registry / @teamvelix/cli / 5.2.8

@teamvelix/cli@5.2.8

Velix v5 CLI — Create, develop, and build Velix applications

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 31.5 KB of source, external domains: github.com, teamvelix.vercel.app

Source & flagged code

2 flagged

dist/dev-ELF2C2RL.jsView file

Lines 1-37javascript

1import {

2 log,

3 showBanner

4} from "./chunk-5UE6SR4H.js";

6// commands/dev.ts

7import fs from "fs";

8import path from "path";

9async function devCommand() {

10 showBanner();

11 log.info("Starting development server...");

12 const { spawn } = await import("child_process");

13 const cwd = process.cwd();

High

Child Process

Package source references child process execution.

dist/dev-ELF2C2RL.jsView on unpkg · L11

14 const candidates = [

15 path.join(cwd, "node_modules", "@teamvelix", "velix", "dist", "runtime", "start-dev.js"),

16 path.join(cwd, "packages", "velix", "dist", "runtime", "start-dev.js"),

17 path.join(cwd, "packages", "velix", "runtime", "start-dev.ts")

18 ];

19 const devScript = candidates.find((c) => fs.existsSync(c));

20 if (!devScript) {

21 log.error("Could not find Velix runtime. Run `npm install` first.");

22 process.exit(1);

23 }

24 const child = spawn(`npx tsx --no-cache "${devScript}"`, {

25 stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/dev-ELF2C2RL.jsView on unpkg · L23

26 cwd,

27 shell: true

28 });

29 child.on("error", (err) => {

30 log.error(`Failed to start dev server: ${err.message}`);

31 process.exit(1);

32 });

33}

34export {

35 devCommand

36};

37//# sourceMappingURL=dev-ELF2C2RL.js.map

Source & flagged code

2 flagged · loading source

dist/dev-ELF2C2RL.jsView file

11log.info("Starting development server..."); L12: const { spawn } = await import("child_process"); L13: const cwd = process.cwd();

High

Child Process

Package source references child process execution.

dist/dev-ELF2C2RL.jsView on unpkg · L11

23} L24: const child = spawn(`npx tsx --no-cache "${devScript}"`, { L25: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/dev-ELF2C2RL.jsView on unpkg · L23

Findings

2 High1 Medium4 Low

HighChild Processdist/dev-ELF2C2RL.js

HighRuntime Package Installdist/dev-ELF2C2RL.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/dev-ELF2C2RL.jsView file

Lines 1-37javascript

1import {

2 log,

3 showBanner

4} from "./chunk-5UE6SR4H.js";

6// commands/dev.ts

7import fs from "fs";

8import path from "path";

9async function devCommand() {

10 showBanner();

11 log.info("Starting development server...");

12 const { spawn } = await import("child_process");

13 const cwd = process.cwd();

High

Child Process

Package source references child process execution.

dist/dev-ELF2C2RL.jsView on unpkg · L11

14 const candidates = [

15 path.join(cwd, "node_modules", "@teamvelix", "velix", "dist", "runtime", "start-dev.js"),

16 path.join(cwd, "packages", "velix", "dist", "runtime", "start-dev.js"),

17 path.join(cwd, "packages", "velix", "runtime", "start-dev.ts")

18 ];

19 const devScript = candidates.find((c) => fs.existsSync(c));

20 if (!devScript) {

21 log.error("Could not find Velix runtime. Run `npm install` first.");

22 process.exit(1);

23 }

24 const child = spawn(`npx tsx --no-cache "${devScript}"`, {

25 stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/dev-ELF2C2RL.jsView on unpkg · L23

26 cwd,

27 shell: true

28 });

29 child.on("error", (err) => {

30 log.error(`Failed to start dev server: ${err.message}`);

31 process.exit(1);

32 });

33}

34export {

35 devCommand

36};

37//# sourceMappingURL=dev-ELF2C2RL.js.map