registry / @contract-case/cli / 0.30.0

@contract-case/cli@0.30.0

Command-line interface for ContractCase, allowing interactions with the Contract / Pact Broker

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 8.99 KB of source

Source & flagged code

1 flagged

dist/src/boundaries/cli.jsView file

Lines 10-50javascript

10 return {

11 ...('contractDir' in options && typeof options.contractDir === 'string'

12 ? { contractDir: options.contractDir }

13 : {}),

14 ...('logLevel' in options && typeof options.logLevel === 'string'

15 ? { logLevel: options.logLevel }

16 : {}),

17 ...('brokerCiAccessToken' in options

18 ? { brokerCiAccessToken: options.brokerCiAccessToken }

19 : {}),

20 ...('brokerBaseUrl' in options

21 ? { brokerCiAccessToken: options.brokerBaseUrl }

22 : {}),

23 ...('brokerPassword' in options || 'brokerUsername' in options

24 ? {

25 brokerBasicAuth: {

26 ...{

27 username: 'brokerUsername' in options

28 ? options.brokerUsername

29 : undefined,

30 password: 'brokerPassword' in options

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/boundaries/cli.jsView on unpkg · L30

31 ? options.brokerPassword

32 : undefined,

33 },

34 },

35 }

36 : {}),

37 };

38 }

39 return {};

40};

41program

42 .name('ContractCase')

43 .description('CLI to interact with contract files and contract brokers')

44 .version(`${versionString}`);

45const commonOptions = (command) => command

46 .option('-l, --log-level <level>', 'log level')

47 .option('--broker-ci-access-token', 'broker CI token (recommended over username + password)')

48 .option('--broker-base-url <baseurl>', 'broker base URL')

49 .option('--broker-username <username>', 'broker basic auth username. Do not supply this if you are also using a broker CI token. Must be supplied with --broker-password')

50 .option('--broker-password <password>', 'broker basic auth password. Do not supply this if you are also using a broker CI token. Must be supplied with --broker-username');

Source & flagged code

1 flagged · loading source

dist/src/boundaries/cli.jsView file

30patternName = generic_password severity = medium line = 30 matchedText = password...ions

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/boundaries/cli.jsView on unpkg · L30

Findings

2 Medium1 Low

MediumSecret Patterndist/src/boundaries/cli.js

MediumEnvironment Vars

LowScripts Present

Source & flagged code

1 flagged

dist/src/boundaries/cli.jsView file

Lines 10-50javascript

10 return {

11 ...('contractDir' in options && typeof options.contractDir === 'string'

12 ? { contractDir: options.contractDir }

13 : {}),

14 ...('logLevel' in options && typeof options.logLevel === 'string'

15 ? { logLevel: options.logLevel }

16 : {}),

17 ...('brokerCiAccessToken' in options

18 ? { brokerCiAccessToken: options.brokerCiAccessToken }

19 : {}),

20 ...('brokerBaseUrl' in options

21 ? { brokerCiAccessToken: options.brokerBaseUrl }

22 : {}),

23 ...('brokerPassword' in options || 'brokerUsername' in options

24 ? {

25 brokerBasicAuth: {

26 ...{

27 username: 'brokerUsername' in options

28 ? options.brokerUsername

29 : undefined,

30 password: 'brokerPassword' in options

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/boundaries/cli.jsView on unpkg · L30

31 ? options.brokerPassword

32 : undefined,

33 },

34 },

35 }

36 : {}),

37 };

38 }

39 return {};

40};

41program

42 .name('ContractCase')

43 .description('CLI to interact with contract files and contract brokers')

44 .version(`${versionString}`);

45const commonOptions = (command) => command

46 .option('-l, --log-level <level>', 'log level')

47 .option('--broker-ci-access-token', 'broker CI token (recommended over username + password)')

48 .option('--broker-base-url <baseurl>', 'broker base URL')

49 .option('--broker-username <username>', 'broker basic auth username. Do not supply this if you are also using a broker CI token. Must be supplied with --broker-password')

50 .option('--broker-password <password>', 'broker basic auth password. Do not supply this if you are also using a broker CI token. Must be supplied with --broker-username');