registry / @cocreate/server / 1.6.0

@cocreate/server@1.6.0

A dynamic SSL certificate management and generation tool for proxies like NGINX, with a fallback to Node.js SSL termination. It seamlessly integrates HTTP, HTTPS, and ACME protocols to ensure secure, encrypted connections.

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 6 file(s), 41.6 KB of source, external domains: api.ipify.org, icanhazip.com, ifconfig.me, ipinfo.io

Source & flagged code

1 flagged

src/getInfrastructure.jsView file

Lines 1-34javascript

1/********************************************************************************

3 *

4 * This program is free software: you can redistribute it and/or modify

5 * it under the terms of the GNU Affero General Public License as published

6 * by the Free Software Foundation, either version 3 of the License, or

7 * (at your option) any later version.

8 *

9 * This program is distributed in the hope that it will be useful,

Source & flagged code

1 flagged · loading source

src/getInfrastructure.jsView file

14* You should have received a copy of the GNU Affero General Public License L15: * along with this program. If not, see <https://www.gnu.org/licenses/>. L16: ********************************************************************************/ ... L50: if (data) { L51: req.write(data); L52: } ... L75: L76: const doc = JSON.parse(docStr); L77: return { ... L343: // Phase 3: Check Environment Variable Overrides L344: if (process.env.PROVIDER) { L345: return {

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code