registry / executable-stories-jest / 8.10.3

executable-stories-jest@8.10.3

⚠ Under review

BDD-style executable stories for Jest with documentation generation

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 92.0 KB of source

Source & flagged code

2 flagged

dist/index.jsView file

Lines 24-64javascript

24 registerAfterEach?.(() => {

25 flushPendingAssertions();

26 });

27} catch {

28}

29function flushPendingAssertions() {

30 const ctx = activeContext;

31 if (!ctx) return;

32 const step = ctx.pendingStep;

33 const before = ctx.pendingFrom;

34 ctx.pendingStep = null;

35 ctx.pendingFrom = void 0;

36 if (!step) return;

37 recordAssertions(step, before);

38}

39var featureRegistry = /* @__PURE__ */ new Map();

40var storyRegistry = globalThis.__jestExecutableStoriesRegistry ??= /* @__PURE__ */ new Map();

41var attachmentRegistry = /* @__PURE__ */ new Map();

42var otelSpansRegistry = /* @__PURE__ */ new Map();

43var exitHandlerRegistered = globalThis.__jestExecutableStoriesExitHandler ?? false;

44function getOutputDir() {

45 const baseDir = process.env.JEST_STORY_DOCS_DIR ?? ".jest-executable-stories";

46 return path.resolve(process.cwd(), baseDir);

47}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L44

48function flushStories() {

49 if (storyRegistry.size === 0) return;

50 const workerId = process.env.JEST_WORKER_ID ?? "0";

51 const outputDir = path.join(getOutputDir(), `worker-${workerId}`);

52 fs.mkdirSync(outputDir, { recursive: true });

53 for (const [testFilePath, scenarios] of storyRegistry) {

54 if (!scenarios.length) continue;

55 const hash = createHash("sha1").update(testFilePath).digest("hex").slice(0, 12);

56 const baseName = testFilePath === "unknown" ? "unknown" : path.basename(testFilePath);

57 const outFile = path.join(outputDir, `${baseName}.${hash}.json`);

58 const fileAttachments = attachmentRegistry.get(testFilePath);

59 const fileOtelSpans = otelSpansRegistry.get(testFilePath);

60 const scenariosWithAttachments = scenarios.map((s, i) => ({

61 ...s,

62 _attachments: fileAttachments?.get(i) ?? [],

63 ...fileOtelSpans?.get(i) ? { _otelSpans: fileOtelSpans.get(i) } : {}

64 }));

dist/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = executable-stories-jest@8.9.2 matchedIdentity = npm:ZXhlY3V0YWJsZS1zdG9yaWVzLWplc3Q:8.9.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjsView on unpkg

Source & flagged code

2 flagged · loading source

dist/index.jsView file

44function getOutputDir() { L45: const baseDir = process.env.JEST_STORY_DOCS_DIR ?? ".jest-executable-stories"; L46: return path.resolve(process.cwd(), baseDir); L47: } ... L155: if (docs.custom) { L156: entries.push({ kind: "custom", type: docs.custom.type, data: docs.custom.data, phase: "runtime" }); L157: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L44

dist/index.cjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjsView on unpkg

Findings

1 High1 Medium3 Low

HighPrevious Version Dangerous Deltadist/index.cjs

MediumEnvironment Vars

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

Affected versions and remediation

This report applies to executable-stories-jest@8.10.3.

See all versions of executable-stories-jest for other recorded verdicts.

Review the evidence and your use of executable-stories-jest@8.10.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 18:46:21.692Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.