registry / tensorlake / 0.5.131

tensorlake@0.5.131

⚠ Under review

TensorLake SDK for applications, sandboxes, and cloud services

Static Scan Results

scanned 27d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 1.87 MB of source, external domains: api.tensorlake.ai, sandbox.tensorlake.ai, tensorlake.ai

Source & flagged code

3 flagged

dist/index.jsView file

Lines 6930-6970javascript

6930});

6931

6932// src/index.ts

6933init_esm_shims();

6934init_client();

6935init_sandbox();

6936init_sandbox();

6937init_desktop();

6938init_tunnel();

6939init_cloud_client();

6940

6941// src/api-client.ts

6942init_esm_shims();

6943init_cloud_client();

6944

6945// src/filesystem.ts

6946init_esm_shims();

6947import { randomBytes } from "crypto";

6948

6949// src/mount-cli.ts

6950init_esm_shims();

6951import { execFile } from "child_process";

6952import { accessSync, constants } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L6950

6953import { homedir } from "os";

6954import { join } from "path";

6955import { promisify } from "util";

6956

6957// src/filesystem-models.ts

6958init_esm_shims();

6959var GIT_MODE_DIR = 16384;

6960var GIT_MODE_SYMLINK = 40960;

6961function trimSlashes(path4) {

6962 let start = 0;

6963 let end = path4.length;

6964 while (start < end && path4.charCodeAt(start) === 47) start += 1;

6965 while (end > start && path4.charCodeAt(end - 1) === 47) end -= 1;

6966 return path4.slice(start, end);

6967}

6968function fileEntryFromWire(entry, dirPath) {

6969 const mode = entry.mode ?? 33188;

6970 const prefix = trimSlashes(dirPath);

bin/tensorlake-deploy.cjsView file

Lines 1-9javascript

1#!/usr/bin/env node

3const { runPythonModule } = require("../lib/runtime.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/tensorlake-deploy.cjsView on unpkg · L2

5runPythonModule(

6 "tensorlake.cli.deploy"

dist/applications/index.cjsView file

Lines 32-72javascript

32 mod

33));

34var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

36// node_modules/tsup/assets/cjs_shims.js

Source & flagged code

3 flagged · loading source

dist/index.jsView file

tensorlake@0.5.131

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code