registry / busabase / 0.0.7

busabase@0.0.7

Open-source Busabase review app + CLI. `busabase server` boots a zero-setup local instance (pglite); other subcommands act as an OpenAPI client.

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 6.38 KB of source

Source & flagged code

4 flagged

bin/busabase.mjsView file

Lines 142-177javascript

142 await mkdir(pgDir, { recursive: true });

143 await mkdir(storageDir, { recursive: true });

144 process.env.PORT = String(port);

145 process.env.HOSTNAME = host;

146 // pglite + local storage persist here so data survives restarts regardless of cwd.

147 process.env.PG_DATABASE_URL ??= `pglite://${pgDir}`;

148 process.env.STORAGE_URL ??= `local:${storageDir}?base_url=/api/dev/attachment`;

149 process.env.NODE_ENV ??= "production";

150

151 const entry = findServerEntry();

152 if (!entry) {

153 console.error(

154 "busabase: no built server found.\n" +

155 "This package must ship the Next standalone build. If you are running from\n" +

156 "source, build it first: pnpm --filter busabase build\n",

157 );

158 process.exit(1);

159 }

160 // Standalone server.js resolves static/public relative to its own directory.

161 process.chdir(dirname(entry));

162 printSplash({ host, port, dataDir });

163 await import(entry);

164}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/busabase.mjsView on unpkg · L162

165

166async function main() {

167 const argv = process.argv.slice(2);

168 if (argv[0] === "server") {

169 await startServer(argv.slice(1));

170 return;

171 }

172 const { runCli } = await import("busabase-cli");

173 process.exit(await runCli(argv));

174}

175

176await main();

177

.next/standalone/apps/busabase/.next/static/media/c5957c763502833a-s.056avqpz8txyo.woff2View file

•path = .next/standalone/apps/busabase/.[redacted]-s.056avqpz8txyo.woff2 kind = high_entropy_blob sizeBytes = 81528 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/standalone/apps/busabase/.next/static/media/c5957c763502833a-s.056avqpz8txyo.woff2View on unpkg

.next/standalone/apps/busabase/.next/server/chunks/ssr/[root-of-the-server]__0b~t-06._.jsView file

•path = .next/standalone/apps/busabase/.next/server/chunks/ssr/[root-of-the-server]__0b~t-06._.js kind = payload_in_excluded_dir sizeBytes = 2293707 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/standalone/apps/busabase/.next/server/chunks/ssr/[root-of-the-server]__0b~t-06._.jsView on unpkg

•path = .next/standalone/apps/busabase/.next/server/chunks/ssr/[root-of-the-server]__0b~t-06._.js kind = oversized_source_file sizeBytes = 2293707 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

.next/standalone/apps/busabase/.next/server/chunks/ssr/[root-of-the-server]__0b~t-06._.jsView on unpkg

Source & flagged code

4 flagged · loading source

bin/busabase.mjsView file

162printSplash({ host, port, dataDir }); L163: await import(entry); L164: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code