openship@0.1.7: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

openship@0.1.7: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged

dist/index.jsView file

Lines 631-671javascript

631 defaultBuildCommand: "mvn clean package -DskipTests",

632 defaultStartCommand: "java -jar target/quarkus-app/quarkus-run.jar",

633 productionPaths: ["target"],

634 defaultBuildStrategy: "local",

635 detection: {

636 rootMarkers: ["pom.xml", "build.gradle", "build.gradle.kts"],

637 deps: ["io.quarkus:quarkus-core", "quarkus"],

638 contentPatterns: {

639 "pom.xml": "io\\.quarkus",

640 "build.gradle": "io\\.quarkus",

641 "build.gradle.kts": "io\\.quarkus"

642 }

643 }

644 },

645 // ── C# / .NET ──────────────────────────────────────────────────────────────

646 dotnet: {

647 name: ".NET",

648 language: "csharp",

649 category: "backend",

650 outputDirectory: "bin/Release/net8.0/publish",

651 defaultPort: 5e3,

652 defaultBuildCommand: "dotnet publish -c Release -o publish",

653 defaultStartCommand: "dotnet publish/app.dll",

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L651

654 productionPaths: ["publish"],

655 detection: {

656 // .csproj/.fsproj/.sln are detected by suffix; rootMarkers is decorative

657 // here since the suffix-match lives in stack-detector.

658 }

659 },

660 blazor: {

661 name: "Blazor",

662 language: "csharp",

663 category: "fullstack",

664 outputDirectory: "bin/Release/net8.0/publish/wwwroot",

665 defaultPort: 5e3,

666 defaultBuildCommand: "dotnet publish -c Release -o publish",

667 defaultStartCommand: "dotnet publish/app.dll",

668 productionPaths: ["publish"],

669 detection: {

670 deps: ["Microsoft.AspNetCore.Components.WebAssembly"]

671 }

Lines 1923-1963javascript

1923 if (!caps.selfHosted) {

1924 throw new ApiError(

1925 "This command is only available on a self-hosted Openship instance, not on Openship Cloud.",

1926 400,

1927 null

1928 );

1929 }

Lines 2058-2143javascript

2058 chalk4.yellow(`

2059 Heads up: the local API at ${apiUrl} isn't responding yet.`) + chalk4.dim("\n Start it with `openship setup`, or use --cloud.\n")

2060 );

2061 }

2062 }

2063 try {

dist/server/pglite/pglite.wasmView file

•path = dist/server/pglite/pglite.wasm kind = wasm_module sizeBytes = 8861740 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/server/pglite/pglite.wasmView on unpkg

dist/server/index.jsView file

•path = dist/server/index.js kind = oversized_source_file sizeBytes = 11552076 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/server/index.jsView on unpkg