registry / subtrack / 8.0.1

subtrack@8.0.1

CLI tool to manage subscription services from the terminal

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 377 KB of source, external domains: open.er-api.com, raw.githubusercontent.com

Source & flagged code

1 flagged

dist/index.mjsView file

Lines 983-1023javascript

983 count: entries.length,

984 entries: data

985 }, null, 2) + "\n");

986 return;

987 }

988 if (entries.length === 0) {

989 if (!options.dryRun) return;

990 consola.info(`No upcoming bills in the next ${days} day${days > 1 ? "s" : ""}`);

991 return;

992 }

993 if (options.dryRun) {

994 consola.info(`Upcoming bills (next ${days} day${days > 1 ? "s" : ""}):`);

995 for (const e of entries) {

996 const date = `${e.nextDate.getFullYear()}-${String(e.nextDate.getMonth() + 1).padStart(2, "0")}-${String(e.nextDate.getDate()).padStart(2, "0")}`;

997 consola.log(` ${date} ${e.sub.name} ${formatPrice(e.sub.price, e.sub.currency)}/${e.sub.cycle}`);

998 }

999 return;

1000 }

1001 await sendNotification(entries, days);

1002}

1003async function sendNotification(entries, days) {

1004 const { default: notifier } = await import("node-notifier");

1005 const count = entries.length;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.mjsView on unpkg · L1003

1006 let message;

1007 if (count <= 5) message = entries.map((e) => `${e.sub.name}: ${formatPrice(e.sub.price, e.sub.currency)}/${e.sub.cycle}`).join("\n");

1008 else message = entries.slice(0, 5).map((e) => `${e.sub.name}: ${formatPrice(e.sub.price, e.sub.currency)}/${e.sub.cycle}`).join("\n

1009 notifier.notify({

1010 title: `subtrack: ${count} upcoming bill${count > 1 ? "s" : ""} in ${days} day${days > 1 ? "s" : ""}`,

1011 message,

1012 sound: true,

1013 timeout: 10

1014 });

1015}

1016//#endregion

1017//#region src/timeline.ts

1018/**

1019* Calculate monthly spending totals for the past N months.

1020* Each subscription's monthly cost is: price * periodFactor(cycle, "monthly").

1021* Cancelled subscriptions are excluded. Subscriptions that didn't exist yet

1022* in a given month are excluded from that month's total.

1023*/

Source & flagged code

1 flagged · loading source

dist/index.mjsView file

1003async function sendNotification(entries, days) { L1004: const { default: notifier } = await import("node-notifier"); L1005: const count = entries.length;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.mjsView on unpkg · L1003

Findings

3 Medium4 Low

MediumDynamic Requiredist/index.mjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/index.mjsView file

Lines 983-1023javascript

983 count: entries.length,

984 entries: data

985 }, null, 2) + "\n");

986 return;

987 }

988 if (entries.length === 0) {

989 if (!options.dryRun) return;

990 consola.info(`No upcoming bills in the next ${days} day${days > 1 ? "s" : ""}`);

991 return;

992 }

993 if (options.dryRun) {

994 consola.info(`Upcoming bills (next ${days} day${days > 1 ? "s" : ""}):`);

995 for (const e of entries) {

996 const date = `${e.nextDate.getFullYear()}-${String(e.nextDate.getMonth() + 1).padStart(2, "0")}-${String(e.nextDate.getDate()).padStart(2, "0")}`;

997 consola.log(` ${date} ${e.sub.name} ${formatPrice(e.sub.price, e.sub.currency)}/${e.sub.cycle}`);

998 }

999 return;

1000 }

1001 await sendNotification(entries, days);

1002}

1003async function sendNotification(entries, days) {

1004 const { default: notifier } = await import("node-notifier");

1005 const count = entries.length;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.mjsView on unpkg · L1003

1006 let message;

1007 if (count <= 5) message = entries.map((e) => `${e.sub.name}: ${formatPrice(e.sub.price, e.sub.currency)}/${e.sub.cycle}`).join("\n");

1008 else message = entries.slice(0, 5).map((e) => `${e.sub.name}: ${formatPrice(e.sub.price, e.sub.currency)}/${e.sub.cycle}`).join("\n

1009 notifier.notify({

1010 title: `subtrack: ${count} upcoming bill${count > 1 ? "s" : ""} in ${days} day${days > 1 ? "s" : ""}`,

1011 message,

1012 sound: true,

1013 timeout: 10

1014 });

1015}

1016//#endregion

1017//#region src/timeline.ts

1018/**

1019* Calculate monthly spending totals for the past N months.

1020* Each subscription's monthly cost is: price * periodFactor(cycle, "monthly").

1021* Cancelled subscriptions are excluded. Subscriptions that didn't exist yet

1022* in a given month are excluded from that month's total.

1023*/