registry / @servicetitan/startup-jest / 2.2.0

@servicetitan/startup-jest@2.2.0

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessShell

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 5 file(s), 3.16 KB of source

Source & flagged code

2 flagged

dist/jest/index.jsView file

Lines 1-42javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", {

3 value: true

4});

5Object.defineProperty(exports, "runJestCli", {

6 enumerable: true,

7 get: function() {

8 return runJestCli;

9 }

10});

11const _child_process = require("child_process");

12function runJestCli() {

High

Child Process

Package source references child process execution.

dist/jest/index.jsView on unpkg · L10

13 const shell = process.platform === 'win32'; // on Windows NPM.CMD requires a shell

14 let args = process.argv.slice(2); // argv[0] = Node executable, argv[1] = script path

15 args = args.map((option)=>{

16 /**

17 * Convert --runTestByPath added by WebStorm to explicit --runTestsByPath=true so

18 * the CLI doesn't misinterpret the boolean option.

19 */ if (option === '--runTestsByPath') {

20 return '--runTestsByPath=true';

21 }

22 /**

23 * When using shell, wrap args containing spaces in quotes because execFileSync

24 * passes args array to shell as a space-separated string.

25 */ if (shell && option.includes(' ')) {

26 return `"${option}"`;

27 }

28 return option;

29 });

30 const command = `npx startup test ${args.join(' ')}`;

31 console.log(`> ${command}`); // eslint-disable-line no-console

32 (0, _child_process.execFileSync)('npx', [

33 'startup',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/jest/index.jsView on unpkg · L29

34 'test',

35 ...args

36 ], {

37 stdio: 'inherit',

38 shell

39 });

40}

42//# sourceMappingURL=index.js.map

Source & flagged code

2 flagged · loading source

dist/jest/index.jsView file

10}); L11: const _child_process = require("child_process"); L12: function runJestCli() {

High

Child Process

Package source references child process execution.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code