registry  /  @flowselections/productontwerp  /  1.0.5

@flowselections/productontwerp@1.0.5

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
EnvironmentVars
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 17 file(s), 182 KB of source, external domains: vmicscahrnzpmhagztmx.supabase.co, www.w3.org

Source & flagged code

2 flagged · loading source
dist-lib/integrations/supabase/client.jsView file
4patternName = supabase_service_key severity = critical line = 4 matchedText = const SU...kQ";
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist-lib/integrations/supabase/client.jsView on unpkg · L4
4patternName = supabase_service_key severity = critical line = 4 matchedText = const SU...kQ";
Critical
Secret Pattern

Supabase service role key (JWT) in dist-lib/integrations/supabase/client.js

dist-lib/integrations/supabase/client.jsView on unpkg · L4

Findings

2 Critical1 Medium4 Low
CriticalCritical Secretdist-lib/integrations/supabase/client.js
CriticalSecret Patterndist-lib/integrations/supabase/client.js
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License