registry / executable-stories-jest / 8.7.0

executable-stories-jest@8.7.0

BDD-style executable stories for Jest with documentation generation

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 4 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 83.0 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-33javascript

1// src/story-api.ts

2import * as fs from "fs";

3import * as path from "path";

4import { createHash } from "crypto";

5import { createRequire } from "module";

6import { tryGetActiveOtelContext, resolveTraceUrl } from "executable-stories-core/utils/otel-detect";

7import { buildHtmlDocEntry } from "executable-stories-core/utils/doc-builders";

8var featureRegistry = /* @__PURE__ */ new Map();

9var storyRegistry = globalThis.__jestExecutableStoriesRegistry ??= /* @__PURE__ */ new Map();

10var attachmentRegistry = /* @__PURE__ */ new Map();

11var otelSpansRegistry = /* @__PURE__ */ new Map();

12var exitHandlerRegistered = globalThis.__jestExecutableStoriesExitHandler ?? false;

13function getOutputDir() {

14 const baseDir = process.env.JEST_STORY_DOCS_DIR ?? ".jest-executable-stories";

15 return path.resolve(process.cwd(), baseDir);

16}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L13

17function flushStories() {

18 if (storyRegistry.size === 0) return;

19 const workerId = process.env.JEST_WORKER_ID ?? "0";

20 const outputDir = path.join(getOutputDir(), `worker-${workerId}`);

21 fs.mkdirSync(outputDir, { recursive: true });

22 for (const [testFilePath, scenarios] of storyRegistry) {

23 if (!scenarios.length) continue;

24 const hash = createHash("sha1").update(testFilePath).digest("hex").slice(0, 12);

25 const baseName = testFilePath === "unknown" ? "unknown" : path.basename(testFilePath);

26 const outFile = path.join(outputDir, `${baseName}.${hash}.json`);

27 const fileAttachments = attachmentRegistry.get(testFilePath);

28 const fileOtelSpans = otelSpansRegistry.get(testFilePath);

29 const scenariosWithAttachments = scenarios.map((s, i) => ({

30 ...s,

31 _attachments: fileAttachments?.get(i) ?? [],

32 ...fileOtelSpans?.get(i) ? { _otelSpans: fileOtelSpans.get(i) } : {}

33 }));

Source & flagged code

1 flagged · loading source

dist/index.jsView file

13function getOutputDir() { L14: const baseDir = process.env.JEST_STORY_DOCS_DIR ?? ".jest-executable-stories"; L15: return path.resolve(process.cwd(), baseDir); L16: } ... L124: if (docs.custom) { L125: entries.push({ kind: "custom", type: docs.custom.type, data: docs.custom.data, phase: "runtime" }); L126: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L13

Findings

1 Medium3 Low

MediumEnvironment Vars

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

Affected versions and remediation

This report applies to executable-stories-jest@8.7.0.

See all versions of executable-stories-jest for other recorded verdicts.

Review the evidence and your use of executable-stories-jest@8.7.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 22:41:09.098Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.