registry  /  wirejs-deploy-cdk  /  0.1.195

wirejs-deploy-cdk@0.1.195

> **Experimental:** WireJS is an experimental hobby project and is not production software. For a professionally supported project in a similar spirit, see [AWS Blocks](https://github.com/aws-devtools-labs/aws-blocks), which benefits from lessons and idea

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 15 file(s), 116 KB of source, external domains: docs.aws.amazon.com, token.actions.githubusercontent.com

Source & flagged code

3 flagged · loading source
bin.jsView file
10import copy from 'recursive-copy'; L11: import { execFileSync, execSync } from 'child_process'; L12: import { createInterface } from 'readline/promises';
High
Child Process

Package source references child process execution.

bin.jsView on unpkg · L10
147console.log(`CDK bootstrap not found in ${region}. Bootstrapping now...`); L148: execSync(`npx cdk bootstrap aws://${account}/${region}`, { L149: stdio: 'inherit',
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

bin.jsView on unpkg · L147
184/** L185: * @param {import('readline/promises').Interface} rl L186: * @param {string} prompt
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin.jsView on unpkg · L184

Findings

3 High3 Medium5 Low
HighChild Processbin.js
HighShell
HighRuntime Package Installbin.js
MediumDynamic Requirebin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License