registry  /  @plugdev/cli  /  0.7.6

@plugdev/cli@0.7.6

plug / plugdev — npm run dev for Minecraft plugins

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 11 file(s), 181 KB of source, external domains: adoptium.net, api.modrinth.com, fill.papermc.io, github.com, hangar.papermc.io

Source & flagged code

4 flagged · loading source
dist/cli.jsView file
6formatErrorJson, L7: getExitCode L8: } from "./chunk-ANYMKJPX.js"; ... L218: if (!schemaRaw) return void 0; L219: const schema = JSON.parse(schemaRaw); L220: const ajv = new Ajv2020({ allErrors: true, strict: false }); ... L311: // src/util/tools.ts L312: import { execa } from "execa"; L313: import { join as join3 } from "path"; ... L337: async function checkGradle(cwd) { L338: const gradlew = process.platform === "win32" ? "gradlew.bat" : "gradlew"; L339: const path = join3(cwd, gradlew);
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L6
bootstrap/plugdev-bootstrap-paper.jarView file
•path = bootstrap/plugdev-bootstrap-paper.jar kind = high_entropy_blob sizeBytes = 12606 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bootstrap/plugdev-bootstrap-paper.jarView on unpkg
•path = bootstrap/plugdev-bootstrap-paper.jar kind = compressed_blob sizeBytes = 12606 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

bootstrap/plugdev-bootstrap-paper.jarView on unpkg
•path = bootstrap/plugdev-bootstrap-paper.jar kind = nested_archive_needs_inspection sizeBytes = 12606 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

bootstrap/plugdev-bootstrap-paper.jarView on unpkg

Findings

1 High4 Medium7 Low
HighShips High Entropy Blobbootstrap/plugdev-bootstrap-paper.jar
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobbootstrap/plugdev-bootstrap-paper.jar
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/cli.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionbootstrap/plugdev-bootstrap-paper.jar