jsql-neo@4.4.0: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

jsql-neo@4.4.0: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/jsql-server-control.jsView file

4L5: const fs = require('fs'); L6: const os = require('os');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/jsql-server-control.jsView on unpkg · L4

lib/mysql_server.jsView file

6L7: const net = require('net'); L8: const crypto = require('crypto'); ... L34: if (typeof value === 'bigint') value = Number(value); L35: if (value === null) return Buffer.from([0xfb]); L36: if (value < 0xfb) return Buffer.from([value]); ... L416: this.sequence = (this.sequence + 1) & 0xff; L417: this.socket.write(Buffer.concat([header, payload])); L418: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/mysql_server.jsView on unpkg · L6

native/jsql-neo-native.nodeView file

•path = native/jsql-neo-native.node kind = native_binary sizeBytes = 1256280 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/jsql-neo-native.nodeView on unpkg

wasm/jsql_neo_wasm_bg.wasmView file

•path = wasm/jsql_neo_wasm_bg.wasm kind = wasm_module sizeBytes = 343705 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/jsql_neo_wasm_bg.wasmView on unpkg

lib/client.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = jsql-neo@2.1.0 matchedIdentity = npm:anNxbC1uZW8:2.1.0 similarity = 0.375 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/client.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 19-59json

19 "./package.json": "./package.json"

20 },

21 "bin": {

22 "jsql": "./bin/jsql"

23 },

24 "files": [

25 "index.js",

26 "index.d.ts",

27 "lib/",

28 "bin/",

29 "wasm/",

30 "native/",

31 "nativesrc/",

32 "!nativesrc/**/target/",

33 "postinstall.js",

34 "test/",

35 "README.md",

36 "LICENSE"

37 ],

38 "scripts": {

39 "postinstall": "node postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L39

40 "test": "node test/smoke.js",

41 "test:orms": "node examples/orms/run-all.js"

42 },

43 "keywords": [

44 "database",

45 "sql",

46 "embedded",

47 "rust",

48 "wasm",

49 "json",

50 "javascript",

51 "jsql",

52 "nosql",

53 "rest-api",

54 "high-performance"

55 ],

56 "author": "Vexify",

57 "license": "Apache-2.0",

58 "repository": {

59 "type": "git",

bin/jsql-server-control.jsView file

Lines 1-24javascript

1// © Vexify 2026 All Rights Reserved.

2// jsql server start/stop/status — 后台常驻服务控制（对标 `net mysql80 start`）。

3// 状态文件放在 ~/.jsql/ 下：server.pid / server.log / server.json（保存启动配置）。

4

5const fs = require('fs');

6const os = require

lib/mysql_server.jsView file

Lines 1-26javascript

1// © Vexify 2026 All Rights Reserved.

2/**

3 * MySQL 协议服务端 — TCP 3306

4 * 实现 MySQL 握手/认证/命令循环，任何 mysql/mysql2 客户端可直接连接。

5 */

6

7const net = require('net');

8const crypto

native/jsql-neo-native.nodeView file

•path = native/jsql-neo-native.node kind = native_binary sizeBytes = 1256280 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/jsql-neo-native.nodeView on unpkg

wasm/jsql_neo_wasm_bg.wasmView file

•path = wasm/jsql_neo_wasm_bg.wasm kind = wasm_module sizeBytes = 343705 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/jsql_neo_wasm_bg.wasmView on unpkg

lib/client.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = jsql-neo@2.1.0 matchedIdentity = npm:anNxbC1uZW8:2.1.0 similarity = 0.375 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/client.jsView on unpkg