registry / sino-bc-cli / 1.3.3

sino-bc-cli@1.3.3

⚠ Under review

已废弃，请升级到 1.4.0：npm i sino-bc-cli@latest -g

BeyondClick CLI - 命令行工具集合，提供快捷访问 BeyondClick 平台的命令行接口

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 123 KB of source, external domains: test-agent.beyondclick.com

Source & flagged code

2 flagged

package.jsonView file

Lines 7-47json

7 "sino-bc-cli": "dist/index.js"

8 },

9 "main": "dist/index.js",

10 "types": "./dist/index.d.ts",

11 "files": [

12 "dist/",

13 "README.md",

14 "LICENSE",

15 "scripts/postinstall.cjs"

16 ],

17 "publishConfig": {

18 "access": "public",

19 "registry": "https://registry.npmjs.org/"

20 },

21 "scripts": {

22 "build": "tsc && node --experimental-strip-types scripts/copy-skill.ts",

23 "dev": "ts-node src/index.ts",

24 "start": "node dist/index.js",

25 "clean": "rimraf dist",

26 "rebuild": "npm run clean && npm run build",

27 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "prepublishOnly": "npm run rebuild",

29 "prepack": "npm run build",

30 "release:patch": "npm version patch && npm publish",

31 "release:minor": "npm version minor && npm publish",

32 "release:major": "npm version major && npm publish",

33 "publish:local": "node --experimental-strip-types scripts/publish.ts",

34 "publish:local:dry": "node --experimental-strip-types scripts/publish.ts --dry-run"

35 },

36 "engines": {

37 "node": ">=24.0.0"

38 },

39 "keywords": [

40 "beyondclick",

41 "cli",

42 "command-line",

43 "sino-bc-cli",

44 "sso"

45 ],

46 "author": "BeyondClick",

47 "license": "MIT",

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

sino-bc-cli@1.3.3

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code