registry / fring-dev / 0.2.0

fring-dev@0.2.0

Build scalable applications with a consistent architecture.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

FilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 28.1 KB of source

Source & flagged code

2 flagged

dist/index.jsView file

Lines 56-96javascript

56 };

57}

59// src/utils/logger.ts

60import chalk from "chalk";

61var logger = {

62 success(message) {

63 console.log(chalk.green(`\u2713 ${message}`));

64 },

65 error(message) {

66 console.log(chalk.red(`\u2717 ${message}`));

67 },

68 info(message) {

69 console.log(chalk.blue(message));

70 },

71 warn(message) {

72 console.log(chalk.yellow(message));

73 }

74};

76// src/services/project-creator.ts

77import { execa } from "execa";

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L76

79// src/utils/package-manager.ts

80function getPackageManagerCommand(packageManager) {

81 switch (packageManager) {

82 case "npm":

83 return {

84 command: "npm",

85 installArgs: ["install"],

86 dlxCommand: "npx",

87 dlxArgs: ["--yes"]

88 };

89 case "pnpm":

90 return {

91 command: "pnpm",

92 installArgs: ["add"],

93 dlxCommand: "pnpm",

94 dlxArgs: ["dlx"]

95 };

96 case "bun":

Lines 451-491javascript

451 const pm = getPackageManagerCommand(this.options.packageManager);

452 const deps = [];

453 if (this.options.zustand) {

454 deps.push("zustand");

455 }

456 if (this.options.tanstackQuery) {

Source & flagged code

2 flagged · loading source

dist/index.jsView file

76// src/services/project-creator.ts L77: import { execa } from "execa"; L78:

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L76

471if (this.options.packageManager === "pnpm") { L472: await execa("pnpm", ["dlx", "shadcn@latest", "init"], { L473: cwd: this.options.projectName,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L471

Findings

2 High2 Low

HighShelldist/index.js

HighRuntime Package Installdist/index.js

LowScripts Present

LowFilesystem

Source & flagged code

2 flagged

dist/index.jsView file

Lines 56-96javascript

56 };

57}

59// src/utils/logger.ts

60import chalk from "chalk";

61var logger = {

62 success(message) {

63 console.log(chalk.green(`\u2713 ${message}`));

64 },

65 error(message) {

66 console.log(chalk.red(`\u2717 ${message}`));

67 },

68 info(message) {

69 console.log(chalk.blue(message));

70 },

71 warn(message) {

72 console.log(chalk.yellow(message));

73 }

74};

76// src/services/project-creator.ts

77import { execa } from "execa";

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L76

79// src/utils/package-manager.ts

80function getPackageManagerCommand(packageManager) {

81 switch (packageManager) {

82 case "npm":

83 return {

84 command: "npm",

85 installArgs: ["install"],

86 dlxCommand: "npx",

87 dlxArgs: ["--yes"]

88 };

89 case "pnpm":

90 return {

91 command: "pnpm",

92 installArgs: ["add"],

93 dlxCommand: "pnpm",

94 dlxArgs: ["dlx"]

95 };

96 case "bun":

Lines 451-491javascript

451 const pm = getPackageManagerCommand(this.options.packageManager);

452 const deps = [];

453 if (this.options.zustand) {

454 deps.push("zustand");

455 }

456 if (this.options.tanstackQuery) {