registry / create-volt / 0.56.1

create-volt@0.56.1

⚠ Under review

Scaffold a new Volt app — no-build, signals-based UI with Socket.io hot reload.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 69 file(s), 636 KB of source, external domains: aistudio.google.com, api.anthropic.com, api.openai.com, cdn.example.com, cdn.jsdelivr.net, console.anthropic.com, example.com, generativelanguage.googleapis.com, nyc3.digitaloceanspaces.com, platform.openai.com, registry.npmjs.org, schema.org, voltjs.com

Source & flagged code

7 flagged

index.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// create-volt — scaffold a new Volt app, à la create-react-app.

3//

4// npm create volt@latest my-app

5// npx create-volt my-app

6// npm create volt@latest my-app -- --skip-install

7//

8// Cross-platform: pure node: APIs, path.join everywhere, recursive fs.cpSync,

9// and the install step shells out to whichever package manager invoked it.

11import fs from "node:fs";

12import path from "node:path";

13import { spawnSync } from "node:child_process";

14import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L12

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L4

15import { createRequire } from "node:module";

16import { datePort } from "./lib/date-port.js";

18const __dirname = path.dirname(fileURLToPath(import.meta.url));

19const require = createRequire(import.meta.url);

20const pkg = require("./package.json");

22// --- tiny ANSI helpers (no deps; degrade to plain text when not a TTY) ---

23const tty = process.stdout.isTTY;

24const c = (code) => (s) => (tty ? `\x1b[${code}m${s}\x1b[0m` : String(s));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L12

25const bold = c(1), dim = c(2), cyan = c(36), green = c(32), red = c(31), yellow = c(33);

27function die(msg) {

28 console.error(`\n${red("✖")} ${msg}\n`);

29 process.exit(1);

30}

32const HELP = `

addons/pages/files/lib/pages.jsView file

Lines 126-166javascript

126const DEV = process.env.NODE_ENV !== "production";

127// In dev, cache-bust theme imports by mtime so editing _theme.js shows up without

128// a restart (ESM caches a given URL forever); unchanged files keep the same URL.

129const freshUrl = (f) => pathToFileURL(f).href + (DEV ?

templates/business/server.jsView file

Lines 1-24javascript

1// server.js — dev server with a built-in first-run setup wizard.

2//

3// First run (no .env) or `node server.js --edit` (-e) opens a disposable, local

4// config page: tick add-ons, fill settings, Apply. Apply writes .env (a

5// VOLT_ADDONS list + settings) and adds any needed packages to package.json,

6// runs npm install, then starts the app — which wires whatever .env enables.

7// Add-on code is bundled under .volt/addons; nothing is copied into your code.

8//

9// No build step, no env-file flag: .env is auto-loaded below.

11import http

Source & flagged code

7 flagged · loading source

index.jsView file

12import path from "node:path"; L13: import { spawnSync } from "node:child_process"; L14: import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L12

12import path from "node:path"; L13: import { spawnSync } from "node:child_process"; L14: import { fileURLToPath } from "node:url"; ... L17: L18: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L19: const require = createRequire(import.meta.url); L20: const pkg = require("./package.json"); L21: L22: // --- tiny ANSI helpers (no deps; degrade to plain text when not a TTY) --- L23: const tty = process.stdout.isTTY; L24: const c = (code) => (s) => (tty ? `\x1b[${code}m${s}\x1b[0m` : String(s)); ... L116: " // a tiny example API",

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L12

4// npm create volt@latest my-app L5: // npx create-volt my-app L6: // npm create volt@latest my-app -- --skip-install ... L12: import path from "node:path"; L13: import { spawnSync } from "node:child_process"; L14: import { fileURLToPath } from "node:url";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L4

addons/pages/files/lib/pages.jsView file

146if (fs.existsSync(bundled)) { L147: const t = wrap(await import(freshUrl(bundled))); L148: if (t) return t;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

addons/pages/files/lib/pages.jsView on unpkg · L146

templates/business/server.jsView file

4// config page: tick add-ons, fill settings, Apply. Apply writes .env (a L5: // VOLT_ADDONS list + settings) and adds any needed packages to package.json, L6: // runs npm install, then starts the app — which wires whatever .env enables. ... L10: L11: import http from "node:http"; L12: import fs from "node:fs"; ... L14: import crypto from "node:crypto"; L15: import { spawn, spawnSync } from "node:child_process"; L16: import { fileURLToPath, pathToFileURL } from "node:url"; ... L20: L21: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L22: const ENV_PATH = path.join(__dirname, ".env");

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

templates/business/server.jsView on unpkg · L4

353try { L354: const r = spawnSync("npx", ["--yes", "create-volt@latest", "update"], { cwd: __dirname, encoding: "utf8", shell: process.platform === "win32" }); L355: res.end(JSON.stringify({ ok: r.status === 0, output: ((r.stdout || "") + (r.stderr || "")).slice(-2000) })); L356: } catch (e) { ... L365: const env = readEnvFile(); L366: const base = (env.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai").replace(/\/api\/ai\/?$/, ""); L367: fetch(base + "/api/register", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ app: env.SITE_NAME || "volt-app" }) })

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

templates/business/server.jsView on unpkg · L353

Low

Weak Crypto

Package source references weak cryptographic algorithms.

templates/business/server.jsView on unpkg · L4

Findings

1 Critical5 High4 Medium4 Low

CriticalCredential Exfiltrationtemplates/business/server.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationtemplates/business/server.js

HighSandbox Evasion Gated Capabilityindex.js

HighRuntime Package Installindex.js

MediumDynamic Requireaddons/pages/files/lib/pages.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowWeak Cryptotemplates/business/server.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

index.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// create-volt — scaffold a new Volt app, à la create-react-app.

3//

4// npm create volt@latest my-app

5// npx create-volt my-app

6// npm create volt@latest my-app -- --skip-install

7//

8// Cross-platform: pure node: APIs, path.join everywhere, recursive fs.cpSync,

9// and the install step shells out to whichever package manager invoked it.

11import fs from "node:fs";

12import path from "node:path";

13import { spawnSync } from "node:child_process";

14import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L12

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L4

15import { createRequire } from "node:module";

16import { datePort } from "./lib/date-port.js";

18const __dirname = path.dirname(fileURLToPath(import.meta.url));

19const require = createRequire(import.meta.url);

20const pkg = require("./package.json");

22// --- tiny ANSI helpers (no deps; degrade to plain text when not a TTY) ---

23const tty = process.stdout.isTTY;

24const c = (code) => (s) => (tty ? `\x1b[${code}m${s}\x1b[0m` : String(s));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L12

25const bold = c(1), dim = c(2), cyan = c(36), green = c(32), red = c(31), yellow = c(33);

27function die(msg) {

28 console.error(`\n${red("✖")} ${msg}\n`);

29 process.exit(1);

30}

32const HELP = `

addons/pages/files/lib/pages.jsView file

Lines 126-166javascript

126const DEV = process.env.NODE_ENV !== "production";

127// In dev, cache-bust theme imports by mtime so editing _theme.js shows up without

128// a restart (ESM caches a given URL forever); unchanged files keep the same URL.

129const freshUrl = (f) => pathToFileURL(f).href + (DEV ?

templates/business/server.jsView file

Lines 1-24javascript

1// server.js — dev server with a built-in first-run setup wizard.

2//

3// First run (no .env) or `node server.js --edit` (-e) opens a disposable, local

4// config page: tick add-ons, fill settings, Apply. Apply writes .env (a

5// VOLT_ADDONS list + settings) and adds any needed packages to package.json,

6// runs npm install, then starts the app — which wires whatever .env enables.

7// Add-on code is bundled under .volt/addons; nothing is copied into your code.

8//

9// No build step, no env-file flag: .env is auto-loaded below.

11import http

Lines 333-373javascript

333 }

334 // --- upgrade: compare .volt/version to npm latest, and run the update ---

335 if (req.method === "GET" && p === "/setup/upgrade-check") {

336 const vf = path.join(__dirname, ".volt", "version");

337 const current = (fs.existsSync(vf) ? fs.readFileSync(vf, "utf8").trim() : "") || "?";

338 fetch("https://registry.npmjs.org/create-volt/latest")

339 .then((r) => r.json())

340 .then((j) => {

341 const latest = j.version || "?";

342 res.setHeader("Content-Type", "application/json");

343 res.end(JSON.stringify({ current, latest, available: latest !== "?" && current !== "?" && latest !== current }));

344 })

345 .catch(() => {

346 res.setHeader("Content-Type", "application/json");

347 res.end(JSON.stringify({ current, latest: "?", available: false }));

348 });

349 return;

350 }

351 if (req.method === "POST" && p === "/setup/upgrade") {

352 res.setHeader("Content-Type", "application/json");

353 try {

354 const r = spawnSync("npx", ["--yes", "create-volt@latest", "update"], { cwd: __dirname, encoding: "utf8", shell: process.platform === "win32" });

355 res.end(JSON.stringify({ ok: r.status === 0, output: ((r.stdout || "") + (r.stderr || "")).slice(-2000) }));

356 } catch (e) {

357 res.statusCode = 500;

358 res.end(JSON.stringify({ ok: false, error: e.message }));

359 }

360 return;

361 }

362 // --- generate a free hosted-AI token from the gateway (self-service) ---

363 if (req.method === "POST" && p === "/setup/gen-token") {

364 res.setHeader("Content-Type", "application/json");

365 const env = readEnvFile();

366 const base = (env.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai").replace(/\/api\/ai\/?$/, "");

367 fetch(base + "/api/register", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ app: env.SITE_NAME || "volt-app" }) })

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

templates/business/server.jsView on unpkg · L353

368 .then((r) => (r.ok ? r.json() : { ok: false, error: `hosted AI gateway not available (HTTP ${r.status}) — is it deployed?` }))

369 .then((j) => res.end(JSON.stringify(j)))

370 .catch(() => res.end(JSON.stringify({ ok: false, error: "hosted AI gateway unreachable" })));

371 return;

372 }

373 // --- AI proxy for the in-config editor (RTEPro). Uses a local provider key