registry / @arche-cms/cms / 0.1.1

@arche-cms/cms@0.1.1

The main Arche CMS package. Provides a `cms` binary for development, building, code generation, and schema management.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

Manifest

NoLicense

scanned 35 file(s), 85.0 KB of source

Source & flagged code

1 flagged

dist/server/routes/schemas.jsView file

Lines 61-101javascript

61 const schemas = await loadSchemas();

62 const schema = schemas.find((s) => s.type === type && s.slug === slug);

63 if (!schema)

64 return reply.status(404).send({ error: "Schema not found" });

65 return reply.send(schema);

66 }

67 catch (err) {

68 const msg = err instanceof Error ? err.message : "Failed to load schema";

69 return reply.status(500).send({ error: msg });

70 }

71 });

72 // helpers for code generation

73 const FIELD_HELPER_MAP = {

74 text: "text",

75 textarea: "textarea",

76 number: "number",

77 boolean: "boolean",

78 date: "date",

79 datetime: "datetime",

80 email: "email",

81 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/server/routes/schemas.jsView on unpkg · L81

82 url: "url",

83 json: "json",

84 richText: "richText",

85 markdown: "markdown",

86 code: "code",

87 color: "color",

88 media: "media",

89 upload: "upload",

90 select: "select",

91 multiSelect: "multiSelect",

92 radio: "radio",

93 checkbox: "checkbox",

94 relation: "relation",

95 component: "component",

96 dynamicZone: "dynamicZone",

97 slug: "slug",

98 };

99 function serializeValidation(val) {

100 if (!val || Object.keys(val).length === 0)

101 return "";

Source & flagged code

1 flagged · loading source

dist/server/routes/schemas.jsView file

81patternName = generic_password severity = medium line = 81 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/server/routes/schemas.jsView on unpkg · L81

Findings

2 Medium4 Low

MediumSecret Patterndist/server/routes/schemas.js

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

Source & flagged code

1 flagged

dist/server/routes/schemas.jsView file

Lines 61-101javascript

61 const schemas = await loadSchemas();

62 const schema = schemas.find((s) => s.type === type && s.slug === slug);

63 if (!schema)

64 return reply.status(404).send({ error: "Schema not found" });

65 return reply.send(schema);

66 }

67 catch (err) {

68 const msg = err instanceof Error ? err.message : "Failed to load schema";

69 return reply.status(500).send({ error: msg });

70 }

71 });

72 // helpers for code generation

73 const FIELD_HELPER_MAP = {

74 text: "text",

75 textarea: "textarea",

76 number: "number",

77 boolean: "boolean",

78 date: "date",

79 datetime: "datetime",

80 email: "email",

81 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/server/routes/schemas.jsView on unpkg · L81

82 url: "url",

83 json: "json",

84 richText: "richText",

85 markdown: "markdown",

86 code: "code",

87 color: "color",

88 media: "media",

89 upload: "upload",

90 select: "select",

91 multiSelect: "multiSelect",

92 radio: "radio",

93 checkbox: "checkbox",

94 relation: "relation",

95 component: "component",

96 dynamicZone: "dynamicZone",

97 slug: "slug",

98 };

99 function serializeValidation(val) {

100 if (!val || Object.keys(val).length === 0)

101 return "";