registry / @fjall/components-infrastructure / 2.30.0

@fjall/components-infrastructure@2.30.0

Published fjall infrastructure components and utilities.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 245 file(s), 1.68 MB of source, external domains: 127.0.0.1, clickhouse.com, github.com

Source & flagged code

3 flagged

dist/lib/lambda-assets/cert-generator/asset/index.jsView file

18022patternName = private_key_rsa severity = critical line = 18022 matchedText = return `...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18022

18022patternName = private_key_rsa severity = critical line = 18022 matchedText = return `...----

Critical

Secret Pattern

RSA private key in dist/lib/lambda-assets/cert-generator/asset/index.js

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18022

dist/lib/resources/aws/networking/hostedZone.jsView file

Lines 1-29javascript

1import { Construct } from "constructs";

2import { CfnOutput, Fn, Tags } from "aws-cdk-lib";

3import { HostedZone as AWSHostedZone } from "aws-cdk-lib/aws-route53";

4import { getDomainExportNames } from "@fjall/util";

5import { toPascalCase, getSafeZoneName } from "../../../utils/capitaliseString.js";

6import { DelegationRole } from "../iam/delegationRole.js";

7import { applyCostAllocationTags } from "../../../utils/costAllocationTags.js";

8import { resolveOrgId } from "../../../utils/cdkContext.js";

9export class HostedZoneFactory {

10 static import(stack, hostedZoneId, zoneName, opts) {

11 const safeZone = toPascalCase(getSafeZoneName(zoneName));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lib/resources/aws/networking/hostedZone.jsView on unpkg · L9

12 return new HostedZone(stack.getStack(), `${safeZone}HostedZone`, {

13 hostedZoneId,

14 zoneName,

15 costAllocationEnvironment: opts?.costAllocationEnvironment,

16 costAllocationDomain: opts?.costAllocationDomain,

17 description: opts?.description

18 });

19 }

20}

21export class HostedZone extends Construct {

22 hostedZone;

23 hostedZoneId;

24 zoneName;

25 description;

26 nameServers;

27 delegationRole;

28 isImported;

29 constructor(scope, id, props) {

Source & flagged code

3 flagged · loading source

dist/lib/lambda-assets/cert-generator/asset/index.jsView file

18022patternName = private_key_rsa severity = critical line = 18022 matchedText = return `...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18022

18022patternName = private_key_rsa severity = critical line = 18022 matchedText = return `...----

Critical

Secret Pattern

RSA private key in dist/lib/lambda-assets/cert-generator/asset/index.js

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18022

dist/lib/resources/aws/networking/hostedZone.jsView file

9export class HostedZoneFactory { L10: static import(stack, hostedZoneId, zoneName, opts) { L11: const safeZone = toPascalCase(getSafeZoneName(zoneName));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lib/resources/aws/networking/hostedZone.jsView on unpkg · L9

Findings

2 Critical3 Medium5 Low

CriticalCritical Secretdist/lib/lambda-assets/cert-generator/asset/index.js

CriticalSecret Patterndist/lib/lambda-assets/cert-generator/asset/index.js

MediumDynamic Requiredist/lib/resources/aws/networking/hostedZone.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

3 flagged

dist/lib/lambda-assets/cert-generator/asset/index.jsView file

18022patternName = private_key_rsa severity = critical line = 18022 matchedText = return `...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18022

18022patternName = private_key_rsa severity = critical line = 18022 matchedText = return `...----

Critical

Secret Pattern

RSA private key in dist/lib/lambda-assets/cert-generator/asset/index.js

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18022

dist/lib/resources/aws/networking/hostedZone.jsView file

Lines 1-29javascript

1import { Construct } from "constructs";

2import { CfnOutput, Fn, Tags } from "aws-cdk-lib";

3import { HostedZone as AWSHostedZone } from "aws-cdk-lib/aws-route53";

4import { getDomainExportNames } from "@fjall/util";

5import { toPascalCase, getSafeZoneName } from "../../../utils/capitaliseString.js";

6import { DelegationRole } from "../iam/delegationRole.js";

7import { applyCostAllocationTags } from "../../../utils/costAllocationTags.js";

8import { resolveOrgId } from "../../../utils/cdkContext.js";

9export class HostedZoneFactory {

10 static import(stack, hostedZoneId, zoneName, opts) {

11 const safeZone = toPascalCase(getSafeZoneName(zoneName));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lib/resources/aws/networking/hostedZone.jsView on unpkg · L9

12 return new HostedZone(stack.getStack(), `${safeZone}HostedZone`, {

13 hostedZoneId,

14 zoneName,

15 costAllocationEnvironment: opts?.costAllocationEnvironment,

16 costAllocationDomain: opts?.costAllocationDomain,

17 description: opts?.description

18 });

19 }

20}

21export class HostedZone extends Construct {

22 hostedZone;

23 hostedZoneId;

24 zoneName;

25 description;

26 nameServers;

27 delegationRole;

28 isImported;

29 constructor(scope, id, props) {