registry / @devbro/neko-helper / 0.1.25

@devbro/neko-helper@0.1.25

A curated collection of utility methods and classes that handle the boring parts so you can focus on the fun stuff

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 38.9 KB of source

Source & flagged code

3 flagged

dist/esm/enc-BSlxF6DR.d.mtsView file

Lines 128-168typescript

128 * ```typescript

129 * await password.comparePassword('myPassword', '$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy')

130 * // Returns: true or false

131 * ```

132 */

133 function comparePassword(password: string, hash: string): Promise<boolean>;

134}

135/**

136 * Cryptographic key generation utilities

137 */

138declare namespace keys {

139 /**

140 * Generates an RSA key pair

141 *

142 * @param modulusLength - The modulus length in bits (default: 2048)

143 * @returns An object containing the public and private keys in PEM format

144 *

145 * @example

146 * ```typescript

147 * const { publicKey, privateKey } = keys.rsa()

148 * // Returns: { publicKey: '-----BEGIN PUBLIC KEY-----...', privateKey: '-----BEGIN PRIVATE KEY-----...' }

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/esm/enc-BSlxF6DR.d.mtsView on unpkg · L148

Critical

Secret Pattern

RSA private key in dist/esm/enc-BSlxF6DR.d.mts

dist/esm/enc-BSlxF6DR.d.mtsView on unpkg · L148

149 * ```

150 */

151 function rsa(modulusLength?: number): {

152 publicKey: string;

153 privateKey: string;

154 };

155 /**

156 * Generates an Ed25519 key pair

157 *

158 * @returns A promise that resolves to an object containing the public and private keys as hex strings

159 *

160 * @example

161 * ```typescript

162 * const { publicKey, privateKey } = await keys.ed25519()

163 * // Returns: { publicKey: '1a2b3c...', privateKey: '9f8e7d...' }

164 * ```

165 */

166 function ed25519(): Promise<{

167 publicKey: string;

168 privateKey: string;

dist/cjs/index.d.tsView file

Lines 482-522typescript

482 * ```typescript

483 * await password.comparePassword('myPassword', '$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy')

484 * // Returns: true or false

485 * ```

486 */

487 function comparePassword(password: string, hash: string): Promise

Source & flagged code

3 flagged · loading source

dist/esm/enc-BSlxF6DR.d.mtsView file

148patternName = private_key_rsa severity = critical line = 148 matchedText = * // Ret....' }

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/esm/enc-BSlxF6DR.d.mtsView on unpkg · L148

148patternName = private_key_rsa severity = critical line = 148 matchedText = * // Ret....' }

Critical

Secret Pattern

RSA private key in dist/esm/enc-BSlxF6DR.d.mts

dist/esm/enc-BSlxF6DR.d.mtsView on unpkg · L148

dist/cjs/index.d.tsView file

502patternName = private_key_rsa severity = critical line = 502 matchedText = * // Ret....' }

Critical

Secret Pattern

RSA private key in dist/cjs/index.d.ts

dist/cjs/index.d.tsView on unpkg · L502

Findings

3 Critical1 Medium2 Low

CriticalCritical Secretdist/esm/enc-BSlxF6DR.d.mts

CriticalSecret Patterndist/esm/enc-BSlxF6DR.d.mts

CriticalSecret Patterndist/cjs/index.d.ts

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

Source & flagged code

3 flagged

dist/esm/enc-BSlxF6DR.d.mtsView file

Lines 128-168typescript

128 * ```typescript

129 * await password.comparePassword('myPassword', '$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy')

130 * // Returns: true or false

131 * ```

132 */

133 function comparePassword(password: string, hash: string): Promise<boolean>;

134}

135/**

136 * Cryptographic key generation utilities

137 */

138declare namespace keys {

139 /**

140 * Generates an RSA key pair

141 *

142 * @param modulusLength - The modulus length in bits (default: 2048)

143 * @returns An object containing the public and private keys in PEM format

144 *

145 * @example

146 * ```typescript

147 * const { publicKey, privateKey } = keys.rsa()

148 * // Returns: { publicKey: '-----BEGIN PUBLIC KEY-----...', privateKey: '-----BEGIN PRIVATE KEY-----...' }

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/esm/enc-BSlxF6DR.d.mtsView on unpkg · L148

Critical

Secret Pattern

RSA private key in dist/esm/enc-BSlxF6DR.d.mts

dist/esm/enc-BSlxF6DR.d.mtsView on unpkg · L148

149 * ```

150 */

151 function rsa(modulusLength?: number): {

152 publicKey: string;

153 privateKey: string;

154 };

155 /**

156 * Generates an Ed25519 key pair

157 *

158 * @returns A promise that resolves to an object containing the public and private keys as hex strings

159 *

160 * @example

161 * ```typescript

162 * const { publicKey, privateKey } = await keys.ed25519()

163 * // Returns: { publicKey: '1a2b3c...', privateKey: '9f8e7d...' }

164 * ```

165 */

166 function ed25519(): Promise<{

167 publicKey: string;

168 privateKey: string;

dist/cjs/index.d.tsView file

Lines 482-522typescript

482 * ```typescript

483 * await password.comparePassword('myPassword', '$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy')

484 * // Returns: true or false

485 * ```

486 */

487 function comparePassword(password: string, hash: string): Promise