registry / dbmux / 2.4.0

dbmux@2.4.0

A flexible database management CLI tool with persistent configuration

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 627 KB of source, external domains: api.github.com, github.com, registry.npmjs.org

Source & flagged code

2 flagged

dist/index.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: // ../../node_modules/yoctocolors-cjs/index.js // ../../node_modules/cli-width/index.js // ../../node_modules/ansi-regex/index.js // ../../node_modules/strip-ansi/index.js // ../../node_modules/is-fullwidth-code-point/index.js // ../../node_modules/emoji-regex/index.js // ../../node_modules/string-width/index.js // ../../node_modules/color-name/index.js

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

33var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports); L34: var __require = /* @__PURE__ */ createRequire(import.meta.url); L35:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L33

Source & flagged code

2 flagged · loading source

dist/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code