Generated on Apr 28, 2024 via pnpm

Npm

Home

wasm-grate 0.1.15

Analyzes JS projects for potential WebAssembly migration points.

wasm

wasm integration

Package summary

issues

licenses

Package created

29 Oct 2023

Version published

30 Oct 2023

Maintainers

Total deps

Direct deps

License

ISC

Issues

2 high severity issues

high

wasm-grate@0.1.15

Package uses preinstall script: "node ./npm/uninstall.js"

via: wasm-grate@0.1.15

wasm-grate@0.1.15

Package uses postinstall script: "node ./npm/install.js"

via: wasm-grate@0.1.15

Collapse

Expand

1 moderate severity issue

moderate

axios@0.26.1

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 0.28.0 or later

via: binary-install@1.1.0

Collapse

Expand

Install Script Usage

ⓘ This section contains AI-generated explanations for this package's install scripts.
We recommend overviewing the package source files before installing to your project.

The "preinstall" Script

node ./npm/uninstall.js

This script attempts to import a 'getBinary' function from another module/file. Then, it tries to run this function and stores the result in 'binary' variable. Afterwards, if 'binary' exists (i.e., 'getBinary' did not throw an error and returned something truthy), it calls the 'uninstall' method on 'binary'. This script is safe, assuming that the implementation of 'getBinary' and 'binary.uninstall' methods are also safe and do not contain any harmful code or security vulnerabilities.

The "postinstall" Script

node ./npm/install.js

This code is a simple node.js script that requires the getBinary module (which is presumably located in the same directory as this file), and then calls the install method of the object that gets returned. Without further context, there's no way to determine whether the install method causes any dangerous side-effects. But based solely on this code snippet, there are no obvious security vulnerabilities.