node ./lib/install.js
This script appears to be a legitimate installer for a component named fuel-core of the FuelLabs project. The script is written in Node.js and contains detailed in-script documentation explaining its purpose and functionality. It mostly downloads and extracts the latest version of the fuel-core binary if the current version does not match the expected version. Given that the source of download is a reputable GitHub project, the command it runs (to extract the package and move the binaries) isn't arbitrary input but pre-defined, and there are no suspicious activities, we can reasonably conclude the script is safe. However, one needs to be sure only trustworthy versions of fuel-core are published on the referred GitHub project, and the network connection to the project is secure, otherwise the script might unintentionally download and run malware.
@fuel-ts/fuel-core 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.| Name | Version | Size | License | Type | Vulnerabilities |
|---|---|---|---|---|---|
| node-fetch | 2.7.0 | 43.6 kB | MIT | prod | |
| shelljs | 0.8.5 | 56.14 kB | BSD-3-Clause | prod |
