registry / @axiom-lattice/pg-stores / 1.0.82

@axiom-lattice/pg-stores@1.0.82

PG stores implementation for Axiom Lattice framework

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 72 file(s), 791 KB of source

Source & flagged code

10 flagged

dist/index.jsView file

Lines 77-117javascript

77 createEvalSuitesTable: () => createEvalSuitesTable,

78 createMcpServerConfigsTable: () => createMcpServerConfigsTable,

79 createMenuItemsTable: () => createMenuItemsTable,

80 createMetricsConfigsTable: () => createMetricsConfigsTable,

81 createPgStoreConfig: () => createPgStoreConfig,

82 createProjectsTable: () => createProjectsTable,

83 createScheduledTasksTable: () => createScheduledTasksTable,

84 createSharedResourcesTable: () => createSharedResourcesTable,

85 createSkillsTable: () => createSkillsTable,

86 createTenantsTable: () => createTenantsTable,

87 createThreadMessageQueueTable: () => createThreadMessageQueueTable,

88 createThreadsTable: () => createThreadsTable,

89 createUsersTable: () => createUsersTable,

90 createWorkflowTrackingTables: () => createWorkflowTrackingTables,

91 createWorkspacesTable: () => createWorkspacesTable,

92 evalMigrations: () => evalMigrations,

93 mapRowToRunStep: () => mapRowToRunStep,

94 mapRowToWorkflowRun: () => mapRowToWorkflowRun,

95 safeParse: () => safeParse

96});

97module.exports = __toCommonJS(index_exports);

98var import_pg23 = require("pg");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L97

100// src/stores/PostgreSQLThreadStore.ts

101var import_pg = require("pg");

102

103// src/migrations/migration.ts

104var MigrationManager = class {

105 constructor(pool) {

106 this.migrations = [];

107 this.pool = pool;

108 }

109 /**

110 * Register a migration

111 */

112 register(migration) {

113 this.migrations.push(migration);

114 this.migrations.sort((a, b) => a.version - b.version);

115 }

116 /**

117 * Initialize migrations table if it doesn't exist

Lines 1233-1273javascript

1233 await this.pool.end();

1234 }

1235 /**

1236 * Ensure store is initialized

1237 */

1238 async ensureInitialized() {

1239 if (!this.initialized) {

1240 await this.initialize();

1241

Lines 1555-1595javascript

1555 }

1556 }

1557 /**

1558 * Map database row to MetricsServerConfigEntry object

1559 * Automatically decrypts apiKey and password if present

1560 */

1561 mapRowToEntry(row) {

1562 const config = typeof row.config === "string" ? JSON.parse(row.config)

dist/index.mjsView file

Lines 1137-1177javascript

1137 await this.pool.end();

1138 }

1139 /**

1140 * Ensure store is initialized

1141 */

1142 async ensureInitialized() {

1143 if (!this.initialized) {

1144 await this

examples/database-config-store.example.tsView file

Lines 10-107typescript

11import {

12 storeLatticeManager,

13 InMemoryDatabaseConfigStore,

14} from '@axiom-lattice/core';

15import type { DatabaseConfig } from '@axiom-lattice/protocols';

17async function exampleInMemory() {

src/stores/PostgreSQLMetricsServerConfigStore.tsView file

416patternName = generic_password severity = medium line = 416 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLMetricsServerConfigStore.ts

src/stores/PostgreSQLMetricsServerConfigStore.tsView on unpkg · L416

src/stores/PostgreSQLDatabaseConfigStore.tsView file

406patternName = generic_password severity = medium line = 406 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLDatabaseConfigStore.ts

src/stores/PostgreSQLDatabaseConfigStore.tsView on unpkg · L406

Source & flagged code

10 flagged · loading source

dist/index.jsView file

1253patternName = generic_password severity = medium line = 1253 matchedText = console....or);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1253

97module.exports = __toCommonJS(index_exports); L98: var import_pg23 = require("pg"); L99:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L97

1575patternName = generic_password severity = medium line = 1575 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L1575

dist/index.mjsView file

1157patternName = generic_password severity = medium line = 1157 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L1157

1479patternName = generic_password severity = medium line = 1479 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L1479

examples/database-config-store.example.tsView file

30patternName = generic_password severity = medium line = 30 matchedText = password... 实现）

Medium

Secret Pattern

Hardcoded password in examples/database-config-store.example.ts

examples/database-config-store.example.tsView on unpkg · L30

73patternName = generic_password severity = medium line = 73 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in examples/database-config-store.example.ts

examples/database-config-store.example.tsView on unpkg · L73

87patternName = generic_password severity = medium line = 87 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in examples/database-config-store.example.ts

examples/database-config-store.example.tsView on unpkg · L87

src/stores/PostgreSQLMetricsServerConfigStore.tsView file

416patternName = generic_password severity = medium line = 416 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLMetricsServerConfigStore.ts

src/stores/PostgreSQLMetricsServerConfigStore.tsView on unpkg · L416

src/stores/PostgreSQLDatabaseConfigStore.tsView file

406patternName = generic_password severity = medium line = 406 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLDatabaseConfigStore.ts

src/stores/PostgreSQLDatabaseConfigStore.tsView on unpkg · L406

Findings

11 Medium3 Low

MediumSecret Patterndist/index.js

MediumDynamic Requiredist/index.js

MediumEnvironment Vars

MediumSecret Patterndist/index.js

MediumSecret Patterndist/index.mjs

MediumSecret Patternexamples/database-config-store.example.ts

MediumSecret Patternsrc/stores/PostgreSQLMetricsServerConfigStore.ts

MediumSecret Patternsrc/stores/PostgreSQLDatabaseConfigStore.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

10 flagged

dist/index.jsView file

Lines 77-117javascript

77 createEvalSuitesTable: () => createEvalSuitesTable,

78 createMcpServerConfigsTable: () => createMcpServerConfigsTable,

79 createMenuItemsTable: () => createMenuItemsTable,

80 createMetricsConfigsTable: () => createMetricsConfigsTable,

81 createPgStoreConfig: () => createPgStoreConfig,

82 createProjectsTable: () => createProjectsTable,

83 createScheduledTasksTable: () => createScheduledTasksTable,

84 createSharedResourcesTable: () => createSharedResourcesTable,

85 createSkillsTable: () => createSkillsTable,

86 createTenantsTable: () => createTenantsTable,

87 createThreadMessageQueueTable: () => createThreadMessageQueueTable,

88 createThreadsTable: () => createThreadsTable,

89 createUsersTable: () => createUsersTable,

90 createWorkflowTrackingTables: () => createWorkflowTrackingTables,

91 createWorkspacesTable: () => createWorkspacesTable,

92 evalMigrations: () => evalMigrations,

93 mapRowToRunStep: () => mapRowToRunStep,

94 mapRowToWorkflowRun: () => mapRowToWorkflowRun,

95 safeParse: () => safeParse

96});

97module.exports = __toCommonJS(index_exports);

98var import_pg23 = require("pg");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L97

100// src/stores/PostgreSQLThreadStore.ts

101var import_pg = require("pg");

102

103// src/migrations/migration.ts

104var MigrationManager = class {

105 constructor(pool) {

106 this.migrations = [];

107 this.pool = pool;

108 }

109 /**

110 * Register a migration

111 */

112 register(migration) {

113 this.migrations.push(migration);

114 this.migrations.sort((a, b) => a.version - b.version);

115 }

116 /**

117 * Initialize migrations table if it doesn't exist

Lines 1233-1273javascript

1233 await this.pool.end();

1234 }

1235 /**

1236 * Ensure store is initialized

1237 */

1238 async ensureInitialized() {

1239 if (!this.initialized) {

1240 await this.initialize();

1241

Lines 1555-1595javascript

1555 }

1556 }

1557 /**

1558 * Map database row to MetricsServerConfigEntry object

1559 * Automatically decrypts apiKey and password if present

1560 */

1561 mapRowToEntry(row) {

1562 const config = typeof row.config === "string" ? JSON.parse(row.config)

dist/index.mjsView file

Lines 1137-1177javascript

1137 await this.pool.end();

1138 }

1139 /**

1140 * Ensure store is initialized

1141 */

1142 async ensureInitialized() {

1143 if (!this.initialized) {

1144 await this

examples/database-config-store.example.tsView file

Lines 10-107typescript

11import {

12 storeLatticeManager,

13 InMemoryDatabaseConfigStore,

14} from '@axiom-lattice/core';

15import type { DatabaseConfig } from '@axiom-lattice/protocols';

17async function exampleInMemory() {

src/stores/PostgreSQLMetricsServerConfigStore.tsView file

416patternName = generic_password severity = medium line = 416 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLMetricsServerConfigStore.ts

src/stores/PostgreSQLMetricsServerConfigStore.tsView on unpkg · L416

src/stores/PostgreSQLDatabaseConfigStore.tsView file

406patternName = generic_password severity = medium line = 406 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLDatabaseConfigStore.ts

src/stores/PostgreSQLDatabaseConfigStore.tsView on unpkg · L406