registry / lildocs / 0.1.9

lildocs@0.1.9

A lightweight CLI that turns Markdown docs into a static searchable documentation site.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 6 file(s), 202 KB of source, external domains: fonts.googleapis.com, github.com, lildocs.local, www.w3.org

Source & flagged code

2 flagged

dist/cli.mjsView file

Lines 982-1022javascript

982 font: {

983 heading: "Arial, sans-serif",

984 body: "Arial, sans-serif",

985 code: "Menlo, Consolas, monospace"

986 },

987 shiki: { theme: "github-light" }

988 }

989};

990async function resolveTheme(options) {

991 if (options.requestedTheme) {

992 if (typeof options.requestedTheme === "string") return { light: await resolveThemeName(options.requestedTheme) };

993 return {

994 light: await resolveThemeName(options.requestedTheme.light ?? "default"),

995 dark: await resolveThemeName(options.requestedTheme.dark ?? "github-dark")

996 };

997 }

998 const localThemePath = path.join(options.docsRoot, "theme.ts");

999 if (await exists(localThemePath)) {

1000 const localThemeUrl = pathToFileURL(localThemePath);

1001 const localThemeStats = await stat(localThemePath);

1002 localThemeUrl.searchParams.set("mtime", String(localThemeStats.mtimeMs));

1003 return { light: validateTheme((await import(localThemeUrl.href)).default, localThemePath) };

1004 }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.mjsView on unpkg · L1002

1005 return {

1006 light: themes.default,

1007 dark: await resolveThemeName("github-dark")

1008 };

1009}

1010async function resolveThemeName(themeName) {

1011 const theme = themes[themeName];

1012 if (theme) return theme;

1013 return resolveShikiTheme(themeName);

1014}

1015async function resolveShikiTheme(themeName) {

1016 const themeLoader = bundledThemes[themeName];

1017 if (!themeLoader) throw new LildocsError(`Unknown theme "${themeName}". Use a built-in lildocs theme (${Object.keys(themes).join(", ")}) or a bundled Shiki theme.`);

1018 const themeModule = await themeLoader();

1019 return mapShikiThemeToTheme("default" in themeModule ? themeModule.default : themeModule, themeName);

1020}

1021async function resolveFontOverrides(options) {

1022 const css = [];

•matchType = previous_version_dangerous_delta matchedPackage = lildocs@0.1.1 matchedIdentity = npm:bGlsZG9jcw:0.1.1 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.mjsView on unpkg

Source & flagged code

2 flagged · loading source

dist/cli.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.mjsView on unpkg

1002localThemeUrl.searchParams.set("mtime", String(localThemeStats.mtimeMs)); L1003: return { light: validateTheme((await import(localThemeUrl.href)).default, localThemePath) }; L1004: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.mjsView on unpkg · L1002

Findings

1 High3 Medium5 Low

HighPrevious Version Dangerous Deltadist/cli.mjs

MediumDynamic Requiredist/cli.mjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/cli.mjsView file

Lines 982-1022javascript

982 font: {

983 heading: "Arial, sans-serif",

984 body: "Arial, sans-serif",

985 code: "Menlo, Consolas, monospace"

986 },

987 shiki: { theme: "github-light" }

988 }

989};

990async function resolveTheme(options) {

991 if (options.requestedTheme) {

992 if (typeof options.requestedTheme === "string") return { light: await resolveThemeName(options.requestedTheme) };

993 return {

994 light: await resolveThemeName(options.requestedTheme.light ?? "default"),

995 dark: await resolveThemeName(options.requestedTheme.dark ?? "github-dark")

996 };

997 }

998 const localThemePath = path.join(options.docsRoot, "theme.ts");

999 if (await exists(localThemePath)) {

1000 const localThemeUrl = pathToFileURL(localThemePath);

1001 const localThemeStats = await stat(localThemePath);

1002 localThemeUrl.searchParams.set("mtime", String(localThemeStats.mtimeMs));

1003 return { light: validateTheme((await import(localThemeUrl.href)).default, localThemePath) };

1004 }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.mjsView on unpkg · L1002

1005 return {

1006 light: themes.default,

1007 dark: await resolveThemeName("github-dark")

1008 };

1009}

1010async function resolveThemeName(themeName) {

1011 const theme = themes[themeName];

1012 if (theme) return theme;

1013 return resolveShikiTheme(themeName);

1014}

1015async function resolveShikiTheme(themeName) {

1016 const themeLoader = bundledThemes[themeName];

1017 if (!themeLoader) throw new LildocsError(`Unknown theme "${themeName}". Use a built-in lildocs theme (${Object.keys(themes).join(", ")}) or a bundled Shiki theme.`);

1018 const themeModule = await themeLoader();

1019 return mapShikiThemeToTheme("default" in themeModule ? themeModule.default : themeModule, themeName);

1020}

1021async function resolveFontOverrides(options) {

1022 const css = [];

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.mjsView on unpkg