registry / express-api-rest-gen / 4.9.0

express-api-rest-gen@4.9.0

A minimal CLI tool to generate a REST API with Express with JS or TS

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 20.8 KB of source

Source & flagged code

2 flagged

utils/testing.tsView file

Lines 1-42typescript

1import { execSync } from "child_process";

2import path from "path";

High

Child Process

Package source references child process execution.

utils/testing.tsView on unpkg · L1

3import fs from "fs";

4import ora from "ora";

6//local imports

7import {

8 TEST_CONFIG,

9 TEST_DEPENDENCIES,

10 TEST_TS_DEPENDENCIES,

11} from "./constants";

13export async function configureTesting(

14 projectPath: string,

15 language: string,

16): Promise<void> {

17 const spinnerDeps = ora({

18 text: "Installing testing dependencies (jest and supertest)...",

19 spinner: "speaker",

20 color: "blue",

21 }).start();

22 try {

23 execSync(`npm i -D ${TEST_DEPENDENCIES.join(" ")}`, {

24 cwd: projectPath,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

utils/testing.tsView on unpkg · L22

25 });

26 await new Promise((resolve) => setTimeout(resolve, 2000));

27 spinnerDeps.succeed("Testing dependencies installed");

28 } catch (error) {

29 spinnerDeps.fail("Failed to install testing dependencies");

30 spinnerDeps.stop();

31 }

33 if (language === "TypeScript") {

34 const spinnerTS = ora({

35 text: "Installing TypeScript testing dependencies...",

36 spinner: "speaker",

37 color: "blue",

38 }).start();

39 try {

40 execSync(

41 `npm i -D ${TEST_TS_DEPENDENCIES.join(" ")} && npx ts-jest config:init"`,

42 {

Source & flagged code

2 flagged · loading source

utils/testing.tsView file

1import { execSync } from "child_process"; L2: import path from "path";

High

Child Process

Package source references child process execution.

utils/testing.tsView on unpkg · L1

22try { L23: execSync(`npm i -D ${TEST_DEPENDENCIES.join(" ")}`, { L24: cwd: projectPath,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

utils/testing.tsView on unpkg · L22

Findings

3 High2 Medium3 Low

HighChild Processutils/testing.ts

HighShell

HighRuntime Package Installutils/testing.ts

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

utils/testing.tsView file

Lines 1-42typescript

1import { execSync } from "child_process";

2import path from "path";

High

Child Process

Package source references child process execution.

utils/testing.tsView on unpkg · L1

3import fs from "fs";

4import ora from "ora";

6//local imports

7import {

8 TEST_CONFIG,

9 TEST_DEPENDENCIES,

10 TEST_TS_DEPENDENCIES,

11} from "./constants";

13export async function configureTesting(

14 projectPath: string,

15 language: string,

16): Promise<void> {

17 const spinnerDeps = ora({

18 text: "Installing testing dependencies (jest and supertest)...",

19 spinner: "speaker",

20 color: "blue",

21 }).start();

22 try {

23 execSync(`npm i -D ${TEST_DEPENDENCIES.join(" ")}`, {

24 cwd: projectPath,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

utils/testing.tsView on unpkg · L22

25 });

26 await new Promise((resolve) => setTimeout(resolve, 2000));

27 spinnerDeps.succeed("Testing dependencies installed");

28 } catch (error) {

29 spinnerDeps.fail("Failed to install testing dependencies");

30 spinnerDeps.stop();

31 }

33 if (language === "TypeScript") {

34 const spinnerTS = ora({

35 text: "Installing TypeScript testing dependencies...",

36 spinner: "speaker",

37 color: "blue",

38 }).start();

39 try {

40 execSync(

41 `npm i -D ${TEST_TS_DEPENDENCIES.join(" ")} && npx ts-jest config:init"`,

42 {