registry  /  @atproto/dev-env  /  0.5.23

@atproto/dev-env@0.5.23

Local development environment helper for atproto development

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 50 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 71 file(s), 356 KB of source, external domains: appview.invalid, blueskyweb.zendesk.com, bsky.public.url, bsky.social, cdn.appview.com, moderator.invalid, ozone.public.url, pds.invalid, www.w3.org

Source & flagged code

44 flagged · loading source
dist/seed/verifications.jsView file
82patternName = generic_password severity = medium line = 82 matchedText = password...ss',
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/seed/verifications.jsView on unpkg · L82
87patternName = generic_password severity = medium line = 87 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L87
92patternName = generic_password severity = medium line = 92 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L92
97patternName = generic_password severity = medium line = 97 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L97
102patternName = generic_password severity = medium line = 102 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L102
107patternName = generic_password severity = medium line = 107 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L107
112patternName = generic_password severity = medium line = 112 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L112
117patternName = generic_password severity = medium line = 117 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L117
122patternName = generic_password severity = medium line = 122 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L122
127patternName = generic_password severity = medium line = 127 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L127
132patternName = generic_password severity = medium line = 132 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L132
137patternName = generic_password severity = medium line = 137 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L137
142patternName = generic_password severity = medium line = 142 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L142
147patternName = generic_password severity = medium line = 147 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/verifications.js

dist/seed/verifications.jsView on unpkg · L147
dist/bsky.jsView file
22const serviceKeypair = cfg.privateKey L23: ? await Secp256k1Keypair.import(cfg.privateKey) L24: : await Secp256k1Keypair.create();
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/bsky.jsView on unpkg · L22
dist/seed/author-feed.jsView file
7patternName = generic_password severity = medium line = 7 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/author-feed.js

dist/seed/author-feed.jsView on unpkg · L7
12patternName = generic_password severity = medium line = 12 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/author-feed.js

dist/seed/author-feed.jsView on unpkg · L12
dist/seed/users-bulk.jsView file
12patternName = generic_password severity = medium line = 12 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in dist/seed/users-bulk.js

dist/seed/users-bulk.jsView on unpkg · L12
dist/seed/follows.jsView file
32patternName = generic_password severity = medium line = 32 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/follows.js

dist/seed/follows.jsView on unpkg · L32
37patternName = generic_password severity = medium line = 37 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/follows.js

dist/seed/follows.jsView on unpkg · L37
42patternName = generic_password severity = medium line = 42 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/follows.js

dist/seed/follows.jsView on unpkg · L42
47patternName = generic_password severity = medium line = 47 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/follows.js

dist/seed/follows.jsView on unpkg · L47
52patternName = generic_password severity = medium line = 52 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/follows.js

dist/seed/follows.jsView on unpkg · L52
dist/seed/users.jsView file
15patternName = generic_password severity = medium line = 15 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/users.js

dist/seed/users.jsView on unpkg · L15
23patternName = generic_password severity = medium line = 23 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/users.js

dist/seed/users.jsView on unpkg · L23
31patternName = generic_password severity = medium line = 31 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/users.js

dist/seed/users.jsView on unpkg · L31
39patternName = generic_password severity = medium line = 39 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/users.js

dist/seed/users.jsView on unpkg · L39
dist/seed/likes.jsView file
7patternName = generic_password severity = medium line = 7 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/likes.js

dist/seed/likes.jsView on unpkg · L7
28patternName = generic_password severity = medium line = 28 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/likes.js

dist/seed/likes.jsView on unpkg · L28
33patternName = generic_password severity = medium line = 33 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/likes.js

dist/seed/likes.jsView on unpkg · L33
dist/seed/quotes.jsView file
7patternName = generic_password severity = medium line = 7 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/quotes.js

dist/seed/quotes.jsView on unpkg · L7
dist/seed/reposts.jsView file
7patternName = generic_password severity = medium line = 7 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/seed/reposts.js

dist/seed/reposts.jsView on unpkg · L7
dist/mock/index.jsView file
53patternName = generic_password severity = medium line = 53 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/mock/index.js

dist/mock/index.jsView on unpkg · L53
58patternName = generic_password severity = medium line = 58 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/mock/index.js

dist/mock/index.jsView on unpkg · L58
63patternName = generic_password severity = medium line = 63 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in dist/mock/index.js

dist/mock/index.jsView on unpkg · L63
src/seed/quotes.tsView file
9patternName = generic_password severity = medium line = 9 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/quotes.ts

src/seed/quotes.tsView on unpkg · L9
src/seed/reposts.tsView file
9patternName = generic_password severity = medium line = 9 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/reposts.ts

src/seed/reposts.tsView on unpkg · L9
src/seed/author-feed.tsView file
9patternName = generic_password severity = medium line = 9 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/author-feed.ts

src/seed/author-feed.tsView on unpkg · L9
14patternName = generic_password severity = medium line = 14 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/author-feed.ts

src/seed/author-feed.tsView on unpkg · L14
src/seed/users-bulk.tsView file
16patternName = generic_password severity = medium line = 16 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in src/seed/users-bulk.ts

src/seed/users-bulk.tsView on unpkg · L16
src/seed/follows.tsView file
35patternName = generic_password severity = medium line = 35 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/follows.ts

src/seed/follows.tsView on unpkg · L35
40patternName = generic_password severity = medium line = 40 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/follows.ts

src/seed/follows.tsView on unpkg · L40
45patternName = generic_password severity = medium line = 45 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/follows.ts

src/seed/follows.tsView on unpkg · L45
50patternName = generic_password severity = medium line = 50 matchedText = password...ss',
Medium
Secret Pattern

Hardcoded password in src/seed/follows.ts

src/seed/follows.tsView on unpkg · L50

Findings

46 Medium4 Low
MediumSecret Patterndist/seed/verifications.js
MediumDynamic Requiredist/bsky.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/verifications.js
MediumSecret Patterndist/seed/author-feed.js
MediumSecret Patterndist/seed/author-feed.js
MediumSecret Patterndist/seed/users-bulk.js
MediumSecret Patterndist/seed/follows.js
MediumSecret Patterndist/seed/follows.js
MediumSecret Patterndist/seed/follows.js
MediumSecret Patterndist/seed/follows.js
MediumSecret Patterndist/seed/follows.js
MediumSecret Patterndist/seed/users.js
MediumSecret Patterndist/seed/users.js
MediumSecret Patterndist/seed/users.js
MediumSecret Patterndist/seed/users.js
MediumSecret Patterndist/seed/likes.js
MediumSecret Patterndist/seed/likes.js
MediumSecret Patterndist/seed/likes.js
MediumSecret Patterndist/seed/quotes.js
MediumSecret Patterndist/seed/reposts.js
MediumSecret Patterndist/mock/index.js
MediumSecret Patterndist/mock/index.js
MediumSecret Patterndist/mock/index.js
MediumSecret Patternsrc/seed/quotes.ts
MediumSecret Patternsrc/seed/reposts.ts
MediumSecret Patternsrc/seed/author-feed.ts
MediumSecret Patternsrc/seed/author-feed.ts
MediumSecret Patternsrc/seed/users-bulk.ts
MediumSecret Patternsrc/seed/follows.ts
MediumSecret Patternsrc/seed/follows.ts
MediumSecret Patternsrc/seed/follows.ts
MediumSecret Patternsrc/seed/follows.ts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings