Loading npm security reports…

@baasix/baasix@0.1.82: Clean npm security report (Allow) | LPM Firewall

registry / @baasix/baasix / 0.1.82

@baasix/baasix@0.1.82

Baasix - Backend-as-a-Service with 40+ tools for schema management, CRUD operations with 50+ filter operators, relationships, permissions, files, workflows, and more

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 252 file(s), 8.18 MB of source, external domains: accounts.google.com, api.example.com, api.github.com, appleid.apple.com, cdnjs.cloudflare.com, example.com, github.com, graph.facebook.com, leafletjs.com, nextjs.org, oauth2.googleapis.com, prettier.io, prosemirror.net, radix-ui.com, react.dev, reactflow.dev, reactjs.org, socket.io, tile.openstreetmap.org, unpkg.com, www.facebook.com, www.googleapis.com, www.googletagmanager.com, www.openstreetmap.org, www.w3.org, your-domain.com

Source & flagged code

5 flagged

dist/services/WorkflowService.jsView file

Lines 502-542javascript

502 try {

503 if (transformType === "script") {

504 // Execute JavaScript transformation

505 return this.executeTransformScript(script, context);

506 }

507 else if (transformType === "mapping") {

508 // Apply field mapping

509 return this.applyFieldMapping(mapping, context);

510 }

511 throw new Error(`Unknown transform type: ${transformType}`);

512 }

513 catch (error) {

514 throw new Error(`Transform failed: ${error.message}`);

515 }

516 }

517 /**

518 * Execute JavaScript transformation script

519 */

520 executeTransformScript(script, context) {

521 try {

522 // Create a safe execution context

523 const func = new Function("context", "data", "trigger", "outputs", "loop", "variables", "error", script);

524 return func(context, context.outputs[Object.keys(context.outputs).pop() || ""], // Last output

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/services/WorkflowService.jsView on unpkg · L522

525 context.trigger, context.outputs, context.loop || null, // Loop context (null if not in a loop)

526 context.variables || {}, context.error || null // Error context (null if not in catch block)

527 );

528 }

529 catch (error) {

530 throw new Error(`Script execution failed: ${error.message}`);

531 }

532 }

533 /**

534 * Apply field mapping transformation

535 */

536 applyFieldMapping(mapping, context) {

537 const result = {};

538 const lastOutput = context.outputs[Object.keys(context.outputs).pop() || ""];

539 for (const [targetField, sourceExpression] of Object.entries(mapping)) {

540 result[targetField] = this.evaluateExpression(sourceExpression, context, lastOutput);

541 }

542 return result;

dist/app/_next/static/chunks/3490-aa6bd89b5fe1a920.jsView file

Lines 1-1javascript

1"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3490],{83434:function(t,e,s){s.d(e,{G:function(){return

dist/services/AssetsService.jsView file

Lines 1-21javascript

1import env from "../utils/env.js";

2import sharp from "sharp";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/services/AssetsService.jsView on unpkg · L1

3import path from "path";

4import

dist/README.mdView file

Lines 59-99markdown

60### Installation

62```bash

63npm install @baasix/sdk

64```

66### Quick Example

68```typescript

69import { createBaasix } from

README.mdView file

Lines 59-99markdown

60### Installation

62```bash

63npm install @baasix/sdk

64```

66### Quick Example

68```typescript

69import { createBaasix } from

Source & flagged code

5 flagged

dist/services/WorkflowService.jsView file

Lines 502-542javascript

502 try {

503 if (transformType === "script") {

504 // Execute JavaScript transformation

505 return this.executeTransformScript(script, context);

506 }

507 else if (transformType === "mapping") {

508 // Apply field mapping

509 return this.applyFieldMapping(mapping, context);

510 }

511 throw new Error(`Unknown transform type: ${transformType}`);

512 }

513 catch (error) {

514 throw new Error(`Transform failed: ${error.message}`);

515 }

516 }

517 /**

518 * Execute JavaScript transformation script

519 */

520 executeTransformScript(script, context) {

521 try {

522 // Create a safe execution context

523 const func = new Function("context", "data", "trigger", "outputs", "loop", "variables", "error", script);

524 return func(context, context.outputs[Object.keys(context.outputs).pop() || ""], // Last output

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/services/WorkflowService.jsView on unpkg · L522

525 context.trigger, context.outputs, context.loop || null, // Loop context (null if not in a loop)

526 context.variables || {}, context.error || null // Error context (null if not in catch block)

527 );

528 }

529 catch (error) {

530 throw new Error(`Script execution failed: ${error.message}`);

531 }

532 }

533 /**

534 * Apply field mapping transformation

535 */

536 applyFieldMapping(mapping, context) {

537 const result = {};

538 const lastOutput = context.outputs[Object.keys(context.outputs).pop() || ""];

539 for (const [targetField, sourceExpression] of Object.entries(mapping)) {

540 result[targetField] = this.evaluateExpression(sourceExpression, context, lastOutput);

541 }

542 return result;

dist/app/_next/static/chunks/3490-aa6bd89b5fe1a920.jsView file

Lines 1-1javascript

1"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3490],{83434:function(t,e,s){s.d(e,{G:function(){return

dist/services/AssetsService.jsView file

Lines 1-21javascript

1import env from "../utils/env.js";

2import sharp from "sharp";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/services/AssetsService.jsView on unpkg · L1

3import path from "path";

4import

dist/README.mdView file

Lines 59-99markdown

60### Installation

62```bash

63npm install @baasix/sdk

64```

66### Quick Example

68```typescript

69import { createBaasix } from

README.mdView file

Lines 59-99markdown

60### Installation

62```bash

63npm install @baasix/sdk

64```

66### Quick Example

68```typescript

69import { createBaasix } from

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code