registry / @porulle/sdk / 0.7.0

@porulle/sdk@0.7.0

Typed TypeScript client for any Porulle server. Generated from the OpenAPI spec — every endpoint, request body, and response is type-checked at compile time.

Static Scan Results

scanned 16d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 12 file(s), 26.0 KB of source

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * SDK Codegen CLI — generates TypeScript types from your UC server's OpenAPI spec.

4 *

5 * Usage:

6 * bunx @porulle/sdk generate # from running server on :3000

7 * bunx @porulle/sdk generate --url http://localhost:4000/api/doc

8 * bunx @porulle/sdk generate --output src/types/api.ts

9 *

10 * This fetches /api/doc from your running server and runs openapi-typescript

11 * to produce a paths type file. Commit the output alongside your code.

12 */

13import { writeFileSync, mkdirSync, unlinkSync } from "node:fs";

14import { join, dirname } from "node:path";

15import { execSync } from "node:child_process";

16const args = process.argv.slice(2);

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L14

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L5

17const command = args[0];

18if (command !== "generate") {

19 console.log(`

20@porulle/sdk — Type Generation CLI

22Usage:

23 bunx @porulle/sdk generate [options]

25Options:

26 --url <url> OpenAPI spec URL (default: http://localhost:3000/api/doc)

27 --output <path> Output file path (default: src/generated/api-types.ts)

29Examples:

30 bunx @porulle/sdk generate

31 bunx @porulle/sdk generate --url http://localhost:4000/api/doc

32 bunx @porulle/sdk generate --output src/types/commerce.ts

33 `);

34 process.exit(command === undefined || command === "help" || command === "--help" ? 0 : 1);

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

14import { join, dirname } from "node:path"; L15: import { execSync } from "node:child_process"; L16: const args = process.argv.slice(2);

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code