registry / @remcostoeten/dev-menu / 0.1.1

@remcostoeten/dev-menu@0.1.1

Zero-config dev process launcher and TUI for mono- and single-package repos

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

UrlStrings

Manifest

WildcardDependency

scanned 10 file(s), 68.9 KB of source, external domains: bun.sh

Source & flagged code

1 flagged

bin/dev-menu.mjsView file

Lines 1-23javascript

1#!/usr/bin/env node

2import { spawnSync } from 'node:child_process'

3import { dirname, resolve } from 'node:path'

4import { fileURLToPath } from 'node:url'

6const entry = resolve(dirname(fileURLToPath(import.meta.url)), '../src/bin.ts')

8if (process.versions.bun) {

9 await import(entry)

10} else {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/dev-menu.mjsView on unpkg · L8

11 const result = spawnSync('bun', [entry, ...process.argv.slice(2)], { stdio: 'inherit' })

13 if (result.error && 'code' in result.error && result.error.code === 'ENOENT') {

14 process.stderr.write(

15 '\ndev-menu runs on Bun, which was not found on your PATH.\n' +

16 'Install it from https://bun.sh (curl -fsSL https://bun.sh/install | bash) and try again.\n\n',

17 )

18 process.exit(1)

19 }

21 process.exit(result.status ?? 0)

22}

Source & flagged code

1 flagged · loading source

bin/dev-menu.mjsView file

8if (process.versions.bun) { L9: await import(entry) L10: } else {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/dev-menu.mjsView on unpkg · L8

Findings

3 Medium4 Low

MediumDynamic Requirebin/dev-menu.mjs

MediumEnvironment Vars

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowUrl Strings

Source & flagged code

1 flagged

bin/dev-menu.mjsView file

Lines 1-23javascript

1#!/usr/bin/env node

2import { spawnSync } from 'node:child_process'

3import { dirname, resolve } from 'node:path'

4import { fileURLToPath } from 'node:url'

6const entry = resolve(dirname(fileURLToPath(import.meta.url)), '../src/bin.ts')

8if (process.versions.bun) {

9 await import(entry)

10} else {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/dev-menu.mjsView on unpkg · L8

11 const result = spawnSync('bun', [entry, ...process.argv.slice(2)], { stdio: 'inherit' })

13 if (result.error && 'code' in result.error && result.error.code === 'ENOENT') {

14 process.stderr.write(

15 '\ndev-menu runs on Bun, which was not found on your PATH.\n' +

16 'Install it from https://bun.sh (curl -fsSL https://bun.sh/install | bash) and try again.\n\n',

17 )

18 process.exit(1)

19 }

21 process.exit(result.status ?? 0)

22}