registry  /  easy-soft-develop  /  3.0.1

easy-soft-develop@3.0.1

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessFilesystemShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 56 file(s), 126 KB of source, external domains: editorconfig.org, help.github.com, registry.npmjs.org

Source & flagged code

3 flagged · loading source
src/tools/prettier.file.jsView file
3function prettierAllFile() { L4: exec('npx prettier --cache --write .'); L5: }
High
Child Process

Package source references child process execution.

src/tools/prettier.file.jsView on unpkg · L3
3function prettierAllFile() { L4: exec('npx prettier --cache --write .'); L5: }
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

src/tools/prettier.file.jsView on unpkg · L3
src/tools/meta.jsView file
5const { resolve } = require('path'); L6: const shell = require('shelljs'); L7:
High
Shell

Package source references shell execution.

src/tools/meta.jsView on unpkg · L5

Findings

3 High1 Medium5 Low
HighChild Processsrc/tools/prettier.file.js
HighShellsrc/tools/meta.js
HighRuntime Package Installsrc/tools/prettier.file.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings