registry / executable-stories-formatters / 1.16.1
executable-stories-formatters@1.16.1
Cucumber-compatible report formats (HTML, Markdown, JUnit XML, Cucumber JSON) for executable-stories test results.
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 93.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flagged · loading sourcedist/index.cjsView file
180module.exports = __toCommonJS(src_exports);
L181: var path14 = __toESM(require("path"), 1);
L182: var fsPromises3 = __toESM(require("fs/promises"), 1);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.cjsView on unpkg · L180dist/index.jsView file
406var REPORT_THEME_CSS = `
L407: @import url('https://fonts.googleapis.com/css2?family=Geist:wght@400;500;600;700&family=Geist+Mono:wght@400;500;600&display=swap');
L408:
...
L917: function writeUrl() {
L918: const params = new URLSearchParams();
L919: if (input.value) params.set('q', input.value);
...
L1156: // src/utils/ci-detect.ts
L1157: function detectCI(env = process.env) {
L1158: if (env.TF_BUILD === "True") {
...
L1186: }
L1187: if (env.GITHUB_ACTIONS === "true") {
L1188: const url = env.GITHUB_SERVER_URL && env.GITHUB_REPOSITORY && env.GITHUB_RUN_ID ? `${env.GITHUB_SERVER_URL}/${env.GITHUB_REPOSITORY}/actions/runs/${env.GITHUB_RUN_ID}` : void 0;
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/index.jsView on unpkg · L406Findings
2 High3 Medium5 Low
HighCredential Redirect Persistencedist/cli.js
HighPrevious Version Dangerous Deltadist/cli.js
MediumDynamic Requiredist/index.cjs
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptodist/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to executable-stories-formatters@1.16.1.
See all versions of executable-stories-formatters for other recorded verdicts.
- Review the evidence and your use of executable-stories-formatters@1.16.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.