registry / @dataif/cli / 0.1.5

@dataif/cli@0.1.5

CLI para instalar e subir o DataIF localmente com Docker Compose.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 24 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 51 file(s), 346 KB of source, external domains: chat.maritaca.ai, github.com, www.untitledui.com

Source & flagged code

16 flagged

templates/dataif/scripts/configure-env.shView file

Lines 122-162shell

122

123 case "${raw}" in

124 https://*) scheme="https" ;;

125 esac

126 url="${raw#http://}"

127 url="${url#https://}"

128 hostport="${url%%/*}"

129 if [[ "${hostport}" == *:* ]]; then

130 printf '%s' "${hostport##*:}"

131 elif [ "${scheme}" = "https" ]; then

132 printf '443'

133 else

134 printf '80'

135 fi

136}

137

138read_metabase_admin_password() {

139 local password

140

141 while true; do

142 password="$(read_secret "Senha admin Metabase" "$(random_secret)")"

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/dataif/scripts/configure-env.shView on unpkg · L142

143 if validate_metabase_password "${password}"; then

144 printf '%s' "${password}"

145 return

146 fi

147 printf 'Senha admin Metabase fraca. Use ao menos 8 caracteres e evite valores comuns como admin, dataif ou password.\n' >&2

148 done

149}

150

151set_env() {

152 local key="$1"

153 local value="$2"

154 local tmp_file

155

156 tmp_file="$(mktemp)"

157 awk -v key="${key}" -v value="${value}" '

158 BEGIN { done = 0 }

159 $0 ~ "^" key "=" {

160 print key "=" value

161 done = 1

162 next

Lines 238-284shell

238set_env AIRFLOW_PORT "${airflow_port}"

239set_env KEYCLOAK_PORT "${keycloak_port}"

240set_env VANNA_PORT "${vanna_port}"

241set_env METABASE_SITE_URL "${public_base_url%/}/metabase"

242set_env AIRFLOW_PUBLIC_URL "${public_base_url%/}/airflow"

265patternName = generic_password severity = medium line = 265 matchedText = metabase...rd)"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L265

266patternName = generic_password severity = medium line = 266 matchedText = keycloak...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L266

267patternName = generic_password severity = medium line = 267 matchedText = dataif_a...}")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L267

templates/dataif/infra/init-db/01-init-dataif.shView file

•path = templates/dataif/infra/init-db/01-init-dataif.sh kind = build_helper sizeBytes = 8181 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/dataif/infra/init-db/01-init-dataif.shView on unpkg

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView file

•path = [redacted]diagramas_projeto.zip kind = high_entropy_blob sizeBytes = 9384 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

•path = [redacted]diagramas_projeto.zip kind = compressed_blob sizeBytes = 9384 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

•path = [redacted]diagramas_projeto.zip kind = nested_archive_needs_inspection sizeBytes = 9384 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

bin/dataif.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @dataif/cli@0.1.1 matchedIdentity = npm:QGRhdGFpZi9jbGk:0.1.1 similarity = 0.941 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/dataif.jsView on unpkg

Source & flagged code

16 flagged · loading source

templates/dataif/scripts/configure-env.shView file

142patternName = generic_password severity = medium line = 142 matchedText = password...)")"

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/dataif/scripts/configure-env.shView on unpkg · L142

258patternName = generic_password severity = medium line = 258 matchedText = postgres...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L258

259patternName = generic_password severity = medium line = 259 matchedText = dataif_e...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L259

260patternName = generic_password severity = medium line = 260 matchedText = dataif_m...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L260

261patternName = generic_password severity = medium line = 261 matchedText = dataif_v...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L261

262patternName = generic_password severity = medium line = 262 matchedText = airflow_...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L262

263patternName = generic_password severity = medium line = 263 matchedText = metabase...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L263

264patternName = generic_password severity = medium line = 264 matchedText = airflow_...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L264

265patternName = generic_password severity = medium line = 265 matchedText = metabase...rd)"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L265

266patternName = generic_password severity = medium line = 266 matchedText = keycloak...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L266

267patternName = generic_password severity = medium line = 267 matchedText = dataif_a...}")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L267

templates/dataif/infra/init-db/01-init-dataif.shView file

•path = templates/dataif/infra/init-db/01-init-dataif.sh kind = build_helper sizeBytes = 8181 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/dataif/infra/init-db/01-init-dataif.shView on unpkg

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView file

•path = [redacted]diagramas_projeto.zip kind = high_entropy_blob sizeBytes = 9384 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

•path = [redacted]diagramas_projeto.zip kind = compressed_blob sizeBytes = 9384 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

•path = [redacted]diagramas_projeto.zip kind = nested_archive_needs_inspection sizeBytes = 9384 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

bin/dataif.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/dataif.jsView on unpkg

Findings

2 High16 Medium6 Low

HighShips High Entropy Blobtemplates/dataif/docs/modular/diagramas/diagramas_projeto.zip

HighPrevious Version Dangerous Deltabin/dataif.js

MediumSecret Patterntemplates/dataif/scripts/configure-env.sh

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpertemplates/dataif/infra/init-db/01-init-dataif.sh

MediumShips Compressed Blobtemplates/dataif/docs/modular/diagramas/diagramas_projeto.zip

MediumStructural Risk Force Deep Review

MediumSecret Patterntemplates/dataif/scripts/configure-env.sh

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectiontemplates/dataif/docs/modular/diagramas/diagramas_projeto.zip

LowNo License

Source & flagged code

16 flagged

templates/dataif/scripts/configure-env.shView file

Lines 122-162shell

122

123 case "${raw}" in

124 https://*) scheme="https" ;;

125 esac

126 url="${raw#http://}"

127 url="${url#https://}"

128 hostport="${url%%/*}"

129 if [[ "${hostport}" == *:* ]]; then

130 printf '%s' "${hostport##*:}"

131 elif [ "${scheme}" = "https" ]; then

132 printf '443'

133 else

134 printf '80'

135 fi

136}

137

138read_metabase_admin_password() {

139 local password

140

141 while true; do

142 password="$(read_secret "Senha admin Metabase" "$(random_secret)")"

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/dataif/scripts/configure-env.shView on unpkg · L142

143 if validate_metabase_password "${password}"; then

144 printf '%s' "${password}"

145 return

146 fi

147 printf 'Senha admin Metabase fraca. Use ao menos 8 caracteres e evite valores comuns como admin, dataif ou password.\n' >&2

148 done

149}

150

151set_env() {

152 local key="$1"

153 local value="$2"

154 local tmp_file

155

156 tmp_file="$(mktemp)"

157 awk -v key="${key}" -v value="${value}" '

158 BEGIN { done = 0 }

159 $0 ~ "^" key "=" {

160 print key "=" value

161 done = 1

162 next

Lines 238-284shell

238set_env AIRFLOW_PORT "${airflow_port}"

239set_env KEYCLOAK_PORT "${keycloak_port}"

240set_env VANNA_PORT "${vanna_port}"

241set_env METABASE_SITE_URL "${public_base_url%/}/metabase"

242set_env AIRFLOW_PUBLIC_URL "${public_base_url%/}/airflow"

265patternName = generic_password severity = medium line = 265 matchedText = metabase...rd)"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L265

266patternName = generic_password severity = medium line = 266 matchedText = keycloak...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L266

267patternName = generic_password severity = medium line = 267 matchedText = dataif_a...}")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L267

templates/dataif/infra/init-db/01-init-dataif.shView file

•path = templates/dataif/infra/init-db/01-init-dataif.sh kind = build_helper sizeBytes = 8181 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/dataif/infra/init-db/01-init-dataif.shView on unpkg

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView file

•path = [redacted]diagramas_projeto.zip kind = high_entropy_blob sizeBytes = 9384 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

•path = [redacted]diagramas_projeto.zip kind = compressed_blob sizeBytes = 9384 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

•path = [redacted]diagramas_projeto.zip kind = nested_archive_needs_inspection sizeBytes = 9384 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

templates/dataif/docs/modular/diagramas/diagramas_projeto.zipView on unpkg

bin/dataif.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/dataif.jsView on unpkg