registry / tensorlake / 0.5.143

tensorlake@0.5.143

⚠ Under review

TensorLake SDK for applications, sandboxes, and cloud services

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 1.88 MB of source, external domains: api.tensorlake.ai, sandbox.tensorlake.ai, tensorlake.ai

Source & flagged code

4 flagged

dist/index.jsView file

Lines 7029-7069javascript

7029

7030// src/index.ts

7031init_esm_shims();

7032init_client();

7033init_sandbox();

7034init_pending_sandbox();

7035init_sandbox();

7036init_desktop();

7037init_tunnel();

7038init_cloud_client();

7039

7040// src/api-client.ts

7041init_esm_shims();

7042init_cloud_client();

7043

7044// src/filesystem.ts

7045init_esm_shims();

7046import { randomBytes } from "crypto";

7047

7048// src/mount-cli.ts

7049init_esm_shims();

7050import { execFile } from "child_process";

7051import { accessSync, constants } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L7049

7052import { homedir } from "os";

7053import { join } from "path";

7054import { promisify } from "util";

7055

7056// src/filesystem-models.ts

7057init_esm_shims();

7058var GIT_MODE_DIR = 16384;

7059var GIT_MODE_SYMLINK = 40960;

7060function trimSlashes(path4) {

7061 let start = 0;

7062 let end = path4.length;

7063 while (start < end && path4.charCodeAt(start) === 47) start += 1;

7064 while (end > start && path4.charCodeAt(end - 1) === 47) end -= 1;

7065 return path4.slice(start, end);

7066}

7067function fileEntryFromWire(entry, dirPath) {

7068 const mode = entry.mode ?? 33188;

7069 const prefix = trimSlashes(dirPath);

bin/tensorlake-deploy.cjsView file

Lines 1-9javascript

1#!/usr/bin/env node

3const { runPythonModule } = require("../lib/runtime.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/tensorlake-deploy.cjsView on unpkg · L2

5runPythonModule(

6 "tensorlake.cli.deploy"

dist/applications/index.cjsView file

Lines 32-72javascript

32 mod

33));

34var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

36// node_modules/tsup/assets/cjs_shims.js

Source & flagged code

4 flagged · loading source

dist/index.jsView file

tensorlake@0.5.143

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code