registry  /  create-launch  /  0.2.1

create-launch@0.2.1

Get your users to the app stores.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Supply chain
MinifiedUrlStrings
Manifest
NoLicense
scanned 1 file(s), 167 KB of source, external domains: 127.0.0.1, api.expo.dev, expo.dev, expo.test, github.com, launch.expo.dev, staging-api.expo.dev, staging.expo.dev

Source & flagged code

1 flagged · loading source
build/index.jsView file
1#!/usr/bin/env node L2: import{createRequire as e3}from"node:module";var p3=Object.create;var{getPrototypeOf:l3,defineProperty:a0,getOwnPropertyNames:n3}=Object;var i3=Object.prototype.hasOwnProperty;func... L3: `).join(` L4: `+Y),$.push(Q+"m+"+z0.exports.humanize(this.diff)+"\x1B[0m")}else $[0]=q$()+_+" "+$[0]}function q$(){if(j2.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}functio... L5: `)}function w$($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function S$(){return process.env.DEBUG}function P$($){$.inspectOpts={};let _=Object.keys(j2.inspectOpts);fo... ... L11: ${_}`,Z_,Q_,Y_=($,_,K)=>{let Z=K===""?"":`with ${K.trim()}() `,Q=K_.bind(null,Z,_.toString());Object.defineProperty(Q,"name",Q_);let{writable:Y,enumerable:J,configurable:X}=Z_;Obje... L12: `||_==="\r"}#A(){if(this.#X)return;if(this.#X=setTimeout(()=>{if(this.#X=void 0,this.isSpinning)this.#L()},b_),typeof this.#X?.unref==="function")this.#X.unref()}#N(){if(this.#X)cl... L13: `))K+=Math.max(1,Math.ceil(V8(Z)/_));return K}get color(){return this.#H}set color($){if($!==void 0&&$!==!1&&!y_.has($))throw Error("The `color` option must be a valid color or `fa... ... L114: ${p8("gray",$.sta
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L1

Findings

1 High2 Medium4 Low
HighSandbox Evasion Gated Capabilitybuild/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License