registry / autotel-eventcatalog / 21.0.0

autotel-eventcatalog@21.0.0

Diff your autotel architecture snapshot against an EventCatalog and report drift. Same model as Pact, for event architectures.

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 129 KB of source, external domains: json-schema.org

Source & flagged code

2 flagged

dist/generate-C1vYn-_M.cjsView file

Lines 8-48javascript

8var __hasOwnProp = Object.prototype.hasOwnProperty;

9var __copyProps = (to, from, except, desc) => {

10 if (from && typeof from === "object" || typeof from === "function") {

11 for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {

12 key = keys[i];

13 if (!__hasOwnProp.call(to, key) && key !== except) {

14 __defProp(to, key, {

15 get: ((k) => from[k]).bind(null, key),

16 enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable

17 });

18 }

19 }

20 }

21 return to;

22};

23var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod ||

24 value: mod,

25 enumerable: true

26}) : target, mod));

28//#endregion

29let node_fs_promises = require("node:fs/promises");

30let _eventcatalog_sdk = require("@eventcatalog/sdk");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/generate-C1vYn-_M.cjsView on unpkg · L28

31_eventcatalog_sdk = __toESM(_eventcatalog_sdk, 1);

33//#region src/snapshot.ts

34const EXPECTED_SPEC_PREFIX = "autotel-architecture/";

35/**

36* Loads and validates an autotel architecture snapshot from disk.

37*

38* Throws a descriptive error when the file is missing, contains invalid

39* JSON, or is not recognisable as an autotel snapshot, so the CLI surfaces

40* an actionable message rather than a raw `ENOENT` or `SyntaxError`.

41*/

42async function loadSnapshot(path) {

43 let raw;

44 try {

45 raw = await (0, node_fs_promises.readFile)(path, "utf8");

46 } catch (err) {

47 if (isNodeFsError(err) && err.code === "ENOENT") throw new Error(`Snapshot not found: ${path}`);

48 if (isNodeFsError(err) && err.code === "EISDIR") throw new Error(`Snapshot path is a directory, not a file: ${path}`);

•matchType = previous_version_dangerous_delta matchedPackage = autotel-eventcatalog@18.0.0 matchedIdentity = npm:YXV0b3RlbC1ldmVudGNhdGFsb2c:18.0.0 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/generate-C1vYn-_M.cjsView on unpkg

Source & flagged code

2 flagged · loading source

dist/generate-C1vYn-_M.cjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code