registry / @obiemunoz/ts-migrate / 0.3.0

@obiemunoz/ts-migrate@0.3.0

A tool for migrating frontend application from JavaScript to TypeScript. Maintained fork of airbnb/ts-migrate, updated for TypeScript 5+.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 19.4 KB of source

Source & flagged code

4 flagged

build/runner/reignore/run.jsView file

Lines 1-22javascript

1"use strict";

2const path = require('path');

3const { execSync } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/runner/reignore/run.jsView on unpkg · L1

4const { pass, fail } = require('create-jest-runner');

High

Child Process

Package source references child process execution.

build/runner/reignore/run.jsView on unpkg · L2

5const cli = path.resolve(__dirname, '../../build/ts-migrate.js');

6module.exports = ({ testPath, config }) => {

7 const folder = path.relative(config.rootDir, testPath).replace('/tsconfig.json', '');

8 const start = Date.now();

9 let errorMessage;

10 try {

11 execSync(`${cli} reignore ${folder}`, { encoding: 'utf8' });

12 }

13 catch (error) {

14 errorMessage = `${error.message}

15${error.stdout}`;

16 }

17 const end = Date.now();

18 if (errorMessage) {

19 return fail({ start, end, test: { path: testPath, errorMessage } });

20 }

21 return pass({ start, end, test: { path: testPath } });

22};

build/commands/init.jsView file

Lines 9-34javascript

9const path_1 = __importDefault(require("path"));

10const updatable_log_1 = __importDefault(require("updatable-log"));

11const defaultConfig = `{

12 "extends": "../typescript/tsconfig.base.json",

bin/reignore.shView file

•path = bin/reignore.sh kind = build_helper sizeBytes = 223 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/reignore.shView on unpkg

Source & flagged code

4 flagged · loading source

build/runner/reignore/run.jsView file

2const path = require('path'); L3: const { execSync } = require('child_process'); L4: const { pass, fail } = require('create-jest-runner');

High

Child Process

Package source references child process execution.

build/runner/reignore/run.jsView on unpkg · L2

1"use strict"; L2: const path = require('path'); L3: const { execSync } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/runner/reignore/run.jsView on unpkg · L1

build/commands/init.jsView file

29else { L30: (0, child_process_1.execSync)('npx tsc --init', { cwd: rootDir }); L31: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build/commands/init.jsView on unpkg · L29

bin/reignore.shView file

•path = bin/reignore.sh kind = build_helper sizeBytes = 223 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/reignore.shView on unpkg

Findings

2 High3 Medium2 Low

HighChild Processbuild/runner/reignore/run.js

HighRuntime Package Installbuild/commands/init.js

MediumDynamic Requirebuild/runner/reignore/run.js

MediumShips Build Helperbin/reignore.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

Source & flagged code

4 flagged

build/runner/reignore/run.jsView file

Lines 1-22javascript

1"use strict";

2const path = require('path');

3const { execSync } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/runner/reignore/run.jsView on unpkg · L1

4const { pass, fail } = require('create-jest-runner');

High

Child Process

Package source references child process execution.

build/runner/reignore/run.jsView on unpkg · L2

5const cli = path.resolve(__dirname, '../../build/ts-migrate.js');

6module.exports = ({ testPath, config }) => {

7 const folder = path.relative(config.rootDir, testPath).replace('/tsconfig.json', '');

8 const start = Date.now();

9 let errorMessage;

10 try {

11 execSync(`${cli} reignore ${folder}`, { encoding: 'utf8' });

12 }

13 catch (error) {

14 errorMessage = `${error.message}

15${error.stdout}`;

16 }

17 const end = Date.now();

18 if (errorMessage) {

19 return fail({ start, end, test: { path: testPath, errorMessage } });

20 }

21 return pass({ start, end, test: { path: testPath } });

22};

build/commands/init.jsView file

Lines 9-34javascript

9const path_1 = __importDefault(require("path"));

10const updatable_log_1 = __importDefault(require("updatable-log"));

11const defaultConfig = `{

12 "extends": "../typescript/tsconfig.base.json",

bin/reignore.shView file

•path = bin/reignore.sh kind = build_helper sizeBytes = 223 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/reignore.shView on unpkg