registry / @rnaga/wp-node-cli / 1.4.1

@rnaga/wp-node-cli@1.4.1

👉 **[View Full Documentation at rnaga.github.io/wp-node →](https://rnaga.github.io/wp-node/)**

Static Scan Results

scanned 9h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

Manifest

WildcardDependency

scanned 28 file(s), 159 KB of source

Source & flagged code

2 flagged

init/init.jsView file

Lines 1-44javascript

1#!/usr/bin/env node

2"use strict";

3var __importDefault = (this && this.__importDefault) || function (mod) {

4 return (mod && mod.__esModule) ? mod : { "default": mod };

5};

6Object.defineProperty(exports, "__esModule", { value: true });

7exports.init = void 0;

8require("reflect-metadata");

9const fs_1 = __importDefault(require("fs"));

10const path_1 = __importDefault(require("path"));

11const child_process_1 = require("child_process");

12const files_1 = require("@rnaga/wp-node/common/files");

High

Child Process

Package source references child process execution.

init/init.jsView on unpkg · L10

13const constants_1 = require("../constants");

14const wp_config_1 = require("../configs/wp.config");

15const { generate } = (0, wp_config_1.wpConfig)();

16const init = async (input) => {

17 const { distDir = "." } = input;

18 await generate(input);

19 console.log("Installing settings.ts...");

20 (0, files_1.mkdir)(distDir);

21 const originalSettingsTs = fs_1.default.readFileSync(__dirname + "/templates/settings.ts", "utf8");

22 const settingsTs = originalSettingsTs.replaceAll("../src/", "@rnaga/wp-node/");

23 fs_1.default.writeFileSync(`${distDir}/${constants_1.CONFIG_WP_ROOT_DIR}/settings.ts`, settingsTs);

24 const exampleIndexTs = fs_1.default.readFileSync(__dirname + "/templates/index.example.ts", "utf8");

25 fs_1.default.writeFileSync(`${distDir}/index.ts`, exampleIndexTs);

26 (0, files_1.copyFile)(__dirname + `/templates/config/`, `${distDir}/${constants_1.CONFIG_WP_ROOT_DIR}/config/`, {

27 recursive: true,

28 });

29 const tsConfigPath = path_1.default.resolve(process.cwd(), `${distDir}/tsconfig.json`);

30 if (!(0, files_1.fileExists)(tsConfigPath)) {

31 (0, files_1.copyFile)(__dirname + `/templates/tsconfig.json`, tsConfigPath);

32 }

33 // Install dependencies

34 (0, child_process_1.execSync)(`cd ${distDir} && npm install --save-dev @types/node`);

35 console.log("Creating .gitignore...");

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

init/init.jsView on unpkg · L33

36 // Copy gitignore.example to .gitignore if .gitignore does not exist

37 const gitignorePath = path_1.default.resolve(process.cwd(), `${distDir}/.gitignore`);

38 if (!(0, files_1.fileExists)(gitignorePath)) {

39 (0, files_1.copyFile)(__dirname + `/templates/gitignore.example`, gitignorePath);

40 }

41 console.log("Done!");

42};

43exports.init = init;

Source & flagged code

2 flagged · loading source

init/init.jsView file

10const path_1 = __importDefault(require("path")); L11: const child_process_1 = require("child_process"); L12: const files_1 = require("@rnaga/wp-node/common/files");

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code