registry / @communecter/cocolight-api-client / 1.0.156

@communecter/cocolight-api-client@1.0.156

Client Axios simplifié pour l'API cocolight

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 132 file(s), 1.71 MB of source, external domains: json-schema.org, raw.githubusercontent.com

Source & flagged code

3 flagged

dist/cocolight-api-client.browser.jsView file

1/*! For license information please see cocolight-api-client.browser.js.LICENSE.txt */ L2: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.CocolightApi... L3: || (${a} == "string" && ${i} && ${i} == +${i})`).assign(c,s._`+${i}`);case"integer":return void n.elseIf(s._`${a} === "boolean" || ${i} === null

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/cocolight-api-client.browser.jsView on unpkg · L1

README.mdView file

Lines 44-114markdown

44```

45### CommonJS

47```js

48const { ApiClient, Api, tokenStorageStrategy } = require("@communecter/cocolight-api-client").default;

49```

51### 🔗 Intégration via CDN

53Vous pouvez inclure le client directement dans une page HTML :

55```html

56<script src="https://cdn.jsdelivr.net/npm/@communecter/cocolight-api-client@latest/dist/cocolight-api-client.browser.js"></script>

57<script>

58 const client = new CocolightApiClient.ApiClient({

59 baseURL: "https://www.communecter.org"

60 });

62client.callEndpoint("AUTHENTICATE_URL", {

63 email: "EMAIL",

64 password: "PASSWORD"

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L64

65 }).then(res => {

66 const { accessToken, refreshToken, user } = res.data;

67 console.log("✅ Authentifié :", user.username);

68 })

69 .then(() => {

70 return client.callEndpoint("ME_INFO_URL");

71 })

72 .then(res => {

73 console.log("👤 Profil utilisateur :", res.data);

74 })

75 .then(() => {

76 console.log("userId :", client.userId);

77 })

78 .catch(err => console.error("Erreur :", err));

79</script>

80```

82## 🔧 Utilisation de base

84```js

85import { ApiClient } from "@communecter/cocolight-api-client";

87const client = new ApiClient({

88 baseURL: "https://mon-api.com"

89});

91try {

92 const authResponse = await client.callEndpoint("AUTHENTICATE_URL", {

93 email: "EMAIL",

94 password: "PASSWORD"

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L94

95 });

97 const { accessToken, refreshToken, user } = authResponse.data;

99 console.log("✅ Authentifié :", user.username);

100

101 const meResponse = await client.callEndpoint("ME_INFO_URL");

102

103 console.log("👤 Profil utilisateur :", meResponse.data);

104

105 console.log("userId :", client.userId);

106 } catch (error) {

107 console.error("❌ Erreur durant la session :", error.message, error.details);

108 }

109

110

111```

112

113## 📜 API détaillée

114

Source & flagged code

3 flagged · loading source

dist/cocolight-api-client.browser.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/cocolight-api-client.browser.jsView on unpkg · L1

README.mdView file

64patternName = generic_password severity = medium line = 64 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L64

94patternName = generic_password severity = medium line = 94 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L94

Findings

1 High4 Medium5 Low

HighObfuscated

MediumNetwork

MediumStructural Risk Force Deep Review

MediumSecret PatternREADME.md

LowScripts Present

LowEvaldist/cocolight-api-client.browser.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/cocolight-api-client.browser.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/cocolight-api-client.browser.jsView on unpkg · L1

README.mdView file

Lines 44-114markdown

44```

45### CommonJS

47```js

48const { ApiClient, Api, tokenStorageStrategy } = require("@communecter/cocolight-api-client").default;

49```

51### 🔗 Intégration via CDN

53Vous pouvez inclure le client directement dans une page HTML :

55```html

56<script src="https://cdn.jsdelivr.net/npm/@communecter/cocolight-api-client@latest/dist/cocolight-api-client.browser.js"></script>

57<script>

58 const client = new CocolightApiClient.ApiClient({

59 baseURL: "https://www.communecter.org"

60 });

62client.callEndpoint("AUTHENTICATE_URL", {

63 email: "EMAIL",

64 password: "PASSWORD"

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L64

65 }).then(res => {

66 const { accessToken, refreshToken, user } = res.data;

67 console.log("✅ Authentifié :", user.username);

68 })

69 .then(() => {

70 return client.callEndpoint("ME_INFO_URL");

71 })

72 .then(res => {

73 console.log("👤 Profil utilisateur :", res.data);

74 })

75 .then(() => {

76 console.log("userId :", client.userId);

77 })

78 .catch(err => console.error("Erreur :", err));

79</script>

80```

82## 🔧 Utilisation de base

84```js

85import { ApiClient } from "@communecter/cocolight-api-client";

87const client = new ApiClient({

88 baseURL: "https://mon-api.com"

89});

91try {

92 const authResponse = await client.callEndpoint("AUTHENTICATE_URL", {

93 email: "EMAIL",

94 password: "PASSWORD"

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L94

95 });

97 const { accessToken, refreshToken, user } = authResponse.data;

99 console.log("✅ Authentifié :", user.username);

100

101 const meResponse = await client.callEndpoint("ME_INFO_URL");

102

103 console.log("👤 Profil utilisateur :", meResponse.data);

104

105 console.log("userId :", client.userId);

106 } catch (error) {

107 console.error("❌ Erreur durant la session :", error.message, error.details);

108 }

109

110

111```

112

113## 📜 API détaillée

114