registry / simplemdg-dev-cli / 2.8.7

simplemdg-dev-cli@2.8.7

SimpleMDG local development CLI with CF/BTP helpers, CAP helpers, GitLab sync, request trace, and BTP DB Studio.

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 112 file(s), 1.37 MB of source, external domains: 127.0.0.1, api.cf.ap10.hana.ondemand.com, api.cf.ap11.hana.ondemand.com, api.cf.ap20.hana.ondemand.com, api.cf.ap21.hana.ondemand.com, api.cf.br10.hana.ondemand.com, api.cf.ca10.hana.ondemand.com, api.cf.ch20.hana.ondemand.com, api.cf.eu10-004.hana.ondemand.com, api.cf.eu10-005.hana.ondemand.com, api.cf.eu10.hana.ondemand.com, api.cf.eu20-001.hana.ondemand.com, api.cf.eu20-002.hana.ondemand.com, api.cf.eu20.hana.ondemand.com, api.cf.eu30.hana.ondemand.com, api.cf.jp10.hana.ondemand.com, api.cf.sa10.hana.ondemand.com, api.cf.us10-001.hana.ondemand.com, api.cf.us10.hana.ondemand.com, api.cf.us11.hana.ondemand.com, api.cf.us20.hana.ondemand.com, api.cf.us21.hana.ondemand.com, api.cf.xx10.hana.ondemand.com, cap.cloud.sap, docs.cloudfoundry.org, git-scm.com, github.com, gitlab.simplemdg.com

Source & flagged code

5 flagged

dist/core/guide.jsView file

Lines 1-30javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.printUserGuide = printUserGuide;

7exports.openUserGuideInBrowser = openUserGuideInBrowser;

8exports.askRootHelpMode = askRootHelpMode;

9const node_http_1 = __importDefault(require("node:http"));

10const node_path_1 = __importDefault(require("node:path"));

11const node_child_process_1 = require("node:child_process");

12const fs_extra_1 = __importDefault(require("fs-extra"));

High

Child Process

Package source references child process execution.

dist/core/guide.jsView on unpkg · L10

13const chalk_1 = __importDefault(require("chalk"));

14const prompts_1 = __importDefault(require("prompts"));

15const GUIDE_FILE_NAME = "USER_GUIDE.md";

16function getPackageRootPath() {

17 return node_path_1.default.resolve(__dirname, "..", "..");

18}

19async function readGuideMarkdown() {

20 const packageRootPath = getPackageRootPath();

21 const guidePath = node_path_1.default.join(packageRootPath, GUIDE_FILE_NAME);

22 if (await fs_extra_1.default.pathExists(guidePath)) {

23 return fs_extra_1.default.readFile(guidePath, "utf8");

24 }

25 const readmePath = node_path_1.default.join(packageRootPath, "README.md");

26 if (await fs_extra_1.default.pathExists(readmePath)) {

27 return fs_extra_1.default.readFile(readmePath, "utf8");

28 }

29 return `# SimpleMDG Dev CLI\n\nGuide file was not found. Run smdg --help to see command help.`;

30}

dist/core/install.jsView file

Lines 1-28javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod :

dist/core/version-conflict.jsView file

Lines 1-25javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.rememberResolvedOverrideVersions = void 0;

4exports.parseLoadedLocationConflicts = parseLoadedLocationConflicts;

dist/commands/cf.command.jsView file

Lines 2634-2674javascript

2634 const prepareMode = await selectNodeInspectorPrepareMode({ appName: appNames.join(", "), remotePort });

2635 const tunnelProcesses = [];

2636 const

src/core/tooling.tsView file

Lines 1-21typescript

1import { execa } from "execa";

2import chalk from "chalk";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/core/tooling.tsView on unpkg · L1

3import { searchableSelectChoice } from "./prompts";

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code