selenium-cucumber-expert
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
SecuritySecurityscripts/scaffold-selenium-bdd.mjs
MEDIUMSecurityMEDIUM
scripts/scaffold-selenium-bdd.mjs
The code appears intended as a project scaffolder, not malware. However, an unvalidated `--name` can redirect filesystem writes outside the current directory, and the generated `pom.xml` is visibly malformed. Restrict the project name to a safe single directory name, validate package input, and correct the template before use.
Confidence: 99%Severity: 72%
Audit Metadata