registry / @edge-base/web / 0.4.1

@edge-base/web@0.4.1

EdgeBase web SDK — browser client with database-live subscriptions, room, and auth persistence

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoNetworkWebSocket

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 317 KB of source, external domains: challenges.cloudflare.com

Source & flagged code

4 flagged

llms.txtView file

Lines 49-89text

50### Create a client

52```ts

53import { createClient } from '@edge-base/web';

55const client = createClient('https://your-project.edgebase.fun', {

56 refreshTokenTransport: 'httpOnlyCookie',

57});

58```

60This secure browser example requires `auth.session.cookie.enabled: true` on the

61server. Without that server setting, omit the option; `'body'` is the legacy

62compatibility default.

64### Sign in and react to auth changes

66```ts

67await client.auth.signIn({

68 email: 'june@example.com',

69 password: 'pass1234',

Medium

Secret Pattern

Package contains a possible secret pattern.

llms.txtView on unpkg · L69

70});

72const user = client.auth.currentUser;

74const unsubscribeAuth = client.auth.onAuthStateChange((nextUser) => {

75 console.log('auth changed:', nextUser);

76});

77```

79### Query data from a single-instance block

81```ts

82type Post = {

83 id: string;

84 title: string;

85 published: boolean;

86};

88const posts = await client

89 .db('app')

README.mdView file

Lines 147-187markdown

147

148You can also:

149

150- create EdgeBase as a completely separate project

151- keep frontend and backend in different repos

152- use a different subdirectory name if that fits your monorepo better

153

154The main thing we recommend is avoiding scaffolding directly into an existing app root unless that is intentionally how you want to organize the repo.

155

156## Quick Start

157

158```ts

159

Source & flagged code

4 flagged · loading source

llms.txtView file

69patternName = generic_password severity = medium line = 69 matchedText = password...34',

Medium

Secret Pattern

Package contains a possible secret pattern.

llms.txtView on unpkg · L69

README.mdView file

167patternName = generic_password severity = medium line = 167 matchedText = password...34',

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L167

224patternName = generic_password severity = medium line = 224 matchedText = password...34',

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L224

232patternName = generic_password severity = medium line = 232 matchedText = password...34',

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L232

Findings

5 Medium4 Low

MediumSecret Patternllms.txt

MediumNetwork

MediumSecret PatternREADME.md

LowScripts Present

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

4 flagged

llms.txtView file

Lines 49-89text

50### Create a client

52```ts

53import { createClient } from '@edge-base/web';

55const client = createClient('https://your-project.edgebase.fun', {

56 refreshTokenTransport: 'httpOnlyCookie',

57});

58```

60This secure browser example requires `auth.session.cookie.enabled: true` on the

61server. Without that server setting, omit the option; `'body'` is the legacy

62compatibility default.

64### Sign in and react to auth changes

66```ts

67await client.auth.signIn({

68 email: 'june@example.com',

69 password: 'pass1234',

Medium

Secret Pattern

Package contains a possible secret pattern.

llms.txtView on unpkg · L69

70});

72const user = client.auth.currentUser;

74const unsubscribeAuth = client.auth.onAuthStateChange((nextUser) => {

75 console.log('auth changed:', nextUser);

76});

77```

79### Query data from a single-instance block

81```ts

82type Post = {

83 id: string;

84 title: string;

85 published: boolean;

86};

88const posts = await client

89 .db('app')

README.mdView file

Lines 147-187markdown

147

148You can also:

149

150- create EdgeBase as a completely separate project

151- keep frontend and backend in different repos

152- use a different subdirectory name if that fits your monorepo better

153

154The main thing we recommend is avoiding scaffolding directly into an existing app root unless that is intentionally how you want to organize the repo.

155

156## Quick Start

157

158```ts

159

Lines 204-252markdown

204- `client.db(namespace, id?)`

205 Query tables, mutate records, and subscribe to live changes

206- `client.storage`

207 Upload files and resolve bucket URLs

208- `client.functions`

209 Call app functions from the browser

210- `client.room(namespace, roomId)`

211 Join realtime rooms for presence, state sync, and signals

212- `client.analytics`

213 Send analytics data from the client

214- `client.push`

215 Register and manage web push flows

216

217## Auth

218

219### Email and password

220

221```ts

222await client.auth.signUp({

223 email: 'june@example.com',

224 password: 'pass1234',

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L224

225 data: {

226 displayName: 'June',

227 },

228});

229

230await client.auth.signIn({

231 email: 'june@example.com',

232 password: 'pass1234',

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L232

233});

234

235client.auth.onAuthStateChange((user) => {

236 console.log('auth changed:', user);

237});

238```

239

240### OAuth

241

242```ts

243await client.auth.signInWithOAuth('google');

244

245const result = await client.auth.handleOAuthCallback();

246if (result) {

247 console.log('signed in with OAuth:', result.user);

248}

249```

250

251By default, the browser SDK uses `/auth/callback` on the current origin as the redirect target.

252