registry / create-zenithcms-app / 1.0.0-beta.21

create-zenithcms-app@1.0.0-beta.21

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

Manifest

NoLicense

scanned 1 file(s), 10.9 KB of source

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { Command } from "commander";

3import chalk from "chalk";

4import path from "path";

5import fs from "fs";

6import crypto from "crypto";

7import { execSync } from "child_process";

8import readline from "readline";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L6

9import ora from "ora";

10const program = new Command();

11const question = (query) => {

12 const rl = readline.createInterface({ input: process.stdin, output: process.stdout });

13 return new Promise((resolve) => rl.question(query, (ans) => { rl.close(); resolve(ans.trim()); }));

14};

15program

16 .name("create-zenithcms-app")

17 .description("Bootstrap a new Zenith CMS project")

18 .argument("[directory]", "Target directory")

19 .option("-y, --yes", "Skip all prompts")

20 .option("--install", "Auto-install deps")

21 .action(async (directoryArg, options) => {

22 let targetDir = directoryArg;

23 if (!targetDir) {

24 targetDir = options.yes ? "my-zenith-cms" : await question("? Project name (my-zenith-cms): ");

25 if (!targetDir)

26 targetDir = "my-zenith-cms";

Lines 222-258javascript

222

223Deploying Zenith CMS is straightforward as it is a standard Node.js application.

224

225## Prerequisites

2261. A MongoDB Database (MongoDB Atlas is recommended).

2272. A Node.js hosting provider (Render, Railway, Heroku, AWS, or a simple

Source & flagged code

2 flagged · loading source

dist/index.jsView file

6import crypto from "crypto"; L7: import { execSync } from "child_process"; L8: import readline from "readline";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L6

242try { L243: execSync("npm install --no-audit --no-fund", { stdio: "inherit", cwd: projectPath }); L244: console.log(chalk.green('✔ Dependencies installed successfully!\n'));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L242

Findings

3 High2 Medium4 Low

HighChild Processdist/index.js

HighShell

HighRuntime Package Installdist/index.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { Command } from "commander";

3import chalk from "chalk";

4import path from "path";

5import fs from "fs";

6import crypto from "crypto";

7import { execSync } from "child_process";

8import readline from "readline";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L6

9import ora from "ora";

10const program = new Command();

11const question = (query) => {

12 const rl = readline.createInterface({ input: process.stdin, output: process.stdout });

13 return new Promise((resolve) => rl.question(query, (ans) => { rl.close(); resolve(ans.trim()); }));

14};

15program

16 .name("create-zenithcms-app")

17 .description("Bootstrap a new Zenith CMS project")

18 .argument("[directory]", "Target directory")

19 .option("-y, --yes", "Skip all prompts")

20 .option("--install", "Auto-install deps")

21 .action(async (directoryArg, options) => {

22 let targetDir = directoryArg;

23 if (!targetDir) {

24 targetDir = options.yes ? "my-zenith-cms" : await question("? Project name (my-zenith-cms): ");

25 if (!targetDir)

26 targetDir = "my-zenith-cms";

Lines 222-258javascript

222

223Deploying Zenith CMS is straightforward as it is a standard Node.js application.

224

225## Prerequisites

2261. A MongoDB Database (MongoDB Atlas is recommended).

2272. A Node.js hosting provider (Render, Railway, Heroku, AWS, or a simple