registry / @share-crm/sharedev-cli / 0.0.4-rc.25
@share-crm/sharedev-cli@0.0.4-rc.25
sharedev command line tool
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsProtestwareUrlStrings
NoLicense
Source & flagged code
1 flaggeddist/sharedev.jsView file
554typeof Buffer.alloc === "function" &&
L555: typeof Buffer.from === "function";
L556:
...
L769: if (typeof stream == 'undefined') {
L770: this.end();
L771: return;
...
L1020:
L1021: // Is webkit? http://stackoverflow.com/a/16459606/376773
L1022: // document is undefined in react-native: https://github.com/facebook/react-native/pull/1632
...
L1088: * @param {String} namespaces
L1089: * @api private
L1090: */
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/sharedev.jsView on unpkg · L554Findings
4 Medium5 Low
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/sharedev.js
MediumProtestware
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @share-crm/sharedev-cli@0.0.4-rc.25.
See all versions of @share-crm/sharedev-cli for other recorded verdicts.
- Review the evidence and your use of @share-crm/sharedev-cli@0.0.4-rc.25 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.