swc-project/swc

The security-sensitive surfaces are native dynamic loading, cache filesystem operations, executable configuration, plugins, subprocesses, and release automation. The observations below describe explicit source behavior and trust assumptions, not confirmed vulnerabilities. Correctness risks include panic-based input handling, feature-dependent unfinished APIs, and silent loss of AST context through ordinary serialization. This bounded inspection cannot establish repository-wide absence of other risks or tests.

• SWC_BINARY_PATH loads a caller-selected native module, and compileBundleOptions uses require on configuration paths/module names; both are executable inputs that require caller trust.
  packages/core/src/index.ts#L21-35packages/core/src/spack.ts#L12-22
• Native digest verification establishes equality with the embedded addon, not publisher identity; initialize subsequently passes the materialized pathname to libloading, so trusted installation and filesystem components remain part of the boundary.
  crates/swc_native_addon/src/lib.rs#L1-5bindings/binding_native_addon/src/lib.rs#L78-98crates/swc_native_addon/README.md#L82-85
• On Unix, exact SWC_NATIVE_BINDING_CACHE_SKIP_SECURITY_CHECK=1 bypasses root/ancestor ownership, permission, and symlink checks; private directories and regular-file checks still enforce owner, mode, link count, and O_NOFOLLOW restrictions.
  crates/swc_native_addon/src/platform/unix.rs#L68-101crates/swc_native_addon/src/platform/unix.rs#L186-233
• File APIs read caller paths, .swcrc discovery can traverse parents according to root mode, and source-map handling opens derived map paths; these inspected paths do not implement repository-root confinement.
  bindings/binding_core_node/src/transform.rs#L115-117crates/swc/src/lib.rs#L1407-1420crates/swc/src/lib.rs#L518-558
• MinifyTarget::Json uses expect, assert_eq!, and unwrap for input shape, including the one-file limitation; this is panic-based validation, and the workspace release profile specifies panic='abort'.
  bindings/binding_core_node/src/minify.rs#L40-55Cargo.toml#L157-170
• AST source context is a non-enumerable Symbol property; frozen objects may prevent attachment, and raw Programs fall back to the shared compiler rather than restored context, making object copying/serialization behavior material to later printing.
  packages/core/src/index.ts#L57-95packages/core/src/index.ts#L115-125bindings/binding_core_node/src/print.rs#L31-48
• CLI bundle/lint/minify deliberately panic as unimplemented, and the non-swc_v1 Node bundle task has todo! branches; callers must distinguish advertised command/API names from the active implementation.
  crates/swc_cli_impl/src/commands/bundle.rs#L3-9crates/swc_cli_impl/src/commands/lint.rs#L3-9crates/swc_cli_impl/src/commands/minify.rs#L3-9bindings/binding_core_node/src/bundle.rs#L175-185
• Plugin runtime cache loading explicitly permits trusted compiled modules without verification; privileged automation also has distinct trust gates, including default-branch-only contributor-policy code and author-association checks before the write-enabled Claude job.
  crates/swc_plugin_runner/src/runtime.rs#L60-67.github/workflows/contributor-policy.yml#L14-35.github/workflows/claude.yml#L17-43