registry / encrypt-storage / 2.16.6

encrypt-storage@2.16.6

Wrapper for encrypted localStorage and sessionStorage in browser

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEvalFilesystemShell

Supply chain

HighEntropyStringsMinified

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 78.0 KB of source

Source & flagged code

3 flagged

update-all-dependencies.jsView file

Lines 1-22javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import { execSync } from 'node:child_process';

High

Child Process

Package source references child process execution.

update-all-dependencies.jsView on unpkg · L2

5const currentYear = new Date().getFullYear();

7const packagePath = path.resolve('package.json');

9try {

10 const packageJSON = JSON.parse(fs.readFileSync(packagePath, 'utf8'));

12 const { devDependencies, dependencies } = packageJSON;

14 const parsedDependencies = Object.keys(dependencies).join(' ');

15 const parsedDevDependencies = Object.keys(devDependencies).join(' ');

17 execSync(`yarn add ${parsedDependencies}`, { stdio: 'inherit' });

18 execSync(`yarn add -D ${parsedDevDependencies}`, { stdio: 'inherit' });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

update-all-dependencies.jsView on unpkg · L16

19} catch (error) {

20 console.error(`ERROR: ${JSON.stringify(error)}`);

21}

dist/index.jsView file

Lines 1-3javascript

1/*! For license information please see index.js.LICENSE.txt */

2!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define

Source & flagged code

3 flagged · loading source

update-all-dependencies.jsView file

2import path from 'node:path'; L3: import { execSync } from 'node:child_process'; L4:

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code