registry / @plasmicapp/loader-nextjs / 2.0.12

@plasmicapp/loader-nextjs@2.0.12

Plasmic loader SDK for Next.js

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsEvalFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 56.3 KB of source

Source & flagged code

2 flagged

dist/react-server.esm.jsView file

Lines 39-82javascript

39 });

40};

42// src/react-server.tsx

43import "server-only";

44import {

45 InternalPlasmicComponentLoader,

46 PlasmicComponentLoader

47} from "@plasmicapp/loader-react/react-server";

48import NextHead from "next/head.js";

49import NextLink from "next/link.js";

50import * as NextNavigation from "next/navigation.js";

51import * as NextRouter from "next/router.js";

53// src/cache.ts

54import { PHASE_PRODUCTION_BUILD } from "next/constants";

55import path from "path";

57// src/server-require.ts

58var secretRequire;

59try {

60 secretRequire = eval("require");

61} catch (err) {

High

Eval

Package source references dynamic code evaluation.

dist/react-server.esm.jsView on unpkg · L59

62 try {

63 secretRequire = eval("(module) => import(module)");

64 } catch (err2) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/react-server.esm.jsView on unpkg · L62

65 secretRequire = void 0;

66 }

67}

68function serverRequire(module) {

69 return __async(this, null, function* () {

70 if (!secretRequire) {

71 throw new Error(

72 `Unexpected serverRequire() -- can only do this from a Node server!`

73 );

74 }

75 return secretRequire(module);

76 });

77}

78function tryServerRequire(module) {

79 return __async(this, null, function* () {

80 try {

81 const require2 = yield serverRequire(module);

82 return require2;

Source & flagged code

2 flagged · loading source

dist/react-server.esm.jsView file

59try { L60: secretRequire = eval("require"); L61: } catch (err) {

High

Eval

Package source references dynamic code evaluation.

dist/react-server.esm.jsView on unpkg · L59

62try { L63: secretRequire = eval("(module) => import(module)"); L64: } catch (err2) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/react-server.esm.jsView on unpkg · L62

Findings

1 High2 Medium3 Low

HighEvaldist/react-server.esm.js

MediumDynamic Requiredist/react-server.esm.js

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Source & flagged code

2 flagged

dist/react-server.esm.jsView file

Lines 39-82javascript

39 });

40};

42// src/react-server.tsx

43import "server-only";

44import {

45 InternalPlasmicComponentLoader,

46 PlasmicComponentLoader

47} from "@plasmicapp/loader-react/react-server";

48import NextHead from "next/head.js";

49import NextLink from "next/link.js";

50import * as NextNavigation from "next/navigation.js";

51import * as NextRouter from "next/router.js";

53// src/cache.ts

54import { PHASE_PRODUCTION_BUILD } from "next/constants";

55import path from "path";

57// src/server-require.ts

58var secretRequire;

59try {

60 secretRequire = eval("require");

61} catch (err) {

High

Eval

Package source references dynamic code evaluation.

dist/react-server.esm.jsView on unpkg · L59

62 try {

63 secretRequire = eval("(module) => import(module)");

64 } catch (err2) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/react-server.esm.jsView on unpkg · L62

65 secretRequire = void 0;

66 }

67}

68function serverRequire(module) {

69 return __async(this, null, function* () {

70 if (!secretRequire) {

71 throw new Error(

72 `Unexpected serverRequire() -- can only do this from a Node server!`

73 );

74 }

75 return secretRequire(module);

76 });

77}

78function tryServerRequire(module) {

79 return __async(this, null, function* () {

80 try {

81 const require2 = yield serverRequire(module);

82 return require2;