registry / nxdom-cli / 1.0.17

nxdom-cli@1.0.17

Nxdom CLI — Nusantara eXtreme Development Object Model

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 44 file(s), 613 KB of source, external domains: 192.168.1.10, api.anthropic.com, api.cerebras.ai, api.deepseek.com, api.fireworks.ai, api.github.com, api.groq.com, api.mistral.ai, api.moonshot.ai, api.openai.com, api.perplexity.ai, api.siliconflow.com, api.together.xyz, api.x.ai, dashscope-intl.aliyuncs.com, generativelanguage.googleapis.com, github.com, integrate.api.nvidia.com, openrouter.ai, raw.githubusercontent.com

Source & flagged code

6 flagged

src/services/webInstall.jsView file

Lines 1-22javascript

1import fs from "node:fs/promises";

2import path from "node:path";

3import { spawn } from "node:child_process";

4import chalk from "chalk";

High

Child Process

Package source references child process execution.

src/services/webInstall.jsView on unpkg · L2

5import { CANCEL } from "../prompts/searchCancelable.js";

6import { promptInputCancelable } from "../prompts/inputCancelable.js";

7import { promptConfirmCancelable } from "../prompts/confirmCancelable.js";

8import { UI_PAD, uiRuleTerminal } from "../banner.js";

9import {

10 terminalColumns,

11 wrapWithPrefix,

12} from "../terminalUi.js";

13import { createProgressUi } from "../progressUi.js";

14import { localRuntimeRoot } from "./source.js";

15import { resolveRuntimeSource } from "./runtimeSource.js";

16import { installModule } from "./install.js";

17import { readRegistry } from "./registry.js";

18import {

19 APP_RUNTIME_DEFAULTS_WEB,

20 readAppRuntimeDefaultsFromFile,

21 promptAppRuntimeSettings,

22 printAppRuntimeLines,

src/services/mobileInstall.jsView file

Lines 528-568javascript

528 }

529 }

530 await fs.rm(absPath, { recursive: true, force: true });

531 if (onFile) onFile();

532}

533

534async

src/services/mobileBarrel.jsView file

Lines 192-232javascript

192 imports: `import Properti, { properti } from "./Properti/Properti.js";`,

193 names: ["Properti", "properti"],

194 },

195};

196

197/** Hindari warning Node ke stderr saat progress bar aktif (merusak TUI). */

198async function

src/services/runtimeSource.jsView file

Lines 4-44javascript

4import { createHash } from "node:crypto";

5import { githubHeaders, resolveRepoConfig } from "./github.js";

6import { isLocalModulesSource, localRuntimeRoot } from "./source.js";

8export const

src/services/assistantSettings.jsView file

Lines 1-30javascript

1import fs from "node:fs/promises";

2import os from "node:os";

3import path from "node:path";

4import { toAnthropicTools, toOpenAITools } from "./assistantTools.js";

Source & flagged code

6 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code