registry / @wavemaker/rn-codegen / 11.9.1-6.647648

@wavemaker/rn-codegen@11.9.1-6.647648

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 261 file(s), 594 KB of source, external domains: noserverrequired.com, npmjs.com

Source & flagged code

2 flagged

src/templates/project/component/dynamic/component-generator.jsView file

Lines 48-77javascript

48 'WmSelect': WmSelect,

49 'WmSearch': WmSearch,

50 'WmChips': WmChips,

51 'WmCheckbox': WmCheckbox,

52 'WmCheckboxset': WmCheckboxset,

53 'WmToggle': WmToggle,

54 'WmSwitch': WmSwitch,

55 'WmRadioset': WmRadioset,

56 'WmDate': WmDate,

57 'WmDatetime': WmDatetime,

58 'WmTime': WmTime,

59 'WmSlider': WmSlider,

60 'WmRating': WmRating,

61 'WmLayoutgrid': WmLayoutgrid,

62 'WmGridrow': WmGridrow,

63 'WmGridcolumn': WmGridcolumn,

64 'WmFormField': WmFormField,

65 'WmLabel': WmLabel

66 }

68 // Evaluate the transformed code synchronously

69 const dynamicComponentFunction = new Function(['React, fragment', ...Object.keys(importedComponents)].join(', '), `return ${transformedCode}`);

70 const dynamicComponent = dynamicComponentFunction(React, fragment, ...Object.values(importedComponents));

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/templates/project/component/dynamic/component-generator.jsView on unpkg · L68

71 return dynamicComponent;

72 } catch (error) {

73 console.error('Error generating component:', error);

74 return null;

75 }

77}

index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2"use strict";

3var __importDefault = (this && this.__importDefault) || function (mod) {

4 return (mod && mod.__esModule) ? mod : { "default": mod };

5};

Source & flagged code

2 flagged · loading source

src/templates/project/component/dynamic/component-generator.jsView file

68// Evaluate the transformed code synchronously L69: const dynamicComponentFunction = new Function(['React, fragment', ...Object.keys(importedComponents)].join(', '), `return ${transformedCode}`); L70: const dynamicComponent = dynamicComponentFunction(React, fragment, ...Object.values(importedComponents));

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/templates/project/component/dynamic/component-generator.jsView on unpkg · L68

index.jsView file

6Object.defineProperty(exports, "__esModule", { value: true }); L7: const yargs_1 = __importDefault(require("yargs")); L8: const fs_extra_1 = __importDefault(require("fs-extra"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L6

Findings

3 Medium5 Low

MediumDynamic Requireindex.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvalsrc/templates/project/component/dynamic/component-generator.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

src/templates/project/component/dynamic/component-generator.jsView file

Lines 48-77javascript

48 'WmSelect': WmSelect,

49 'WmSearch': WmSearch,

50 'WmChips': WmChips,

51 'WmCheckbox': WmCheckbox,

52 'WmCheckboxset': WmCheckboxset,

53 'WmToggle': WmToggle,

54 'WmSwitch': WmSwitch,

55 'WmRadioset': WmRadioset,

56 'WmDate': WmDate,

57 'WmDatetime': WmDatetime,

58 'WmTime': WmTime,

59 'WmSlider': WmSlider,

60 'WmRating': WmRating,

61 'WmLayoutgrid': WmLayoutgrid,

62 'WmGridrow': WmGridrow,

63 'WmGridcolumn': WmGridcolumn,

64 'WmFormField': WmFormField,

65 'WmLabel': WmLabel

66 }

68 // Evaluate the transformed code synchronously

69 const dynamicComponentFunction = new Function(['React, fragment', ...Object.keys(importedComponents)].join(', '), `return ${transformedCode}`);

70 const dynamicComponent = dynamicComponentFunction(React, fragment, ...Object.values(importedComponents));

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/templates/project/component/dynamic/component-generator.jsView on unpkg · L68

71 return dynamicComponent;

72 } catch (error) {

73 console.error('Error generating component:', error);

74 return null;

75 }

77}

index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2"use strict";

3var __importDefault = (this && this.__importDefault) || function (mod) {

4 return (mod && mod.__esModule) ? mod : { "default": mod };

5};