registry / @axiom-lattice/pg-stores / 1.0.85

@axiom-lattice/pg-stores@1.0.85

PG stores implementation for Axiom Lattice framework

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 72 file(s), 829 KB of source

Source & flagged code

10 flagged

dist/index.jsView file

Lines 77-117javascript

77 createEvalSuitesTable: () => createEvalSuitesTable,

78 createMcpServerConfigsTable: () => createMcpServerConfigsTable,

79 createMenuItemsTable: () => createMenuItemsTable,

80 createMetricsConfigsTable: () => createMetricsConfigsTable,

81 createPgStoreConfig: () => createPgStoreConfig,

82 createProjectsTable: () => createProjectsTable,

83 createScheduledTasksTable: () => createScheduledTasksTable,

84 createSharedResourcesTable: () => createSharedResourcesTable,

85 createSkillsTable: () => createSkillsTable,

86 createTenantsTable: () => createTenantsTable,

87 createThreadMessageQueueTable: () => createThreadMessageQueueTable,

88 createThreadsTable: () => createThreadsTable,

89 createUsersTable: () => createUsersTable,

90 createWorkflowTrackingTables: () => createWorkflowTrackingTables,

91 createWorkspacesTable: () => createWorkspacesTable,

92 evalMigrations: () => evalMigrations,

93 mapRowToRunStep: () => mapRowToRunStep,

94 mapRowToWorkflowRun: () => mapRowToWorkflowRun,

95 safeParse: () => safeParse

96});

97module.exports = __toCommonJS(index_exports);

98var import_pg24 = require("pg");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L97

100// src/createPgStoreConfig.ts

101var import_pg21 = require("pg");

102

103// src/migrations/migration.ts

104var MigrationManager = class {

105 constructor(pool) {

106 this.migrations = [];

107 this.pool = pool;

108 }

109 /**

110 * Register a migration.

111 * Duplicate names are rejected immediately (name = identity).

112 * Duplicate versions are allowed (version = ordering only).

113 */

114 register(migration) {

115 const existing = this.migrations.find((m) => m.name === migration.name);

116 if (existing) {

117 throw new Error(

Lines 1299-1339javascript

1299 }

1300 }

1301 /**

1302 * Ensure store is initialized

1303 */

1304 async ensureInitialized() {

1305 if (!this.initialized) {

1306 await this.initialize();

1307 }

1308 }

1309

Lines 1632-1672javascript

1632 }

1633 }

1634 /**

1635 * Map database row to MetricsServerConfigEntry object

1636 * Automatically decrypts apiKey and password if present

1637 */

1638 mapRowToEntry(row) {

1639 const config = typeof row.config === "string" ? JSON.parse(row.config)

dist/index.mjsView file

Lines 1203-1243javascript

1203 }

1204 }

1205 /**

1206 * Ensure store is initialized

1207 */

1208 async ensureInitialized() {

1209 if (!this.initialized) {

1210 await this.initialize();

1211

examples/database-config-store.example.tsView file

Lines 10-107typescript

11import {

12 storeLatticeManager,

13 InMemoryDatabaseConfigStore,

14} from '@axiom-lattice/core';

15import type { DatabaseConfig } from '@axiom-lattice/protocols';

17async function exampleInMemory() {

src/stores/PostgreSQLMetricsServerConfigStore.tsView file

435patternName = generic_password severity = medium line = 435 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLMetricsServerConfigStore.ts

src/stores/PostgreSQLMetricsServerConfigStore.tsView on unpkg · L435

src/stores/PostgreSQLDatabaseConfigStore.tsView file

425patternName = generic_password severity = medium line = 425 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLDatabaseConfigStore.ts

src/stores/PostgreSQLDatabaseConfigStore.tsView on unpkg · L425

Source & flagged code

10 flagged · loading source

dist/index.jsView file

1319patternName = generic_password severity = medium line = 1319 matchedText = console....or);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1319

97module.exports = __toCommonJS(index_exports); L98: var import_pg24 = require("pg"); L99:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L97

1652patternName = generic_password severity = medium line = 1652 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L1652

dist/index.mjsView file

1223patternName = generic_password severity = medium line = 1223 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L1223

1556patternName = generic_password severity = medium line = 1556 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L1556

examples/database-config-store.example.tsView file

30patternName = generic_password severity = medium line = 30 matchedText = password... 实现）

Medium

Secret Pattern

Hardcoded password in examples/database-config-store.example.ts

examples/database-config-store.example.tsView on unpkg · L30

73patternName = generic_password severity = medium line = 73 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in examples/database-config-store.example.ts

examples/database-config-store.example.tsView on unpkg · L73

87patternName = generic_password severity = medium line = 87 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in examples/database-config-store.example.ts

examples/database-config-store.example.tsView on unpkg · L87

src/stores/PostgreSQLMetricsServerConfigStore.tsView file

435patternName = generic_password severity = medium line = 435 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLMetricsServerConfigStore.ts

src/stores/PostgreSQLMetricsServerConfigStore.tsView on unpkg · L435

src/stores/PostgreSQLDatabaseConfigStore.tsView file

425patternName = generic_password severity = medium line = 425 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLDatabaseConfigStore.ts

src/stores/PostgreSQLDatabaseConfigStore.tsView on unpkg · L425

Findings

11 Medium3 Low

MediumSecret Patterndist/index.js

MediumDynamic Requiredist/index.js

MediumEnvironment Vars

MediumSecret Patterndist/index.js

MediumSecret Patterndist/index.mjs

MediumSecret Patternexamples/database-config-store.example.ts

MediumSecret Patternsrc/stores/PostgreSQLMetricsServerConfigStore.ts

MediumSecret Patternsrc/stores/PostgreSQLDatabaseConfigStore.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

10 flagged

dist/index.jsView file

Lines 77-117javascript

77 createEvalSuitesTable: () => createEvalSuitesTable,

78 createMcpServerConfigsTable: () => createMcpServerConfigsTable,

79 createMenuItemsTable: () => createMenuItemsTable,

80 createMetricsConfigsTable: () => createMetricsConfigsTable,

81 createPgStoreConfig: () => createPgStoreConfig,

82 createProjectsTable: () => createProjectsTable,

83 createScheduledTasksTable: () => createScheduledTasksTable,

84 createSharedResourcesTable: () => createSharedResourcesTable,

85 createSkillsTable: () => createSkillsTable,

86 createTenantsTable: () => createTenantsTable,

87 createThreadMessageQueueTable: () => createThreadMessageQueueTable,

88 createThreadsTable: () => createThreadsTable,

89 createUsersTable: () => createUsersTable,

90 createWorkflowTrackingTables: () => createWorkflowTrackingTables,

91 createWorkspacesTable: () => createWorkspacesTable,

92 evalMigrations: () => evalMigrations,

93 mapRowToRunStep: () => mapRowToRunStep,

94 mapRowToWorkflowRun: () => mapRowToWorkflowRun,

95 safeParse: () => safeParse

96});

97module.exports = __toCommonJS(index_exports);

98var import_pg24 = require("pg");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L97

100// src/createPgStoreConfig.ts

101var import_pg21 = require("pg");

102

103// src/migrations/migration.ts

104var MigrationManager = class {

105 constructor(pool) {

106 this.migrations = [];

107 this.pool = pool;

108 }

109 /**

110 * Register a migration.

111 * Duplicate names are rejected immediately (name = identity).

112 * Duplicate versions are allowed (version = ordering only).

113 */

114 register(migration) {

115 const existing = this.migrations.find((m) => m.name === migration.name);

116 if (existing) {

117 throw new Error(

Lines 1299-1339javascript

1299 }

1300 }

1301 /**

1302 * Ensure store is initialized

1303 */

1304 async ensureInitialized() {

1305 if (!this.initialized) {

1306 await this.initialize();

1307 }

1308 }

1309

Lines 1632-1672javascript

1632 }

1633 }

1634 /**

1635 * Map database row to MetricsServerConfigEntry object

1636 * Automatically decrypts apiKey and password if present

1637 */

1638 mapRowToEntry(row) {

1639 const config = typeof row.config === "string" ? JSON.parse(row.config)

dist/index.mjsView file

Lines 1203-1243javascript

1203 }

1204 }

1205 /**

1206 * Ensure store is initialized

1207 */

1208 async ensureInitialized() {

1209 if (!this.initialized) {

1210 await this.initialize();

1211

examples/database-config-store.example.tsView file

Lines 10-107typescript

11import {

12 storeLatticeManager,

13 InMemoryDatabaseConfigStore,

14} from '@axiom-lattice/core';

15import type { DatabaseConfig } from '@axiom-lattice/protocols';

17async function exampleInMemory() {

src/stores/PostgreSQLMetricsServerConfigStore.tsView file

435patternName = generic_password severity = medium line = 435 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLMetricsServerConfigStore.ts

src/stores/PostgreSQLMetricsServerConfigStore.tsView on unpkg · L435

src/stores/PostgreSQLDatabaseConfigStore.tsView file

425patternName = generic_password severity = medium line = 425 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in src/stores/PostgreSQLDatabaseConfigStore.ts

src/stores/PostgreSQLDatabaseConfigStore.tsView on unpkg · L425