registry / stormfetch / 1.1.0

stormfetch@1.1.0

A typed HTTP client for browser, Node.js, SSR, and server applications.

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEvalNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 72.8 KB of source

Source & flagged code

2 flagged

dist/esm/index.jsView file

Lines 259-299javascript

259 const abort = isAbortError(cause);

260 const known = cause && typeof cause === "object" && cause.name === "StormFetchError";

261 if (known) {

262 throw cause;

263 }

264 throw createStormFetchError({

265 message: didTimeout() ? "Request timed out" : abort ? "Request aborted" : "Network request failed",

266 config,

267 requestId,

268 duration,

269 cause,

270 isNetworkError: !abort && !didTimeout(),

271 isTimeoutError: didTimeout(),

272 isAbortError: abort

273 });

274 } finally {

275 cleanup();

276 }

277};

278

279// src/lib/stormfetch/adapters/httpAdapter.ts

280var dynamicImport = (specifier) => new Function("specifier", "return import(specifier)")(specifier);

281var toArrayBuffer = (buffer) => new Uint8Array(buffer).buffer;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/esm/index.jsView on unpkg · L279

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/esm/index.jsView on unpkg · L279

282var bufferFrom = async (value) => {

283 if (value === void 0 || value === null) return void 0;

284 if (typeof value === "object" && typeof value.pipe === "function") return void 0;

285 if (value instanceof ArrayBuffer) return new Uint8Array(value);

286 if (ArrayBuffer.isView(value)) return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);

287 if (value instanceof Blob) return new Uint8Array(await value.arrayBuffer());

288 const BufferCtor = globalThis.Buffer;

289 if (BufferCtor) return BufferCtor.from(value);

290 return new TextEncoder().encode(String(value));

291};

292var responseHeadersToHeaders = (headers) => {

293 const result = new Headers();

294 for (const [key, value] of Object.entries(headers)) {

295 if (Array.isArray(value)) {

296 value.forEach((item) => result.append(key, item));

297 } else if (value !== void 0) {

298 result.set(key, value);

299 }

Source & flagged code

2 flagged · loading source

dist/esm/index.jsView file

279// [redacted].ts L280: var dynamicImport = (specifier) => new Function("specifier", "return import(specifier)")(specifier); L281: var toArrayBuffer = (buffer) => new Uint8Array(buffer).buffer;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/esm/index.jsView on unpkg · L279

279// [redacted].ts L280: var dynamicImport = (specifier) => new Function("specifier", "return import(specifier)")(specifier); L281: var toArrayBuffer = (buffer) => new Uint8Array(buffer).buffer;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/esm/index.jsView on unpkg · L279

Findings

2 Medium3 Low

MediumDynamic Requiredist/esm/index.js

MediumNetwork

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/esm/index.js

Source & flagged code

2 flagged

dist/esm/index.jsView file

Lines 259-299javascript

259 const abort = isAbortError(cause);

260 const known = cause && typeof cause === "object" && cause.name === "StormFetchError";

261 if (known) {

262 throw cause;

263 }

264 throw createStormFetchError({

265 message: didTimeout() ? "Request timed out" : abort ? "Request aborted" : "Network request failed",

266 config,

267 requestId,

268 duration,

269 cause,

270 isNetworkError: !abort && !didTimeout(),

271 isTimeoutError: didTimeout(),

272 isAbortError: abort

273 });

274 } finally {

275 cleanup();

276 }

277};

278

279// src/lib/stormfetch/adapters/httpAdapter.ts

280var dynamicImport = (specifier) => new Function("specifier", "return import(specifier)")(specifier);

281var toArrayBuffer = (buffer) => new Uint8Array(buffer).buffer;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/esm/index.jsView on unpkg · L279

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/esm/index.jsView on unpkg · L279

282var bufferFrom = async (value) => {

283 if (value === void 0 || value === null) return void 0;

284 if (typeof value === "object" && typeof value.pipe === "function") return void 0;

285 if (value instanceof ArrayBuffer) return new Uint8Array(value);

286 if (ArrayBuffer.isView(value)) return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);

287 if (value instanceof Blob) return new Uint8Array(await value.arrayBuffer());

288 const BufferCtor = globalThis.Buffer;

289 if (BufferCtor) return BufferCtor.from(value);

290 return new TextEncoder().encode(String(value));

291};

292var responseHeadersToHeaders = (headers) => {

293 const result = new Headers();

294 for (const [key, value] of Object.entries(headers)) {

295 if (Array.isArray(value)) {

296 value.forEach((item) => result.append(key, item));

297 } else if (value !== void 0) {

298 result.set(key, value);

299 }