registry  /  @plugdev/cli  /  0.4.4

@plugdev/cli@0.4.4

npm run dev for Minecraft plugins and mods

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 9 file(s), 140 KB of source, external domains: adoptium.net, api.modrinth.com, ci.pufferfish.host, fill.papermc.io, github.com, hangar.papermc.io, piston-meta.mojang.com

Source & flagged code

4 flagged · loading source
dist/cli.jsView file
6formatErrorJson, L7: getExitCode L8: } from "./chunk-ANYMKJPX.js"; ... L175: if (!schemaRaw) return void 0; L176: const schema = JSON.parse(schemaRaw); L177: const ajv = new Ajv2020({ allErrors: true, strict: false }); ... L255: // src/util/tools.ts L256: import { execa } from "execa"; L257: import { join as join3 } from "path"; ... L281: async function checkGradle(cwd) { L282: const gradlew = process.platform === "win32" ? "gradlew.bat" : "gradlew"; L283: const path = join3(cwd, gradlew);
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L6
bootstrap/plugdev-bootstrap-paper.jarView file
•path = bootstrap/plugdev-bootstrap-paper.jar kind = high_entropy_blob sizeBytes = 11012 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bootstrap/plugdev-bootstrap-paper.jarView on unpkg
•path = bootstrap/plugdev-bootstrap-paper.jar kind = compressed_blob sizeBytes = 11012 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

bootstrap/plugdev-bootstrap-paper.jarView on unpkg
•path = bootstrap/plugdev-bootstrap-paper.jar kind = nested_archive_needs_inspection sizeBytes = 11012 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

bootstrap/plugdev-bootstrap-paper.jarView on unpkg

Findings

1 High4 Medium7 Low
HighShips High Entropy Blobbootstrap/plugdev-bootstrap-paper.jar
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobbootstrap/plugdev-bootstrap-paper.jar
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/cli.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionbootstrap/plugdev-bootstrap-paper.jar