Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 28, 2024 via pnpm

wasm-grate 0.1.14

Analyzes JS projects for potential WebAssembly migration points.
Package summary
Share
3
issues
2
high severity
meta
2
1
moderate severity
vulnerability
1
2
licenses
15
ISC
9
MIT
Package created
29 Oct 2023
Version published
30 Oct 2023
Maintainers
1
Total deps
24
Direct deps
1
License
ISC

Issues

3

2 high severity issues

high
via: wasm-grate@0.1.14
via: wasm-grate@0.1.14
Collapse
Expand

1 moderate severity issue

moderate
Recommendation: Upgrade to version 0.28.0 or later
via: binary-install@1.1.0
Collapse
Expand

Install Script Usage

β“˜ This section contains AI-generated explanations for this package's install scripts.
     We recommend overviewing the package source files before installing to your project.

The "preinstall" Script

node ./npm/uninstall.js

This script contains a JavaScript function named getBinary(). This function tries to require a JavaScript module './getBinary', execute the function returned by it and return its result. If the './getBinary' is not found or an error occurs, nothing happens due to the empty catch statement. In the second part of the code, the getBinary function is called and, if it returns a result (meaning the function from the module './getBinary' has been executed and returned a result, presumably a binary), an uninstall method on the returned binary is called. This code doesn't directly provide any harmful operations such as stealing sensitive information, gaining root access, or downloading and executing remote code. However, the safety of this script hinges on the content of the './getBinary' module and the returned binary object. If these contain unsafe operations, they could compromise the system. As per the content of the script provided, it is deemed safe.

The "postinstall" Script

node ./npm/install.js

The script simply imports a function named getBinary from a local module, then calls the install() method on the returned object. There is no evidence of malicious intent from this snippet alone. However, the final judgment would require reviewing the content of the getBinary function and the install method.

Licenses

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
15 Packages, Including:
chownr@2.0.0
fs-minipass@2.1.0
fs.realpath@1.0.0
glob@7.2.3
inflight@1.0.6
inherits@2.0.4
minimatch@3.1.2
minipass@3.3.6
minipass@5.0.0
once@1.4.0
rimraf@3.0.2
tar@6.2.1
wasm-grate@0.1.14
wrappy@1.0.2
yallist@4.0.0

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
9 Packages, Including:
axios@0.26.1
balanced-match@1.0.2
binary-install@1.1.0
brace-expansion@1.1.11
concat-map@0.0.1
follow-redirects@1.15.6
minizlib@2.1.2
mkdirp@1.0.4
path-is-absolute@1.0.1
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

1
All Dependencies CSV
β“˜ This is a list of wasm-grate 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
binary-install1.1.04.78 kBMIT
prod
1

Visualizations