jetc: Suspicious npm security report (Warn)

package.jsonView file

•scripts.postinstall = node postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/run.jsView file

1#!/usr/bin/env node L2: const a=require("fs"),d=require("path"),{parse:e}=require("jeti"),f=d.join(process.cwd(),process.argv[2]);function g(){var b=null;try{let c=a.readFileSync(f,"utf8"),h="(function() ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

bin/run.jsView on unpkg · L1

jetc@0.7.2

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code