+10
-0
@@ -11,2 +11,4 @@ #!/usr/bin/env node | ||
| // src/lib/auth.ts | ||
| import { chmodSync } from "fs"; | ||
| import { dirname } from "path"; | ||
| import Conf from "conf"; | ||
@@ -36,3 +38,11 @@ var config = new Conf({ | ||
| config.set("credentials", credentials); | ||
| hardenPermissions(); | ||
| } | ||
| function hardenPermissions() { | ||
| try { | ||
| chmodSync(config.path, 384); | ||
| chmodSync(dirname(config.path), 448); | ||
| } catch { | ||
| } | ||
| } | ||
| function clearCredentials() { | ||
@@ -39,0 +49,0 @@ config.delete("credentials"); |
+4
-3
| { | ||
| "name": "@pntr/cli", | ||
| "version": "0.3.2", | ||
| "description": "Free developer subdomains, DNS, disposable email, webhook capture, and MCP tools for Claude and Cursor", | ||
| "version": "0.3.3", | ||
| "description": "Free developer subdomains, DNS, catch-all email, webhook capture, and MCP tools for Claude and Cursor", | ||
| "mcpName": "dev.pntr/pntr", | ||
| "type": "module", | ||
@@ -44,3 +45,3 @@ "main": "./dist/index.js", | ||
| "webhook-testing", | ||
| "disposable-email", | ||
| "catch-all-email", | ||
| "email-testing" | ||
@@ -47,0 +48,0 @@ ], |
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
40567
0.61%1000
1.01%6
20%