registry / create-volt / 0.52.0

create-volt@0.52.0

⚠ Under review

Scaffold a new Volt app — no-build, signals-based UI with Socket.io hot reload.

Static Scan Results

scanned 12h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 61 file(s), 464 KB of source, external domains: aistudio.google.com, api.anthropic.com, api.openai.com, cdn.example.com, cdn.jsdelivr.net, console.anthropic.com, example.com, generativelanguage.googleapis.com, nyc3.digitaloceanspaces.com, platform.openai.com, registry.npmjs.org, schema.org, site.com, voltjs.com

Source & flagged code

6 flagged

index.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// create-volt — scaffold a new Volt app, à la create-react-app.

3//

4// npm create volt@latest my-app

5// npx create-volt my-app

6// npm create volt@latest my-app -- --skip-install

7//

8// Cross-platform: pure node: APIs, path.join everywhere, recursive fs.cpSync,

9// and the install step shells out to whichever package manager invoked it.

11import fs from "node:fs";

12import path from "node:path";

13import { spawnSync } from "node:child_process";

14import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L12

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L4

15import { createRequire } from "node:module";

16import { datePort } from "./lib/date-port.js";

18const __dirname = path.dirname(fileURLToPath(import.meta.url));

19const require = createRequire(import.meta.url);

20const pkg = require("./package.json");

22// --- tiny ANSI helpers (no deps; degrade to plain text when not a TTY) ---

23const tty = process.stdout.isTTY;

24const c = (code) => (s) => (tty ? `\x1b[${code}m${s}\x1b[0m` : String(s));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L12

25const bold = c(1), dim = c(2), cyan = c(36), green = c(32), red = c(31), yellow = c(33);

27function die(msg) {

28 console.error(`\n${red("✖")} ${msg}\n`);

29 process.exit(1);

30}

32const HELP = `

addons/pages/files/lib/pages.jsView file

Lines 126-166javascript

126const DEV = process.env.NODE_ENV !== "production";

127// In dev, cache-bust theme imports by mtime so editing _theme.js shows up without

128// a restart (ESM caches a given URL forever); unchanged files keep the same URL.

129const freshUrl = (f) => pathToFileURL(f).href + (DEV ?

templates/default/server.jsView file

Lines 1-24javascript

1// server.js — dev server with a built-in first-run setup wizard.

2//

3// First run (no .env) or `node server.js --edit` (-e) opens a disposable, local

4// config page: tick add-ons, fill settings, Apply. Apply writes .env (a

5// VOLT_ADDONS list + settings) and adds any needed packages to package.json,

6// runs npm install, then starts the app — which wires whatever .env enables.

7// Add-on code is bundled under .volt/addons; nothing is copied into your code.

8//

9// No build step, no env-file flag: .env is auto-loaded below.

11import http

Source & flagged code

6 flagged · loading source

index.jsView file

12import path from "node:path"; L13: import { spawnSync } from "node:child_process"; L14: import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L12

12import path from "node:path"; L13: import { spawnSync } from "node:child_process"; L14: import { fileURLToPath } from "node:url"; ... L17: L18: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L19: const require = createRequire(import.meta.url); L20: const pkg = require("./package.json"); L21: L22: // --- tiny ANSI helpers (no deps; degrade to plain text when not a TTY) --- L23: const tty = process.stdout.isTTY; L24: const c = (code) => (s) => (tty ? `\x1b[${code}m${s}\x1b[0m` : String(s)); ... L116: " // a tiny example API",

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L12

4// npm create volt@latest my-app L5: // npx create-volt my-app L6: // npm create volt@latest my-app -- --skip-install ... L12: import path from "node:path"; L13: import { spawnSync } from "node:child_process"; L14: import { fileURLToPath } from "node:url";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L4

addons/pages/files/lib/pages.jsView file

146if (fs.existsSync(bundled)) { L147: const t = wrap(await import(freshUrl(bundled))); L148: if (t) return t;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

addons/pages/files/lib/pages.jsView on unpkg · L146

templates/default/server.jsView file

4// config page: tick add-ons, fill settings, Apply. Apply writes .env (a L5: // VOLT_ADDONS list + settings) and adds any needed packages to package.json, L6: // runs npm install, then starts the app — which wires whatever .env enables. ... L10: L11: import http from "node:http"; L12: import fs from "node:fs"; L13: import path from "node:path"; L14: import { spawn, spawnSync } from "node:child_process"; L15: import { fileURLToPath, pathToFileURL } from "node:url"; ... L19: L20: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L21: const ENV_PATH = path.join(__dirname, ".env");

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

templates/default/server.jsView on unpkg · L4

338try { L339: const r = spawnSync("npx", ["--yes", "create-volt@latest", "update"], { cwd: __dirname, encoding: "utf8", shell: process.platform === "win32" }); L340: res.end(JSON.stringify({ ok: r.status === 0, output: ((r.stdout || "") + (r.stderr || "")).slice(-2000) })); L341: } catch (e) { ... L350: const env = readEnvFile(); L351: const base = (env.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai").replace(/\/api\/ai\/?$/, ""); L352: fetch(base + "/api/register", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ app: env.SITE_NAME || "volt-app" }) })

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

templates/default/server.jsView on unpkg · L338

Findings

1 Critical5 High4 Medium3 Low

CriticalCredential Exfiltrationtemplates/default/server.js

HighChild Processindex.js

HighShell

HighCommand Output Exfiltrationtemplates/default/server.js

HighSandbox Evasion Gated Capabilityindex.js

HighRuntime Package Installindex.js

MediumDynamic Requireaddons/pages/files/lib/pages.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

index.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// create-volt — scaffold a new Volt app, à la create-react-app.

3//

4// npm create volt@latest my-app

5// npx create-volt my-app

6// npm create volt@latest my-app -- --skip-install

7//

8// Cross-platform: pure node: APIs, path.join everywhere, recursive fs.cpSync,

9// and the install step shells out to whichever package manager invoked it.

11import fs from "node:fs";

12import path from "node:path";

13import { spawnSync } from "node:child_process";

14import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L12

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L4

15import { createRequire } from "node:module";

16import { datePort } from "./lib/date-port.js";

18const __dirname = path.dirname(fileURLToPath(import.meta.url));

19const require = createRequire(import.meta.url);

20const pkg = require("./package.json");

22// --- tiny ANSI helpers (no deps; degrade to plain text when not a TTY) ---

23const tty = process.stdout.isTTY;

24const c = (code) => (s) => (tty ? `\x1b[${code}m${s}\x1b[0m` : String(s));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.jsView on unpkg · L12

25const bold = c(1), dim = c(2), cyan = c(36), green = c(32), red = c(31), yellow = c(33);

27function die(msg) {

28 console.error(`\n${red("✖")} ${msg}\n`);

29 process.exit(1);

30}

32const HELP = `

addons/pages/files/lib/pages.jsView file

Lines 126-166javascript

126const DEV = process.env.NODE_ENV !== "production";

127// In dev, cache-bust theme imports by mtime so editing _theme.js shows up without

128// a restart (ESM caches a given URL forever); unchanged files keep the same URL.

129const freshUrl = (f) => pathToFileURL(f).href + (DEV ?

templates/default/server.jsView file

Lines 1-24javascript

1// server.js — dev server with a built-in first-run setup wizard.

2//

3// First run (no .env) or `node server.js --edit` (-e) opens a disposable, local

4// config page: tick add-ons, fill settings, Apply. Apply writes .env (a

5// VOLT_ADDONS list + settings) and adds any needed packages to package.json,

6// runs npm install, then starts the app — which wires whatever .env enables.

7// Add-on code is bundled under .volt/addons; nothing is copied into your code.

8//

9// No build step, no env-file flag: .env is auto-loaded below.

11import http

Lines 318-358javascript

318 }

319 // --- upgrade: compare .volt/version to npm latest, and run the update ---

320 if (req.method === "GET" && p === "/setup/upgrade-check") {

321 const vf = path.join(__dirname, ".volt", "version");

322 const current = (fs.existsSync(vf) ? fs.readFileSync(vf, "utf8").trim() : "") || "?";

323 fetch("https://registry.npmjs.org/create-volt/latest")

324 .then((r) => r.json())

325 .then((j) => {

326 const latest = j.version || "?";

327 res.setHeader("Content-Type", "application/json");

328 res.end(JSON.stringify({ current, latest, available: latest !== "?" && current !== "?" && latest !== current }));

329 })

330 .catch(() => {

331 res.setHeader("Content-Type", "application/json");

332 res.end(JSON.stringify({ current, latest: "?", available: false }));

333 });

334 return;

335 }

336 if (req.method === "POST" && p === "/setup/upgrade") {

337 res.setHeader("Content-Type", "application/json");

338 try {

339 const r = spawnSync("npx", ["--yes", "create-volt@latest", "update"], { cwd: __dirname, encoding: "utf8", shell: process.platform === "win32" });

340 res.end(JSON.stringify({ ok: r.status === 0, output: ((r.stdout || "") + (r.stderr || "")).slice(-2000) }));

341 } catch (e) {

342 res.statusCode = 500;

343 res.end(JSON.stringify({ ok: false, error: e.message }));

344 }

345 return;

346 }

347 // --- generate a free hosted-AI token from the gateway (self-service) ---

348 if (req.method === "POST" && p === "/setup/gen-token") {

349 res.setHeader("Content-Type", "application/json");

350 const env = readEnvFile();

351 const base = (env.VOLT_AI_GATEWAY || "https://voltjs.com/api/ai").replace(/\/api\/ai\/?$/, "");

352 fetch(base + "/api/register", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ app: env.SITE_NAME || "volt-app" }) })

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

templates/default/server.jsView on unpkg · L338

353 .then((r) => r.json())

354 .then((j) => res.end(JSON.stringify(j)))

355 .catch(() => res.end(JSON.stringify({ ok: false, error: "gateway unreachable" })));

356 return;

357 }

358 // --- AI proxy for the in-config editor (RTEPro). Uses a local provider key