registry / @patchstack/connect / 0.5.10

@patchstack/connect@0.5.10

⚠ Under review

Runtime application security for JavaScript and Node.js: dependency inventory, attack-surface mapping, and an in-process guard that virtually patches known vulnerabilities and hardens responses.

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 23 file(s), 1.57 MB of source, external domains: api.patchstack.com, app.patchstack.com, cdn.patchstack.com, patchstack.com, patchstack.local

Source & flagged code

4 flagged

dist/protect.edge.jsView file

Lines 1-26javascript

1var __create = Object.create;

2var __defProp = Object.defineProperty;

3var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

4var __getOwnPropNames = Object.getOwnPropertyNames;

5var __getProtoOf = Object.getPrototypeOf;

6var __hasOwnProp = Object.prototype.hasOwnProperty;

7var __commonJS = (cb, mod) => function __require() {

8 try {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/protect.edge.jsView on unpkg · L6

9 return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

10 } catch (e) {

11 throw mod = 0, e;

12 }

13};

14var __copyProps = (to, from, except, desc) => {

15 if (from && typeof from === "object" || typeof from === "function") {

16 for (let key of __getOwnPropNames(from))

17 if (!__hasOwnProp.call(to, key) && key !== except)

18 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

19 }

20 return to;

21};

22var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

23 // If the importer is in node compatibility mode or this is not an ESM

24 // file that has been converted to a CommonJS file using a Babel-

25 // compatible transform (i.e. "__esModule" has not been set), then set

26 // "default" to the CommonJS "module.exports" for node compatibility.

Lines 264-304javascript

264 if (isSafeOrigin(candidate)) return candidate;

265 warnOnce(label, `[patchstack] ignoring unsafe ${label} override (${candidate}): must be https (or localhost). Using the default.`);

266 return fallback;

267}

268var warned = /* @__PURE__ */

dist/index.jsView file

Lines 8-48javascript

8 super(message);

9 this.code = code;

10 this.cause = cause;

11 this.name = "PatchstackError";

12 }

13 code;

dist/index.cjsView file

Lines 67-107javascript

67 super(message);

68 this.code = code;

69 this.cause = cause;

70 this.name = "PatchstackError";

71 }

72 code;

Source & flagged code

4 flagged · loading source

dist/protect.edge.jsView file

@patchstack/connect@0.5.10

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code