registry  /  @dervix/ws  /  8.21.5

@dervix/ws@8.21.5

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
CryptoEnvironmentVarsNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 16 file(s), 130 KB of source, external domains: html.spec.whatwg.org

Source & flagged code

1 flagged · loading source
lib/websocket-server.jsView file
5const EventEmitter = require('events'); L6: const http = require('http'); L7: const { Duplex } = require('stream'); ... L109: }); L110: res.end(body); L111: }); ... L369: * @throws {Error} If called more than once with the same socket L370: * @private L371: */ ... L388: .update(key + GUID) L389: .digest('base64'); L390:
Low
Weak Crypto

Package source references weak cryptographic algorithms.

lib/websocket-server.jsView on unpkg · L5

Findings

2 Medium4 Low
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptolib/websocket-server.js
LowHigh Entropy Strings
LowUrl Strings