registry / @weave-framework/cli / 0.2.0

@weave-framework/cli@0.2.0

Weave CLI — `weave build`, `weave dev` (watch + live-reload), `weave check`, `weave routes`.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 102 KB of source, external domains: 127.0.0.1

Source & flagged code

1 flagged

bin/weave.mjsView file

Lines 9-32javascript

9 * users get a fast, build-free launch with no monorepo-layout assumptions.

10 */

11import { build as esbuild } from 'esbuild';

12import { mkdirSync } from 'node:fs';

13import { dirname, join, resolve } from 'node:path';

14import { fileURLToPath, pathToFileURL } from 'node:url';

16const here = dirname(fileURLToPath(import.meta.url));

17const cacheDir = join(resolve(here, '../../..'), 'node_modules', '.weave');

18mkdirSync(cacheDir, { recursive: true });

19const out = join(cacheDir, 'cli.mjs');

21await esbuild({

22 entryPoints: [join(here, '../src/cli.ts')],

23 bundle: true,

24 format: 'esm',

25 platform: 'node',

26 external: ['esbuild', 'typescript', 'sass'],

27 outfile: out,

28});

30const { main } = await import(pathToFileURL(out).href);

31await main(process.argv.slice(2));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/weave.mjsView on unpkg · L29

Source & flagged code

1 flagged · loading source

bin/weave.mjsView file

29L30: const { main } = await import(pathToFileURL(out).href); L31: await main(process.argv.slice(2));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/weave.mjsView on unpkg · L29

Findings

2 Medium3 Low

MediumDynamic Requirebin/weave.mjs

MediumNetwork

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

bin/weave.mjsView file

Lines 9-32javascript

9 * users get a fast, build-free launch with no monorepo-layout assumptions.

10 */

11import { build as esbuild } from 'esbuild';

12import { mkdirSync } from 'node:fs';

13import { dirname, join, resolve } from 'node:path';

14import { fileURLToPath, pathToFileURL } from 'node:url';

16const here = dirname(fileURLToPath(import.meta.url));

17const cacheDir = join(resolve(here, '../../..'), 'node_modules', '.weave');

18mkdirSync(cacheDir, { recursive: true });

19const out = join(cacheDir, 'cli.mjs');

21await esbuild({

22 entryPoints: [join(here, '../src/cli.ts')],

23 bundle: true,

24 format: 'esm',

25 platform: 'node',

26 external: ['esbuild', 'typescript', 'sass'],

27 outfile: out,

28});

30const { main } = await import(pathToFileURL(out).href);

31await main(process.argv.slice(2));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/weave.mjsView on unpkg · L29