registry / taskpace / 1.0.0

taskpace@1.0.0

Distributed task scheduler and rate limiter

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EvalFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 296 KB of source, external domains: github.com

Source & flagged code

2 flagged

es5.jsView file

Lines 2536-2576javascript

2536 var Scripts_4 = Scripts.payload;

2537

2538 var Events$2, RedisConnection, Scripts$1, parser$3;

2539 parser$3 = parser;

2540 Events$2 = Events_1;

2541 Scripts$1 = Scripts;

2542

2543 RedisConnection = function () {

2544 var RedisConnection =

2545 /*#__PURE__*/

2546 function () {

2547 function RedisConnection() {

2548 var _this = this;

2549

2550 var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};

2551

2552 _classCallCheck(this, RedisConnection);

2553

2554 parser$3.load(options, this.defaults, this);

2555

2556 if (this.Redis == null) {

2557 this.Redis = eval("require")("redis"); // Obfuscated or else Webpack/Angular will try to inline the optional redis module. To override this behavior: pass the redis module to Taskpace as the 'Redis' option.

2558 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

es5.jsView on unpkg · L2556

2559

2560 if (this.Events == null) {

2561 this.Events = new Events$2(this);

2562 }

2563

2564 this.terminated = false;

2565

2566 if (this.client == null) {

2567 this.client = this.Redis.createClient(this.clientOptions);

2568 }

2569

2570 this.subscriber = this.client.duplicate();

2571 this.limiters = {};

2572 this.shas = {};

2573 this.ready = this.Promise.all([this._setup(this.client, false), this._setup(this.subscriber, true)]).then(function () {

2574 return _this._loadScripts();

2575 }).then(function () {

2576 return {

scripts/build.shView file

•path = scripts/build.sh kind = build_helper sizeBytes = 1349 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/build.shView on unpkg

Source & flagged code

2 flagged · loading source

es5.jsView file

2556if (this.Redis == null) { L2557: this.Redis = eval("require")("redis"); // Obfuscated or else Webpack/Angular will try to inline the optional redis module. To override this behavior: pass the redis module to Taskp... L2558: }

Low

taskpace@1.0.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code