registry  /  create-launch  /  0.3.5

create-launch@0.3.5

Launch your app to app stores.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Supply chain
MinifiedUrlStrings
Manifest
NoLicense
scanned 1 file(s), 167 KB of source, external domains: 127.0.0.1, api.expo.dev, expo.dev, expo.test, github.com, launch.dev, launch.expo.dev, staging-api.expo.dev, staging.expo.dev

Source & flagged code

1 flagged · loading source
build/index.jsView file
1#!/usr/bin/env node L2: import{createRequire as l3}from"node:module";var b3=Object.create;var{getPrototypeOf:v3,defineProperty:i0,getOwnPropertyNames:y3}=Object;var g3=Object.prototype.hasOwnProperty;func... L3: `).join(` L4: `+J),_.push(Z+"m+"+H0.exports.humanize(this.diff)+"\x1B[0m")}else _[0]=L_()+$+" "+_[0]}function L_(){if(q8.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}functio... L5: `)}function A_(_){if(_)process.env.DEBUG=_;else delete process.env.DEBUG}function W_(){return process.env.DEBUG}function q_(_){_.inspectOpts={};let $=Object.keys(q8.inspectOpts);fo... ... L11: ${$}`,o_,r_,s_=(_,$,K)=>{let U=K===""?"":`with ${K.trim()}() `,Z=a_.bind(null,U,$.toString());Object.defineProperty(Z,"name",r_);let{writable:J,enumerable:Q,configurable:X}=o_;Obje... L12: `||$==="\r"}#j(){if(this.#X)return;if(this.#X=setTimeout(()=>{if(this.#X=void 0,this.isSpinning)this.#N()},F$),typeof this.#X?.unref==="function")this.#X.unref()}#O(){if(this.#X)cl... L13: `))K+=Math.max(1,Math.ceil(V2(U)/$));return K}get color(){return this.#H}set color(_){if(_!==void 0&&_!==!1&&!P$.has(_))throw Error("The `color` option must be a valid color or `fa... ... L125: } L126: }`})})).d
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L1

Findings

1 High2 Medium4 Low
HighSandbox Evasion Gated Capabilitybuild/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License