Function getUnsafeStatsReason

packages/cli-exec/src/safety.ts:189–214

(stats: {
  mode: number;
  uid: number;
})

 * Reports unsafe ownership or write permissions from filesystem metadata.
 */
export function getUnsafeStatsReason(stats: {
  mode: number;
  uid: number;
}): string | null {
  const getuid = process.geteuid ?? process.getuid;

  if (typeof getuid !== 'function') {
    return null;
  }

  const uid = getuid();

  if ((stats.mode & 0o022) !== 0) {
    if ((stats.mode & 0o002) !== 0) {
      return 'world-writable';
    }

    return 'group-writable';
  }

  if (stats.uid !== uid) {
    return `owned by uid ${stats.uid}, current uid is ${uid}`;
  }

  return null;
}