registry / @bunnarin/plugin-auth-oidc / 2.0.2

@bunnarin/plugin-auth-oidc@2.0.2

An enhanced OpenID Connect (OIDC) authentication plugin for NocoBase. This plugin extends the default OIDC capabilities with advanced mapping, dynamic binding, and improved compatibility with various identity providers.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkShell

Supply chain

Minified

Manifest

NoLicense

scanned 12 file(s), 41.1 KB of source

Source & flagged code

2 flagged

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•Runtime dependency names matching Node built-ins: zlib

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•Runtime dependency names matching Node built-ins: zlib

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

Findings

1 Critical1 High2 Medium1 Low

CriticalManifest Confusionpackage.json

HighNode Builtin Dependency Squatpackage.json

MediumNetwork

MediumEnvironment Vars

LowNo License