registry  /  @reventlessdev/reventless-aws  /  3.0.0-alpha.210

@reventlessdev/reventless-aws@3.0.0-alpha.210

AWS adapters for Reventless

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 254 file(s), 1.14 MB of source, external domains: sqs.eu-west-1.amazonaws.com, x.appsync-api.eu-west-1.amazonaws.com

Source & flagged code

6 flagged · loading source
jest.setup.cjsView file
1const { webcrypto } = require("node:crypto"); L2:
Medium
Dynamic Require

Package source references dynamic require/import behavior.

jest.setup.cjsView on unpkg · L1
src/adapter/Runtime/ApiSchemaPush_Runtime.mjsView file
46package = @reventlessdev/reventless-aws; repositoryIdentity = reventless-core; dependency = @aws-sdk/client-appsync L46: async function updateAppSyncSchema(apiId, sdl) { L47: const { AppSyncClient, StartSchemaCreationCommand } = await import("@aws-sdk/client-appsync"); L48: const client = new AppSyncClient({});
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

src/adapter/Runtime/ApiSchemaPush_Runtime.mjsView on unpkg · L46
scripts/run-pg-integration-tests.shView file
•path = scripts/run-pg-integration-tests.sh kind = build_helper sizeBytes = 1894 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/run-pg-integration-tests.shView on unpkg
licenses-analysis.odsView file
•path = licenses-analysis.ods kind = high_entropy_blob sizeBytes = 30305 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

licenses-analysis.odsView on unpkg
•path = licenses-analysis.ods kind = compressed_blob sizeBytes = 30305 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

licenses-analysis.odsView on unpkg
•path = licenses-analysis.ods kind = nested_archive_needs_inspection sizeBytes = 30305 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

licenses-analysis.odsView on unpkg

Findings

2 High6 Medium5 Low
HighCopied Package Dependency Bridgesrc/adapter/Runtime/ApiSchemaPush_Runtime.mjs
HighShips High Entropy Bloblicenses-analysis.ods
MediumDynamic Requirejest.setup.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/run-pg-integration-tests.sh
MediumShips Compressed Bloblicenses-analysis.ods
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionlicenses-analysis.ods