registry / @elaraai/east-node-io / 1.0.28

@elaraai/east-node-io@1.0.28

I/O platform functions for the East language on Node.js

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 39 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoFilesystem

Supply chain

HighEntropyStrings

Manifest

CopyleftLicense

scanned 29 file(s), 346 KB of source

Source & flagged code

35 flagged

dist/src/storage/index.jsView file

Lines 14-54javascript

14export * from "./s3.js";

15export * from "./types.js";

16// Import for grouped exports

17import { s3_put_object, s3_get_object, s3_head_object, s3_delete_object, s3_list_objects, s3_presign_url, S3Impl } from "./s3.js";

18import { S3ConfigType, S3ObjectMetadataType, S3ListResultType } from "./types.js";

19/**

20 * Cloud storage platform functions.

21 *

22 * Provides S3 and S3-compatible object storage operations for East programs,

23 * including upload, download, delete, list, and presigned URL generation.

24 *

25 * @example

26 * ```ts

27 * import { East, StringType, BlobType } from "@elaraai/east";

28 * import { Storage } from "@elaraai/east-node-io";

29 *

30 * const uploadFile = East.function([StringType, BlobType], StringType, ($, filename, data) => {

31 * const config = $.let({

32 * region: "us-east-1",

33 * bucket: "my-bucket",

34 * accessKeyId: variant('some',"AKIAIOSFODNN7EXAMPLE"),

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src/storage/index.jsView on unpkg · L34

35 * secretAccessKey: variant('some',"wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"),

36 * endpoint: variant('none', null),

37 * });

38 *

39 * // Upload the file

40 * $(Storage.S3.putObject(config, filename, data));

41 *

42 * // Generate presigned URL for sharing (valid for 1 hour)

43 * $.return(Storage.S3.presignUrl(config, filename, 3600n));

44 * });

45 *

46 * const compiled = East.compileAsync(uploadFile.toIR(), Storage.S3.Implementation);

47 * const shareableUrl = await compiled("report.pdf", pdfBlob);

48 * ```

49 */

50export const Storage = {

51 /**

52 * S3 and S3-compatible object storage operations.

53 *

54 * Provides platform functions for Amazon S3, MinIO, DigitalOcean Spaces,

34patternName = aws_access_key severity = critical line = 34 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.js

dist/src/storage/index.jsView on unpkg · L34

196patternName = aws_access_key severity = critical line = 196 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.js

dist/src/storage/index.jsView on unpkg · L196

dist/src/transfer/index.jsView file

Lines 18-220javascript

18// Import for grouped exports

19import { ftp_connect, ftp_put, ftp_get, ftp_list, ftp_delete, ftp_close, FtpImpl } from "./ftp.js";

20import { sftp_connect, sftp_put, sftp_get, sftp_list, sftp_delete, sftp_close, SftpImpl } from "./sftp.js";

21import { FtpConfigType, SftpConfigType, FileInfoType } from "./types.js";

22/**

23 * File transfer platform functions.

24 *

dist/src/transfer/ftp.jsView file

47patternName = generic_password severity = medium line = 47 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L47

96patternName = generic_password severity = medium line = 96 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L96

144patternName = generic_password severity = medium line = 144 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L144

191patternName = generic_password severity = medium line = 191 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L191

dist/src/transfer/ftp.d.tsView file

44patternName = generic_password severity = medium line = 44 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L44

99patternName = generic_password severity = medium line = 99 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L99

147patternName = generic_password severity = medium line = 147 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L147

194patternName = generic_password severity = medium line = 194 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L194

dist/src/transfer/index.d.tsView file

32patternName = generic_password severity = medium line = 32 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L32

66patternName = generic_password severity = medium line = 66 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L66

98patternName = generic_password severity = medium line = 98 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L98

123patternName = generic_password severity = medium line = 123 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L123

dist/src/storage/s3.jsView file

73patternName = aws_access_key severity = critical line = 73 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.js

dist/src/storage/s3.jsView on unpkg · L73

329patternName = aws_access_key severity = critical line = 329 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.js

dist/src/storage/s3.jsView on unpkg · L329

dist/src/storage/s3.d.tsView file

44patternName = aws_access_key severity = critical line = 44 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.d.ts

dist/src/storage/s3.d.tsView on unpkg · L44

346patternName = aws_access_key severity = critical line = 346 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.d.ts

dist/src/storage/s3.d.tsView on unpkg · L346

dist/src/storage/index.d.tsView file

30patternName = aws_access_key severity = critical line = 30 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.d.ts

dist/src/storage/index.d.tsView on unpkg · L30

238patternName = aws_access_key severity = critical line = 238 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.d.ts

dist/src/storage/index.d.tsView on unpkg · L238

Source & flagged code

35 flagged · loading source

dist/src/storage/index.jsView file

34patternName = aws_access_key severity = critical line = 34 matchedText = * ...E"),

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src/storage/index.jsView on unpkg · L34

34patternName = aws_access_key severity = critical line = 34 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.js

dist/src/storage/index.jsView on unpkg · L34

196patternName = aws_access_key severity = critical line = 196 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.js

dist/src/storage/index.jsView on unpkg · L196

dist/src/transfer/index.jsView file

38patternName = generic_password severity = medium line = 38 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.js

dist/src/transfer/index.jsView on unpkg · L38

72patternName = generic_password severity = medium line = 72 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.js

dist/src/transfer/index.jsView on unpkg · L72

98patternName = generic_password severity = medium line = 98 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.js

dist/src/transfer/index.jsView on unpkg · L98

123patternName = generic_password severity = medium line = 123 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.js

dist/src/transfer/index.jsView on unpkg · L123

149patternName = generic_password severity = medium line = 149 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.js

dist/src/transfer/index.jsView on unpkg · L149

175patternName = generic_password severity = medium line = 175 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.js

dist/src/transfer/index.jsView on unpkg · L175

200patternName = generic_password severity = medium line = 200 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.js

dist/src/transfer/index.jsView on unpkg · L200

dist/src/transfer/ftp.jsView file

47patternName = generic_password severity = medium line = 47 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L47

96patternName = generic_password severity = medium line = 96 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L96

144patternName = generic_password severity = medium line = 144 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L144

191patternName = generic_password severity = medium line = 191 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L191

238patternName = generic_password severity = medium line = 238 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L238

277patternName = generic_password severity = medium line = 277 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L277

dist/src/transfer/ftp.d.tsView file

44patternName = generic_password severity = medium line = 44 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L44

99patternName = generic_password severity = medium line = 99 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L99

147patternName = generic_password severity = medium line = 147 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L147

194patternName = generic_password severity = medium line = 194 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L194

247patternName = generic_password severity = medium line = 247 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L247

286patternName = generic_password severity = medium line = 286 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L286

dist/src/transfer/index.d.tsView file

32patternName = generic_password severity = medium line = 32 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L32

66patternName = generic_password severity = medium line = 66 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L66

98patternName = generic_password severity = medium line = 98 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L98

123patternName = generic_password severity = medium line = 123 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L123

149patternName = generic_password severity = medium line = 149 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L149

181patternName = generic_password severity = medium line = 181 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L181

206patternName = generic_password severity = medium line = 206 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L206

dist/src/storage/s3.jsView file

73patternName = aws_access_key severity = critical line = 73 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.js

dist/src/storage/s3.jsView on unpkg · L73

329patternName = aws_access_key severity = critical line = 329 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.js

dist/src/storage/s3.jsView on unpkg · L329

dist/src/storage/s3.d.tsView file

44patternName = aws_access_key severity = critical line = 44 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.d.ts

dist/src/storage/s3.d.tsView on unpkg · L44

346patternName = aws_access_key severity = critical line = 346 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.d.ts

dist/src/storage/s3.d.tsView on unpkg · L346

dist/src/storage/index.d.tsView file

30patternName = aws_access_key severity = critical line = 30 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.d.ts

dist/src/storage/index.d.tsView on unpkg · L30

238patternName = aws_access_key severity = critical line = 238 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.d.ts

dist/src/storage/index.d.tsView on unpkg · L238

Findings

9 Critical26 Medium4 Low

CriticalCritical Secretdist/src/storage/index.js

CriticalSecret Patterndist/src/storage/index.js

CriticalSecret Patterndist/src/storage/s3.js

CriticalSecret Patterndist/src/storage/s3.d.ts

CriticalSecret Patterndist/src/storage/index.d.ts

MediumSecret Patterndist/src/transfer/index.js

MediumSecret Patterndist/src/transfer/ftp.js

MediumSecret Patterndist/src/transfer/ftp.d.ts

MediumSecret Patterndist/src/transfer/index.d.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowCopyleft License

Source & flagged code

35 flagged

dist/src/storage/index.jsView file

Lines 14-54javascript

14export * from "./s3.js";

15export * from "./types.js";

16// Import for grouped exports

17import { s3_put_object, s3_get_object, s3_head_object, s3_delete_object, s3_list_objects, s3_presign_url, S3Impl } from "./s3.js";

18import { S3ConfigType, S3ObjectMetadataType, S3ListResultType } from "./types.js";

19/**

20 * Cloud storage platform functions.

21 *

22 * Provides S3 and S3-compatible object storage operations for East programs,

23 * including upload, download, delete, list, and presigned URL generation.

24 *

25 * @example

26 * ```ts

27 * import { East, StringType, BlobType } from "@elaraai/east";

28 * import { Storage } from "@elaraai/east-node-io";

29 *

30 * const uploadFile = East.function([StringType, BlobType], StringType, ($, filename, data) => {

31 * const config = $.let({

32 * region: "us-east-1",

33 * bucket: "my-bucket",

34 * accessKeyId: variant('some',"AKIAIOSFODNN7EXAMPLE"),

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src/storage/index.jsView on unpkg · L34

35 * secretAccessKey: variant('some',"wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"),

36 * endpoint: variant('none', null),

37 * });

38 *

39 * // Upload the file

40 * $(Storage.S3.putObject(config, filename, data));

41 *

42 * // Generate presigned URL for sharing (valid for 1 hour)

43 * $.return(Storage.S3.presignUrl(config, filename, 3600n));

44 * });

45 *

46 * const compiled = East.compileAsync(uploadFile.toIR(), Storage.S3.Implementation);

47 * const shareableUrl = await compiled("report.pdf", pdfBlob);

48 * ```

49 */

50export const Storage = {

51 /**

52 * S3 and S3-compatible object storage operations.

53 *

54 * Provides platform functions for Amazon S3, MinIO, DigitalOcean Spaces,

34patternName = aws_access_key severity = critical line = 34 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.js

dist/src/storage/index.jsView on unpkg · L34

196patternName = aws_access_key severity = critical line = 196 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.js

dist/src/storage/index.jsView on unpkg · L196

dist/src/transfer/index.jsView file

Lines 18-220javascript

18// Import for grouped exports

19import { ftp_connect, ftp_put, ftp_get, ftp_list, ftp_delete, ftp_close, FtpImpl } from "./ftp.js";

20import { sftp_connect, sftp_put, sftp_get, sftp_list, sftp_delete, sftp_close, SftpImpl } from "./sftp.js";

21import { FtpConfigType, SftpConfigType, FileInfoType } from "./types.js";

22/**

23 * File transfer platform functions.

24 *

dist/src/transfer/ftp.jsView file

47patternName = generic_password severity = medium line = 47 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L47

96patternName = generic_password severity = medium line = 96 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L96

144patternName = generic_password severity = medium line = 144 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L144

191patternName = generic_password severity = medium line = 191 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.js

dist/src/transfer/ftp.jsView on unpkg · L191

dist/src/transfer/ftp.d.tsView file

44patternName = generic_password severity = medium line = 44 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L44

99patternName = generic_password severity = medium line = 99 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L99

147patternName = generic_password severity = medium line = 147 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L147

194patternName = generic_password severity = medium line = 194 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/ftp.d.ts

dist/src/transfer/ftp.d.tsView on unpkg · L194

dist/src/transfer/index.d.tsView file

32patternName = generic_password severity = medium line = 32 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L32

66patternName = generic_password severity = medium line = 66 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L66

98patternName = generic_password severity = medium line = 98 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L98

123patternName = generic_password severity = medium line = 123 matchedText = * ...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/transfer/index.d.ts

dist/src/transfer/index.d.tsView on unpkg · L123

dist/src/storage/s3.jsView file

73patternName = aws_access_key severity = critical line = 73 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.js

dist/src/storage/s3.jsView on unpkg · L73

329patternName = aws_access_key severity = critical line = 329 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.js

dist/src/storage/s3.jsView on unpkg · L329

dist/src/storage/s3.d.tsView file

44patternName = aws_access_key severity = critical line = 44 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.d.ts

dist/src/storage/s3.d.tsView on unpkg · L44

346patternName = aws_access_key severity = critical line = 346 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/s3.d.ts

dist/src/storage/s3.d.tsView on unpkg · L346

dist/src/storage/index.d.tsView file

30patternName = aws_access_key severity = critical line = 30 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.d.ts

dist/src/storage/index.d.tsView on unpkg · L30

238patternName = aws_access_key severity = critical line = 238 matchedText = * ...E"),

Critical

Secret Pattern

AWS access key ID in dist/src/storage/index.d.ts

dist/src/storage/index.d.tsView on unpkg · L238