registry / tensorlake / 0.5.130

tensorlake@0.5.130

⚠ Under review

TensorLake SDK for applications, sandboxes, and cloud services

Static Scan Results

scanned 28d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 1.87 MB of source, external domains: api.tensorlake.ai, sandbox.tensorlake.ai, tensorlake.ai

Source & flagged code

3 flagged

dist/index.jsView file

Lines 6925-6965javascript

6925});

6926

6927// src/index.ts

6928init_esm_shims();

6929init_client();

6930init_sandbox();

6931init_sandbox();

6932init_desktop();

6933init_tunnel();

6934init_cloud_client();

6935

6936// src/api-client.ts

6937init_esm_shims();

6938init_cloud_client();

6939

6940// src/filesystem.ts

6941init_esm_shims();

6942import { randomBytes } from "crypto";

6943

6944// src/mount-cli.ts

6945init_esm_shims();

6946import { execFile } from "child_process";

6947import { accessSync, constants } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L6945

6948import { homedir } from "os";

6949import { join } from "path";

6950import { promisify } from "util";

6951

6952// src/filesystem-models.ts

6953init_esm_shims();

6954var GIT_MODE_DIR = 16384;

6955var GIT_MODE_SYMLINK = 40960;

6956function trimSlashes(path4) {

6957 let start = 0;

6958 let end = path4.length;

6959 while (start < end && path4.charCodeAt(start) === 47) start += 1;

6960 while (end > start && path4.charCodeAt(end - 1) === 47) end -= 1;

6961 return path4.slice(start, end);

6962}

6963function fileEntryFromWire(entry, dirPath) {

6964 const mode = entry.mode ?? 33188;

6965 const prefix = trimSlashes(dirPath);

bin/tensorlake-deploy.cjsView file

Lines 1-9javascript

1#!/usr/bin/env node

3const { runPythonModule } = require("../lib/runtime.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/tensorlake-deploy.cjsView on unpkg · L2

5runPythonModule(

6 "tensorlake.cli.deploy"

dist/applications/index.cjsView file

Lines 32-72javascript

32 mod

33));

34var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

36// node_modules/tsup/assets/cjs_shims.js

Source & flagged code

3 flagged · loading source

dist/index.jsView file

tensorlake@0.5.130

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code