registry / haraps / 1.0.2

haraps@1.0.2

NPM package to scaffold standard development environment, deployment scripts, AGENTS.md guidelines, and core workflows for a Next.js frontend + Rust Cloudflare Worker backend.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 17.2 KB of source

Source & flagged code

3 flagged

bin/index.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

3const fs = require('fs');

4const path = require('path');

5const { execSync } = require('child_process');

High

Child Process

Package source references child process execution.

bin/index.jsView on unpkg · L4

7console.log('🚀 Scaffold Project Environment (Hara-XY) 🚀');

9function ensureDir(dir) {

10 if (!fs.existsSync(dir)) {

11 fs.mkdirSync(dir, { recursive: true });

12 }

13}

15function writeFile(filePath, content) {

16 const fullPath = path.resolve(process.cwd(), filePath);

17 ensureDir(path.dirname(fullPath));

18 fs.writeFileSync(fullPath, content.trim() + '\n', 'utf8');

19 console.log(`✅ Created: ${filePath}`);

20}

22// 1. Dev Scripts

23writeFile('dev.sh', `

24#!/usr/bin/env bash

Lines 112-153javascript

112

113function createStreamHandler(isError, source) {

114 let remainder = '';

115 return (d) => {

116 const chunk

Source & flagged code

3 flagged · loading source

bin/index.jsView file

4const path = require('path'); L5: const { execSync } = require('child_process'); L6:

High

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code