registry  /  dirextalk-deployer  /  0.1.29

dirextalk-deployer@0.1.29

Versioned Dirextalk deployer agent skill and portable deployment orchestration tools.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemShell
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 44.7 KB of source

Source & flagged code

3 flagged · loading source
bin/dirextalk-deployer.mjsView file
1#!/usr/bin/env node L2: import { spawnSync } from "node:child_process"; L3: import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
High
Child Process

Package source references child process execution.

bin/dirextalk-deployer.mjsView on unpkg · L1
345latestVersion, L346: updateCommand: `npm install -g ${packageName}@latest` L347: }; ... L350: function runNpmUpdateAndChildInstall({ agent, scope, target, options, freshness }) { L351: const installResult = spawnSync("npm", ["install", "-g", `${packageName}@latest`], { L352: stdio: "inherit",
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/dirextalk-deployer.mjsView on unpkg · L345
scripts/pricing-estimate.shView file
•path = scripts/pricing-estimate.sh kind = build_helper sizeBytes = 11788 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/pricing-estimate.shView on unpkg

Findings

3 High3 Medium2 Low
HighChild Processbin/dirextalk-deployer.mjs
HighShell
HighRuntime Package Installbin/dirextalk-deployer.mjs
MediumEnvironment Vars
MediumShips Build Helperscripts/pricing-estimate.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem