registry / @xylex-group/athena / 4.1.0

@xylex-group/athena@4.1.0

Athena JS SDK

Static Scan Results

scanned 26d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 7.94 MB of source, external domains: access.line.me, accounts.google.com, accounts.spotify.com, api-m.paypal.com, api-m.sandbox.paypal.com, api.atlassian.com, api.dropboxapi.com, api.figma.com, api.github.com, api.kick.com, api.line.me, api.linear.app, api.linkedin.com, api.notion.com, api.paypal.com, api.polar.sh, api.sandbox.paypal.com, api.spotify.com, api.vercel.com, api.weixin.qq.com, api.x.com, api.zoom.us, apis.roblox.com, appleid.apple.com, athena.example.com, athena.invalid, athena.local, auth.athena-auth.com, auth.atlassian.com, backboard.railway.com, cdn.discordapp.com, discord.com, github.com, gitlab.com, graph.facebook.com, graph.microsoft.com, huggingface.co, id.kick.com, id.twitch.tv, id.vk.com, idp.paybin.io, kapi.kakao.com, kauth.kakao.com, limited.facebook.com, linear.app, login.microsoftonline.com, login.salesforce.com, mirror2.athena-cluster.com, nid.naver.com, oauth.reddit.com

Source & flagged code

2 flagged

dist/index.jsView file

6680function importConfigModule(moduleSpecifier) { L6681: const runtimeImport = new Function( L6682: "moduleSpecifier",

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L6680

bin/athena-js.jsView file

Lines 64-104javascript

64 return false;

65 }

66 return (

67 detail.includes("Schema introspection failed") ||

68 detail.includes("does not exist (code 3D000)") ||

69 detail.includes("Unknown option") ||

70 detail.includes("Diagnostics:") ||

71 detail.includes("Generated ") ||

72 detail.startsWith("[athena-js]")

73 );

74}

76async function main() {

77 if (!existsSync(cliEntrypointPath)) {

78 printMissingEntrypointError();

79 process.exit(1);

80 return;

81 }

83 try {

84 const cliEntrypointUrl = pathToFileURL(cliEntrypointPath).href;

85 const cliModule = await import(cliEntrypointUrl);

86 if (typeof cliModule.runCLI !== "function") {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/athena-js.jsView on unpkg · L84

87 throw new Error("CLI module does not export runCLI.");

88 }

89 await cliModule.runCLI(process.argv.slice(2));

90 if (typeof process.exitCode === "number" && process.exitCode !== 0) {

91 process.exit(process.exitCode);

92 }

93 } catch (err) {

94 const errorDetail = formatRuntimeError(err);

95 if (isAlreadyFormattedCliError(errorDetail)) {

96 console.error(errorDetail);

97 } else if (errorDetail.includes("\n")) {

98 console.error(`Failed to start athena-js CLI:\n${errorDetail}`);

99 } else {

100 console.error(`Failed to start athena-js CLI: ${errorDetail}`);

101 }

102 if (

103 isDebugEnabled() &&

104 err instanceof Error &&

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code