registry / create-raredays-app / 0.1.9

create-raredays-app@0.1.9

Scaffold a new RareDays Next.js app.

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 96 file(s), 121 KB of source, external domains: console.neon.tech, example.com, neon.tech, openapi.vercel.sh, raredays.com, vercel.com

Source & flagged code

2 flagged

bin/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawnSync } from "node:child_process";

3import { cp, readFile, readdir, rename, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/index.jsView on unpkg · L1

4import { existsSync, readdirSync } from "node:fs";

5import { dirname, resolve } from "node:path";

6import { fileURLToPath } from "node:url";

7import { parseArgs } from "node:util";

8import * as p from "@clack/prompts";

10import { mergeAllowBuilds } from "./compose-allow-builds.mjs";

12const __dirname = dirname(fileURLToPath(import.meta.url));

13const packageRoot = resolve(__dirname, "..");

14const templatesDir = resolve(packageRoot, "templates");

15const fragmentsDir = resolve(packageRoot, "scaffold-fragments");

17// ─── Presets ─────────────────────────────────────────────────────────────

18// Pre-configured template + module combinations for common app types.

19// These are offered in interactive mode and via --preset in non-interactive mode.

21const PRESETS = {

Lines 583-623javascript

583 const deps = pkg[field];

584 if (!deps) continue;

585 for (const name of Object.keys(deps)) {

586 if (name.

Source & flagged code

2 flagged · loading source

bin/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code