registry / @beignet/provider-redis / 0.0.27

@beignet/provider-redis@0.0.27

Redis provider for Beignet - adds cache port using ioredis

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

WildcardDependency

scanned 2 file(s), 30.5 KB of source

Source & flagged code

2 flagged

dist/index.jsView file

Lines 65-105javascript

65 /**

66 * How many times a single command is retried before its promise rejects.

67 * Defaults to 2.

68 */

69 MAX_RETRIES_PER_REQUEST: NumberString.default(DEFAULT_MAX_RETRIES_PER_REQUEST),

70 /**

71 * Connection attempts allowed before startup `connect()` rejects.

72 * Defaults to 3.

73 */

74 CONNECT_MAX_ATTEMPTS: NumberString.default(DEFAULT_CONNECT_MAX_ATTEMPTS),

75});

76function errorMessage(error) {

77 return error instanceof Error ? error.message : String(error);

78}

79function redactConnectionUrl(url) {

80 try {

81 const parsed = new URL(url);

82 if (parsed.username)

83 parsed.username = "redacted";

84 if (parsed.password)

85 parsed.password = "redacted";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L85

86 if (parsed.search)

87 parsed.search = "?redacted";

88 parsed.hash = "";

89 return parsed.toString();

90 }

91 catch {

92 return "[invalid URL]";

93 }

94}

95function reconnectBackoff(attempt) {

96 return Math.min(2 ** attempt * 100, RECONNECT_BACKOFF_CAP_MS);

97}

98async function checkRedisHealth(client) {

99 try {

100 const response = await client.ping();

101 return {

102 ok: true,

103 metadata: { adapter: "redis", response },

104 };

105 }

src/index.tsView file

Lines 158-198typescript

158 */

159export interface RedisProviderPorts {

160 /**

161 * Beignet cache port backed by Redis.

162 */

163 cache: CachePort;

164 /**

165 * Raw ioredis client escape hatch.

166 */

Source & flagged code

2 flagged · loading source

dist/index.jsView file

85patternName = generic_password severity = medium line = 85 matchedText = parsed.p...ed";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L85

src/index.tsView file

178patternName = generic_password severity = medium line = 178 matchedText = if (pars...ed";

Medium

Secret Pattern

Hardcoded password in src/index.ts

src/index.tsView on unpkg · L178

Findings

3 Medium1 Low

MediumSecret Patterndist/index.js

MediumWildcard Dependency

MediumSecret Patternsrc/index.ts

LowScripts Present

Source & flagged code

2 flagged

dist/index.jsView file

Lines 65-105javascript

65 /**

66 * How many times a single command is retried before its promise rejects.

67 * Defaults to 2.

68 */

69 MAX_RETRIES_PER_REQUEST: NumberString.default(DEFAULT_MAX_RETRIES_PER_REQUEST),

70 /**

71 * Connection attempts allowed before startup `connect()` rejects.

72 * Defaults to 3.

73 */

74 CONNECT_MAX_ATTEMPTS: NumberString.default(DEFAULT_CONNECT_MAX_ATTEMPTS),

75});

76function errorMessage(error) {

77 return error instanceof Error ? error.message : String(error);

78}

79function redactConnectionUrl(url) {

80 try {

81 const parsed = new URL(url);

82 if (parsed.username)

83 parsed.username = "redacted";

84 if (parsed.password)

85 parsed.password = "redacted";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L85

86 if (parsed.search)

87 parsed.search = "?redacted";

88 parsed.hash = "";

89 return parsed.toString();

90 }

91 catch {

92 return "[invalid URL]";

93 }

94}

95function reconnectBackoff(attempt) {

96 return Math.min(2 ** attempt * 100, RECONNECT_BACKOFF_CAP_MS);

97}

98async function checkRedisHealth(client) {

99 try {

100 const response = await client.ping();

101 return {

102 ok: true,

103 metadata: { adapter: "redis", response },

104 };

105 }

src/index.tsView file

Lines 158-198typescript

158 */

159export interface RedisProviderPorts {

160 /**

161 * Beignet cache port backed by Redis.

162 */

163 cache: CachePort;

164 /**

165 * Raw ioredis client escape hatch.

166 */