registry / sloth-d2c-node / 0.0.1-beta134

sloth-d2c-node@0.0.1-beta134

转码能力的node服务，需在apps/figma中执行pnpm dev:lib:node，然后再pnpm dev启动调试，

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

Manifest

NoLicense

scanned 12 file(s), 52.3 KB of source, external domains: api.figma.com

Source & flagged code

1 flagged

package.jsonView file

Lines 75-111json

75 "files": [

76 "dist"

77 ],

78 "jest": {

79 "moduleFileExtensions": [

80 "js",

81 "json",

82 "ts"

83 ],

84 "rootDir": "src",

85 "testRegex": ".*\\.spec\\.ts$",

86 "transform": {

87 "^.+\\.(t|j)s$": "ts-jest"

88 },

89 "collectCoverageFrom": [

90 "**/*.(t|j)s"

91 ],

92 "coverageDirectory": "../coverage",

93 "testEnvironment": "node"

94 },

95 "scripts": {

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L95

96 "build": "NODE_ENV=production nest build",

97 "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",

98 "start": "nest start",

99 "dev": "NODE_ENV=development nest start --watch --debug --inspect-brk=localhost:9229",

100 "start:debug": "nest start --debug --watch",

101 "start:prod": "node dist/main",

102 "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",

103 "pm2start": "IS_DOCKER=true pm2-runtime start pm2.config.js --env",

104 "pm2restart": "pm2 restart pm2.config.js",

105 "test": "jest",

106 "test:watch": "jest --watch",

107 "test:cov": "jest --coverage",

108 "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",

109 "test:e2e": "jest --config ./test/jest-e2e.json"

110 }

111}

Source & flagged code

1 flagged · loading source

package.jsonView file

•Runtime dependency names matching Node built-ins: crypto

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

Findings

1 High2 Medium4 Low

HighNode Builtin Dependency Squatpackage.json

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

LowNo License

Source & flagged code

1 flagged

package.jsonView file

Lines 75-111json

75 "files": [

76 "dist"

77 ],

78 "jest": {

79 "moduleFileExtensions": [

80 "js",

81 "json",

82 "ts"

83 ],

84 "rootDir": "src",

85 "testRegex": ".*\\.spec\\.ts$",

86 "transform": {

87 "^.+\\.(t|j)s$": "ts-jest"

88 },

89 "collectCoverageFrom": [

90 "**/*.(t|j)s"

91 ],

92 "coverageDirectory": "../coverage",

93 "testEnvironment": "node"

94 },

95 "scripts": {

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L95

96 "build": "NODE_ENV=production nest build",

97 "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",

98 "start": "nest start",

99 "dev": "NODE_ENV=development nest start --watch --debug --inspect-brk=localhost:9229",

100 "start:debug": "nest start --debug --watch",

101 "start:prod": "node dist/main",

102 "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",

103 "pm2start": "IS_DOCKER=true pm2-runtime start pm2.config.js --env",

104 "pm2restart": "pm2 restart pm2.config.js",

105 "test": "jest",

106 "test:watch": "jest --watch",

107 "test:cov": "jest --coverage",

108 "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",

109 "test:e2e": "jest --config ./test/jest-e2e.json"

110 }

111}