registry / next-modular / 1.1.1

next-modular@1.1.1

> Under development, contributions welcome.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemShell

Supply chain

HighEntropyStrings

Manifest

NoLicense

scanned 15 file(s), 57.9 KB of source

Source & flagged code

2 flagged

cli/commands/init.mjsView file

Lines 1-25javascript

1import fs from 'fs';

2import path from 'path';

3import inquirer from 'inquirer';

4import chalk from 'chalk';

5import ora from 'ora';

6import { execSync } from 'child_process';

High

Child Process

Package source references child process execution.

cli/commands/init.mjsView on unpkg · L5

8async function init(options) {

9 console.log(chalk.cyan.bold('\n🚀 Next Modular Initialization\n'));

11 const targetDir = path.resolve(process.cwd(), options.directory);

13 // Check if it's a Next.js project

14 const packageJsonPath = path.join(targetDir, 'package.json');

15 if (!fs.existsSync(packageJsonPath)) {

16 console.log(chalk.red('❌ package.json not found. Are you in a Next.js project?'));

17 process.exit(1);

18 }

20 const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

21 const hasNext = packageJson.dependencies?.next || packageJson.devDependencies?.next;

23 if (!hasNext) {

24 console.log(chalk.yellow('⚠️ Warning: Next.js not found in dependencies'));

Lines 263-303javascript

263 fs.writeFileSync(path.join(modulesDir, '.gitkeep'), '');

264 spinner.succeed('Created modules directory');

265 spinner.start();

266 }

267

268 spinner.succeed('Next Modular setup complete!');

269

270 // Install next-modular package

271 spinner.start

Source & flagged code

2 flagged · loading source

cli/commands/init.mjsView file

5import ora from 'ora'; L6: import { execSync } from 'child_process'; L7:

High

Child Process

Package source references child process execution.

cli/commands/init.mjsView on unpkg · L5

283const installCmd = packageManager === 'npm' L284: ? 'npm install next-modular' L285: : packageManager === 'yarn' ... L288: L289: execSync(installCmd, { cwd: targetDir, stdio: 'inherit' }); L290: spinner.succeed('Installed next-modular package');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/commands/init.mjsView on unpkg · L283

Findings

3 High1 Medium4 Low

HighChild Processcli/commands/init.mjs

HighShell

HighRuntime Package Installcli/commands/init.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

Source & flagged code

2 flagged

cli/commands/init.mjsView file

Lines 1-25javascript

1import fs from 'fs';

2import path from 'path';

3import inquirer from 'inquirer';

4import chalk from 'chalk';

5import ora from 'ora';

6import { execSync } from 'child_process';

High

Child Process

Package source references child process execution.

cli/commands/init.mjsView on unpkg · L5

8async function init(options) {

9 console.log(chalk.cyan.bold('\n🚀 Next Modular Initialization\n'));

11 const targetDir = path.resolve(process.cwd(), options.directory);

13 // Check if it's a Next.js project

14 const packageJsonPath = path.join(targetDir, 'package.json');

15 if (!fs.existsSync(packageJsonPath)) {

16 console.log(chalk.red('❌ package.json not found. Are you in a Next.js project?'));

17 process.exit(1);

18 }

20 const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

21 const hasNext = packageJson.dependencies?.next || packageJson.devDependencies?.next;

23 if (!hasNext) {

24 console.log(chalk.yellow('⚠️ Warning: Next.js not found in dependencies'));

Lines 263-303javascript

263 fs.writeFileSync(path.join(modulesDir, '.gitkeep'), '');

264 spinner.succeed('Created modules directory');

265 spinner.start();

266 }

267

268 spinner.succeed('Next Modular setup complete!');

269

270 // Install next-modular package

271 spinner.start