registry / @patchstack/connect / 0.3.29

@patchstack/connect@0.3.29

⚠ Under review

Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 859 KB of source, external domains: api.patchstack.com, app.patchstack.com, cdn.patchstack.com, patchstack.com, patchstack.local

Source & flagged code

4 flagged

dist/protect.edge.jsView file

Lines 1-26javascript

1var __create = Object.create;

2var __defProp = Object.defineProperty;

3var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

4var __getOwnPropNames = Object.getOwnPropertyNames;

5var __getProtoOf = Object.getPrototypeOf;

6var __hasOwnProp = Object.prototype.hasOwnProperty;

7var __commonJS = (cb, mod) => function __require() {

8 return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/protect.edge.jsView on unpkg · L6

9};

10var __copyProps = (to, from, except, desc) => {

11 if (from && typeof from === "object" || typeof from === "function") {

12 for (let key of __getOwnPropNames(from))

13 if (!__hasOwnProp.call(to, key) && key !== except)

14 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

15 }

16 return to;

17};

18var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

19 // If the importer is in node compatibility mode or this is not an ESM

20 // file that has been converted to a CommonJS file using a Babel-

21 // compatible transform (i.e. "__esModule" has not been set), then set

22 // "default" to the CommonJS "module.exports" for node compatibility.

23 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

24 mod

25));

Lines 37-77javascript

37 const u = new URL(value);

38 if (u.protocol === "https:") return true;

39 return u.protocol === "http:" &&

dist/index.jsView file

Lines 2-42javascript

2import { access } from "fs/promises";

3import path5 from "path";

5// src/types.ts

6var PatchstackError = class extends Error {

dist/index.cjsView file

Lines 61-101javascript

61var import_promises6 = require("fs/promises");

62var import_node_path5 = __toESM(require("path"), 1);

64// src/types.ts

65var PatchstackError

Source & flagged code

4 flagged · loading source

dist/protect.edge.jsView file

@patchstack/connect@0.3.29

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code