator = exports.removeGenerator = exports.moveGenerator = exports.serializeTarget = exports.parseTarget = exports.editT... L4: var ts_config_1 = require("./src/utilities/ts-config"); L5: Object.defineProperty(exports, "readTsConfig", { enumerable: true, get: function () { return ts_config_1.readTsConfig; } });

@nx/workspace: Suspicious npm security report (Warn) | LPM Firewall