passEverything is awesome!

Scanned:

@parcel/watcher-linux-x64-musl

A native C++ Node module for querying and subscribing to filesystem events. Used by Parcel 2.

License: Permissive (MIT)

Published:

Visit GitHub

See on npm

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

1 low priority mitigations absent

Threats

Tampering

No evidence of software tampering

Malware

No evidence of malware inclusion

List of software quality issues with the number of affected components.

Policies

Info

Problem

Fortified functions are usually wrappers around standard glibc functions (such as memcpy) which perform boundary checks either at compile time or run time to determine if a memory violation has occurred. The compiler needs additional context to generate such calls (for example, array size that needs to be known at compile time). Because of this, the compiler will virtually never substitute all viable functions with their fortified counterparts in complex programs. However, lack of any fortified functions may indicate that this compiler feature was not used at all.

Prevalence in npm community

0 packages

found in

Top 100

0 packages

found in

Top 1k

63 packages

found in

Top 10k

10.97k packages

in community

Next steps

In GCC, you can enable fortified functions with -D_FORTIFY_SOURCE=2 flag, while using at least -O1 optimization level.

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

@parcel/watcher-linux-x64-musl

SAFE Assessment

Compliance

Security

Threats

SQ18108Detected Linux executable files without any fortified functions.Causes risk: low priority mitigations absenthardening

Problem

Prevalence in npm community

Next steps

Did you know...

SQ18108Detected Linux executable files without any fortified functions.Causes risk: low priority mitigations absenthardening

Problem

Prevalence in npm community

Next steps