lerna/lerna

These are source observations and explicitly labeled hypotheses, not confirmed vulnerabilities. Lerna intentionally executes workspace-controlled commands and writes release artifacts, so trust boundaries include configuration, scripts, Git, and registries. Release operations span several independent systems and are not presented as one atomic transaction. Inspection also found narrow authentication tests and strong coupling to Nx internals.

• exec joins command and arguments into shell-interpreted text, uses shell=true, and copies the parent environment into package processes; callers must treat supplied command text as executable input.
  libs/commands/exec/src/index.ts#L48-70libs/commands/exec/src/index.ts#L122-147
• Configuration can execute code: applyExtends requires resolved modules, changelog presets use require/import and callable builders, and lifecycle scripts run through @npmcli/run-script unless ignored.
  libs/core/src/lib/project/apply-extends.ts#L11-29libs/core/src/lib/conventional-commits/get-changelog-config.ts#L134-170libs/core/src/lib/run-lifecycle.ts#L75-90libs/core/src/lib/run-lifecycle.ts#L132-144
• Publishing deliberately writes archives beneath the system temporary directory, and configured contents/assets influence filesystem destinations; the inspected contents setter uses string-prefix selection and path joining rather than a containment check.
  libs/core/src/lib/temp-write.ts#L11-13libs/core/src/lib/temp-write.ts#L33-43libs/core/src/lib/package.ts#L203-226libs/commands/publish/src/index.ts#L1182-1221
• Publish restoration defaults to enabled, but granularPathspec=false makes gitCheckout target '.'; import failure recovery invokes git am --abort and git reset --hard to the saved HEAD.
  libs/commands/publish/src/index.ts#L155-158libs/core/src/lib/git-checkout.ts#L14-20libs/commands/import/src/index.ts#L307-312
• Hypothesis: a later failure can leave earlier release side effects in place because ordinary publish awaits composed versioning before registry upload, and version executes writes, tags, pushes, and hosted releases sequentially. (inferred)
  libs/commands/publish/src/index.ts#L324-332libs/commands/publish/src/index.ts#L380-400libs/commands/version/src/index.ts#L370-405
• Run and repair import nx/src internal APIs, while publish/version share preinitialized graph data; dependency upgrades therefore affect execution contracts beyond the public @nx/devkit interface.
  libs/commands/run/src/index.ts#L22-23libs/commands/run/src/index.ts#L315-322packages/lerna/src/commands/repair/index.ts#L1-4libs/core/src/lib/command/index.ts#L129-140
• OIDC exchanges identity tokens against the effective registry and suppresses exchange failures before normal publish authentication continues; GitHub acquisition and provenance branches are not exercised by the two cases in the inspected OIDC suite.
  libs/core/src/lib/oidc.ts#L68-99libs/core/src/lib/oidc.ts#L125-146libs/core/src/lib/oidc.ts#L170-193libs/core/src/lib/oidc.spec.ts#L38-69
• Release workflow protections include nonpersisted checkout credentials, a pinned npm registry, disabled remote build cache, serialized releases, environment-scoped Git credentials, and validation of free-text version input; their live environment configuration was not verified.
  .github/workflows/release.yml#L41-70.github/workflows/release.yml#L85-116