registry / @wdio/visual-reporter / 0.4.15

@wdio/visual-reporter@0.4.15

Visual Testing HTML Report for the @wdio/visual-service module

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 402 KB of source, external domains: reactjs.org, remix.run, webdriver.io, www.w3.org

Source & flagged code

3 flagged

dist/cli.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {

3 function adopt(value) { return value

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

13import { dirname, join, resolve } from 'node:path'; L14: import { execSync } from 'node:child_process'; L15: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L13

143try { L144: execSync(`npx sirv ${reporterPath}`, { L145: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L143

build/client/assets/components-W_vyjkQq.jsView file

65* @license MIT L66: */async function Fn(e,t){if(e.id in t)return t[e.id];try{let r=await import(e.module);return t[e.id]=r,r}catch(r){return console.error(`Error loading route module \`${e.module}\`, ... L67: * @remix-run/react v2.17.5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/client/assets/components-W_vyjkQq.jsView on unpkg · L65

Findings

3 High4 Medium4 Low

HighChild Processdist/cli.js

HighShell

HighRuntime Package Installdist/cli.js

MediumDynamic Requirebuild/client/assets/components-W_vyjkQq.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Lines 123-163javascript

123 execSync('npm run script:prepare.report', {

124 stdio: 'inherit',

125 cwd: visualReporterProjectRoot,

126 });

127 thumbnailSpinner.succeed('Successfully generated the report assets.');

128 }

129 catch (_error) {

130 if (runInDebugMode) {

131 console.log('Failed generating the report assets = ', _error);

132 }

133 thumbnailSpinner.fail('Failed to generate thumbnails.');

134 }

135 if (!isCliMode) {

136 //

137 // Check if the user wants to start the server and if so, start the server on the specified port

138 const startServer = yield confirm({

139 message: 'Would you like to start the server to show the report?',

140 });

141 if (startServer) {

142 console.log('Starting the report server...');

143 try {

144 execSync(`npx sirv ${reporterPath}`, {

145 stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L143

146 cwd: visualReporterProjectRoot,

147 });

148 }

149 catch (_error) {

150 console.log('\nManually stopped the server by pressing Ctrl + C');

151 }

152 }

153 else {

154 console.log('\nServer not started. You can start it manually later using the following command:');

155 console.log(`npx sirv ${reporterPath}\n`);

156 }

157 }

158 cleanUpEnvironmentVariables();

159 process.exit(0);

160 });

161}

162main().catch((error) => {

163 if (error instanceof Error && error.message.includes('User force closed')) {

build/client/assets/components-W_vyjkQq.jsView file

Lines 45-85javascript

45 * LICENSE.md file in the root directory of this source tree.

46 *

47 * @license MIT

48 */function q(){return q=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},q.apply(this,arguments)}/**

49 * @remix-run/react v2.17.5

50 *

51 * Copyright (c) Remix Software Inc.

52 *

53 * This source code is licensed under the MIT license found in the

54 * LICENSE.md file in the root directory of this source tree.

55 *

56 * @license MIT

57 */function we(e,t){if(e===!1||e===null||typeof e>"u")throw new Error(t)}/**

58 * @remix-run/react v2.17.5

59 *

60 * Copyright (c) Remix Software Inc.

61 *

62 * This source code is licensed under the MIT license found in the

63 * LICENSE.md file in the root directory of this source tree.

64 *

65 * @license MIT

66 */async function Fn(e,t){if(e.id in t)return t[e.id];try{let r=await import(e.module);return t[e.id]=r,r}catch(r){return console.error(`Error loading route module \`${e.module}\`, reloading page...`),console.error(r),window.__remixContext.isSpaMode,window.location.reload(),

67 * @remix-run/react v2.17.5

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/client/assets/components-W_vyjkQq.jsView on unpkg · L65

68 *

69 * Copyright (c) Remix Software Inc.

70 *

71 * This source code is licensed under the MIT license found in the

72 * LICENSE.md file in the root directory of this source tree.

73 *

74 * @license MIT

75 */function zo(e,t,r){let n=e.map(i=>{var o;let s=t[i.route.id],l=r.routes[i.route.id];return[l.css?l.css.map(c=>({rel:"stylesheet",href:c})):[],(s==null||(o=s.links)===null||o

76 * @remix-run/react v2.17.5

77 *

78 * Copyright (c) Remix Software Inc.

79 *

80 * This source code is licensed under the MIT license found in the

81 * LICENSE.md file in the root directory of this source tree.

82 *

83 * @license MIT

84 */const Zo={"&":"\\u0026",">":"\\u003e","<":"\\u003c","\u2028":"\\u2028","\u2029":"\\u2029"},qo=/[&><\u2028\u2029]/g;function ot(e){return e.replace(qo,t=>Zo[t])}function cn(e){return{__html:e}}/**

85 * @remix-run/react v2.17.5

Long lines were clipped for display.