registry / @wdio/visual-reporter / 0.4.15

@wdio/visual-reporter@0.4.15

Visual Testing HTML Report for the @wdio/visual-service module

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 402 KB of source, external domains: reactjs.org, remix.run, webdriver.io, www.w3.org

Source & flagged code

3 flagged

dist/cli.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {

3 function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }

4 return new (P || (P = Promise))(function (resolve, reject) {

5 function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }

6 function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }

7 function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }

8 step((generator = generator.apply(thisArg, _arguments || [])).next());

9 });

10};

11import { confirm, input, select } from '@inquirer/prompts';

12import { existsSync, mkdirSync, readFileSync } from 'node:fs';

13import { dirname, join, resolve } from 'node:path';

14import { execSync } from 'node:child_process';

15import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L13

16import ora from 'ora';

17import { chooseItems } from './utils/inquirerUtils.js';

18import { cleanUpEnvironmentVariables, getArgValue } from './utils/cliUtils.js';

19import { CONFIG_HELPER_INTRO } from './utils/constants.js';

20import { validateOutputJson } from './utils/validateOutput.js';

21import { copyDirectory } from './utils/fileHandling.js';

22function main() {

23 return __awaiter(this, void 0, void 0, function* () {

24 //

25 // Set some initial variables

26 let filePath = getArgValue('--jsonOutput') ? resolve(process.cwd(), getArgValue('--jsonOutput')) : undefined;

27 let reportPath = getArgValue('--reportFolder') ? resolve(process.cwd(), getArgValue('--reportFolder')) : undefined;

28 const logLevel = getArgValue('--logLevel');

29 const __filename = fileURLToPath(import.meta.url);

30 const __dirname = dirname(__filename);

31 const visualReporterProjectRoot = resolve(__dirname, '..');

32 const currentPath = process.cwd();

33 const isLocalDev = process.env.VISUAL_REPORT_LOCAL_DEV === 'true';

Lines 123-163javascript

123 execSync('npm run script:prepare.report', {

124 stdio: 'inherit',

125 cwd: visualReporterProjectRoot,

126 });

127 thumbnailSpinner.succeed('Successfully generated the report assets.');

128 }

129 catch (_error) {

130 if (runInDebugMode) {

131 console.log('Failed generating the report assets = '

build/client/assets/components-W_vyjkQq.jsView file

Lines 45-85javascript

45 * LICENSE.md file in the root directory of this source tree.

46 *

47 * @license MIT

48 */function q(){return q=Object.assign?Object.assign.bind():function(e

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

13import { dirname, join, resolve } from 'node:path'; L14: import { execSync } from 'node:child_process'; L15: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L13

143try { L144: execSync(`npx sirv ${reporterPath}`, { L145: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L143

build/client/assets/components-W_vyjkQq.jsView file

65* @license MIT L66: */async function Fn(e,t){if(e.id in t)return t[e.id];try{let r=await import(e.module);return t[e.id]=r,r}catch(r){return console.error(`Error loading route module \`${e.module}\`, ... L67: * @remix-run/react v2.17.5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/client/assets/components-W_vyjkQq.jsView on unpkg · L65

Findings

3 High4 Medium4 Low

HighChild Processdist/cli.js

HighShell

HighRuntime Package Installdist/cli.js

MediumDynamic Requirebuild/client/assets/components-W_vyjkQq.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/cli.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {

3 function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }

4 return new (P || (P = Promise))(function (resolve, reject) {

5 function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }

6 function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }

7 function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }

8 step((generator = generator.apply(thisArg, _arguments || [])).next());

9 });

10};

11import { confirm, input, select } from '@inquirer/prompts';

12import { existsSync, mkdirSync, readFileSync } from 'node:fs';

13import { dirname, join, resolve } from 'node:path';

14import { execSync } from 'node:child_process';

15import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L13

16import ora from 'ora';

17import { chooseItems } from './utils/inquirerUtils.js';

18import { cleanUpEnvironmentVariables, getArgValue } from './utils/cliUtils.js';

19import { CONFIG_HELPER_INTRO } from './utils/constants.js';

20import { validateOutputJson } from './utils/validateOutput.js';

21import { copyDirectory } from './utils/fileHandling.js';

22function main() {

23 return __awaiter(this, void 0, void 0, function* () {

24 //

25 // Set some initial variables

26 let filePath = getArgValue('--jsonOutput') ? resolve(process.cwd(), getArgValue('--jsonOutput')) : undefined;

27 let reportPath = getArgValue('--reportFolder') ? resolve(process.cwd(), getArgValue('--reportFolder')) : undefined;

28 const logLevel = getArgValue('--logLevel');

29 const __filename = fileURLToPath(import.meta.url);

30 const __dirname = dirname(__filename);

31 const visualReporterProjectRoot = resolve(__dirname, '..');

32 const currentPath = process.cwd();

33 const isLocalDev = process.env.VISUAL_REPORT_LOCAL_DEV === 'true';

Lines 123-163javascript

123 execSync('npm run script:prepare.report', {

124 stdio: 'inherit',

125 cwd: visualReporterProjectRoot,

126 });

127 thumbnailSpinner.succeed('Successfully generated the report assets.');

128 }

129 catch (_error) {

130 if (runInDebugMode) {

131 console.log('Failed generating the report assets = '

build/client/assets/components-W_vyjkQq.jsView file

Lines 45-85javascript

45 * LICENSE.md file in the root directory of this source tree.

46 *

47 * @license MIT

48 */function q(){return q=Object.assign?Object.assign.bind():function(e