registry / @peapodtech/peapodos / 0.3.5

@peapodtech/peapodos@0.3.5

Main software for PeaPod.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 115 KB of source

Source & flagged code

5 flagged

index.mjsView file

Lines 621-661javascript

621console.log = _logRedirect;

622console.error = _errRedirect;

623var _msg_print_count = 0;

624var intervals = {};

625var scheduler = [];

626var linker = {};

627var linkerTyper = /* @__PURE__ */ __name((value2, cast) => {

628 if (cast === "string") return String(value2);

629 if (cast === "number") return Number(value2);

630 if (cast === "boolean") return Boolean(value2);

631 return void 0;

632}, "linkerTyper");

633var linkerChecker = /* @__PURE__ */ __name((value2, cast) => {

634 if (cast === "string") return typeof value2 === "string";

635 if (cast === "number") return typeof value2 === "number" && !isNaN(value2);

636 if (cast === "boolean") return typeof value2 === "boolean";

637 return false;

638}, "linkerChecker");

639var linkerEvaluator = /* @__PURE__ */ __name((value, evalStr) => {

640 if (!evalStr || typeof evalStr !== "string") return value;

641 try {

642 return eval(evalStr.replace(/value/g, value));

643 } catch (err) {

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.mjsView on unpkg · L641

644 return void 0;

645 }

646}, "linkerEvaluator");

647var SIMULATOR_CONFIG = {

648 "temperature": { type: "number", value: 25, min: 20, max: 30, interval: 1e3, locked: true },

649 "humidity": { type: "number", value: 50, min: 30, max: 70, interval: 1500, locked: true },

650 "onoff": { type: "boolean", value: false, interval: 2e3, locked: false }

651};

652var findController = /* @__PURE__ */ __name(async (simulator) => {

653 if (simulator) return new SimulatedController(SIMULATOR_CONFIG);

654 if (argv.serialport) {

655 ui_default.log(`Serial Port Selected: ${argv.serialport}`);

656 return new MicroController(argv.serialport, true);

657 }

658 return await SerialPort2.list().then(async (ports) => {

659 if (ports.length === 0) throw new DebugJsonSerialportError("No Serial Ports Found!");

660 ui_default.succeed(`Serial Ports Found: ${ports.length}`);

661 const serial = await select({

•matchType = previous_version_dangerous_delta matchedPackage = @peapodtech/peapodos@0.3.3 matchedIdentity = npm:QHBlYXBvZHRlY2gvcGVhcG9kb3M:0.3.3 similarity = 0.818 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.mjsView on unpkg

.next/static/media/013b72fa676f92e0-s.woff2View file

•path = .[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 6204 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/static/media/013b72fa676f92e0-s.woff2View on unpkg

.next/server/app/page.jsView file

•path = .next/server/app/page.js kind = payload_in_excluded_dir sizeBytes = 2179761 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/page.jsView on unpkg

•path = .next/server/app/page.js kind = oversized_source_file sizeBytes = 2179761 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

.next/server/app/page.jsView on unpkg

Source & flagged code

5 flagged · loading source

index.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code