registry / @futdevpro/fsm-dynamo / 1.16.17

@futdevpro/fsm-dynamo@1.16.17

Full Stack Model Collection for Dynamic (NodeJS-Typescript) Framework called Dynamo, by Future Development Ltd.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 23 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 720 file(s), 1.97 MB of source, external domains: example.com

Source & flagged code

16 flagged

build/_collections/utils/secret-mask.util.d.tsView file

Lines 1-40typescript

1/**

2 * FR-093 (2026-06-09) — Universal secret/key masking utility (bedrock level).

3 *

4 * Lehetove teszi az ALL-FDP-systems-szintu secret-szivargas-detection +

5 * maszkolas-t egy bedrock-szinten. A korabban Overseer / runner-worker

6 * helyi util-jai (FR-092) most ezt importaljak — egy SOR konfiguracio +

7 * find-and-replace.

8 *

9 * User feedback ('az osszes rendszerunknek a lenyege az univerzalizalt,

Source & flagged code

16 flagged · loading source

build/_collections/utils/secret-mask.util.d.tsView file

20patternName = github_pat severity = critical line = 20 matchedText = * ...at]`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

build/_collections/utils/secret-mask.util.d.tsView on unpkg · L20

20patternName = github_pat severity = critical line = 20 matchedText = * ...at]`

Critical

Secret Pattern

GitHub personal access token in build/_collections/utils/secret-mask.util.d.ts

build/_collections/utils/secret-mask.util.d.tsView on unpkg · L20

scripts/run-coverage-tests.jsView file

1const { execSync } = require('child_process'); L2: const path = require('path');

High

Child Process

Package source references child process execution.

scripts/run-coverage-tests.jsView on unpkg · L1

12try { L13: execSync(`npx jasmine --config="${configPath}"`, { L14: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-coverage-tests.jsView on unpkg · L12

build/_modules/ngx-models/_enums/html/input-types.enum.d.tsView file

14patternName = generic_password severity = medium line = 14 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in build/_modules/ngx-models/_enums/html/input-types.enum.d.ts

build/_modules/ngx-models/_enums/html/input-types.enum.d.tsView on unpkg · L14

build/_modules/ngx-models/_enums/field-type.enum.d.tsView file

10patternName = generic_password severity = medium line = 10 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in build/_modules/ngx-models/_enums/field-type.enum.d.ts

build/_modules/ngx-models/_enums/field-type.enum.d.tsView on unpkg · L10

build/_collections/utils/secret-mask.util.jsView file

21patternName = github_pat severity = critical line = 21 matchedText = * ...at]`

Critical

Secret Pattern

GitHub personal access token in build/_collections/utils/secret-mask.util.js

build/_collections/utils/secret-mask.util.jsView on unpkg · L21

src/_modules/crypto/_collections/crypto.util.edge.spec.tsView file

459patternName = generic_password severity = medium line = 459 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/_modules/crypto/_collections/crypto.util.edge.spec.ts

src/_modules/crypto/_collections/crypto.util.edge.spec.tsView on unpkg · L459

src/_modules/security/_collections/stored-secret.util.spec.tsView file

9patternName = github_pat severity = critical line = 9 matchedText = const gi...90';

Critical

Secret Pattern

GitHub personal access token in src/_modules/security/_collections/stored-secret.util.spec.ts

src/_modules/security/_collections/stored-secret.util.spec.tsView on unpkg · L9

src/_modules/ngx-models/_enums/html/input-types.enum.tsView file

15patternName = generic_password severity = medium line = 15 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/_modules/ngx-models/_enums/html/input-types.enum.ts

src/_modules/ngx-models/_enums/html/input-types.enum.tsView on unpkg · L15

src/_modules/ngx-models/_enums/field-type.enum.tsView file

12patternName = generic_password severity = medium line = 12 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/_modules/ngx-models/_enums/field-type.enum.ts

src/_modules/ngx-models/_enums/field-type.enum.tsView on unpkg · L12

src/_collections/utils/secret-mask.util.tsView file

20patternName = github_pat severity = critical line = 20 matchedText = * ...at]`

Critical

Secret Pattern

GitHub personal access token in src/_collections/utils/secret-mask.util.ts

src/_collections/utils/secret-mask.util.tsView on unpkg · L20

src/_collections/utils/regex/password-regex.util.spec.tsView file

13patternName = generic_password severity = medium line = 13 matchedText = const pa...1!';

Medium

Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L13

19patternName = generic_password severity = medium line = 19 matchedText = const pa...1!';

Medium

Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L19

25patternName = generic_password severity = medium line = 25 matchedText = const pa...d!';

Medium

Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L25

31patternName = generic_password severity = medium line = 31 matchedText = const pa...d1';

Medium

Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L31

Findings

5 Critical2 High11 Medium5 Low

CriticalCritical Secretbuild/_collections/utils/secret-mask.util.d.ts

CriticalSecret Patternbuild/_collections/utils/secret-mask.util.d.ts

CriticalSecret Patternbuild/_collections/utils/secret-mask.util.js

CriticalSecret Patternsrc/_modules/security/_collections/stored-secret.util.spec.ts

CriticalSecret Patternsrc/_collections/utils/secret-mask.util.ts

HighChild Processscripts/run-coverage-tests.js

HighRuntime Package Installscripts/run-coverage-tests.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patternbuild/_modules/ngx-models/_enums/html/input-types.enum.d.ts

MediumSecret Patternbuild/_modules/ngx-models/_enums/field-type.enum.d.ts

MediumSecret Patternsrc/_modules/crypto/_collections/crypto.util.edge.spec.ts

MediumSecret Patternsrc/_modules/ngx-models/_enums/html/input-types.enum.ts

MediumSecret Patternsrc/_modules/ngx-models/_enums/field-type.enum.ts

MediumSecret Patternsrc/_collections/utils/regex/password-regex.util.spec.ts

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

build/_collections/utils/secret-mask.util.jsView file

Lines 1-41javascript

1"use strict";

2/**

3 * FR-093 (2026-06-09) — Universal secret/key masking utility (bedrock level).

4 *

5 * Lehetove teszi az ALL-FDP-systems-szintu secret-szivargas-detection +

6 * maszkolas-t egy bedrock-szinten. A korabban Overseer / runner-worker

7 * helyi util-jai (FR-092) most ezt importaljak — egy SOR konfiguracio +

8 * find-and-replace.

9 *

10 * User feedback ('az osszes rendszerunknek a lenyege az univerzalizalt,

11 * mindenhol hasznalhato, egysegesített megoldások'): every secret-pattern

12 * ennek a egyetlen DyFM_SecretMask_Util-nak a felelossege.

13 *

14 * Strategy — KETTOS:

15 * 1. **PATTERN-based**: ismert secret-formatumokra automatikus felismeres.

16 * 2. **VALUE-based**: a process.env-jenek secret-erteket overlay-eli minden szovegben.

17 *

18 * Identifiability config (`DyFM_SecretMask_Settings.partialReveal`):

19 * - DEFAULT: `{ prefix: 4, suffix: 4 }` — a kulcsok elso 4 + utolso 4 char-ja

20 * megorzodik, kozeppe `[redacted-<KIND>]` keruln, pl.:

21 * `ghp_abcdefghij1234567890abcdefghij12345678` → `ghp_abcd...5678 [redacted-github-pat]`

Critical

Secret Pattern

GitHub personal access token in build/_collections/utils/secret-mask.util.js

build/_collections/utils/secret-mask.util.jsView on unpkg · L21

22 * - User-extensible: csokkentett vagy 0-os reveal a tobb-biztonsagos

23 * deploymentekhez (`{ prefix: 0, suffix: 0 }` → tisztan opaque).

24 *

25 * Per memory `[[feedback_rich_error_handling]]`: a maszkolt token jelzes ne

26 * legyen `***` opaque; legyen `[redacted-<KIND>]` hogy ranezessel lassuk MILYEN

27 * tipusu szivargast szuntunk meg.

28 *

29 * Pattern-mapping per memory `[[feedback_individual_plans]]` — single source of

30 * truth: minden uj secret-format hozzaadando a `DyFM_SECRET_PATTERNS` array-hez;

31 * a tobbi rendszerben (Overseer/runner/bedrock packages) automatikusan

32 * megjelenik a fsm-bump utan.

33 */

34Object.defineProperty(exports, "__esModule", { value: true });

35exports.DyFM_SECRET_PATTERNS = exports.DyFM_DEFAULT_SECRET_MASK_SETTINGS = void 0;

36exports.DyFM_maskSecrets = DyFM_maskSecrets;

37exports.DyFM_maskSecretsDeep = DyFM_maskSecretsDeep;

38exports.DyFM_DEFAULT_SECRET_MASK_SETTINGS = {

39 partialReveal: {

40 prefix: 4,

41 suffix: 4,

src/_modules/crypto/_collections/crypto.util.edge.spec.tsView file

Lines 439-479typescript

439 // Simulate multiple database operations

440 const encrypted1 = DyFM_Crypto.encrypt(userData, key);

441 const decrypted1 = DyFM_Crypto.decrypt(encrypted1, key) as UserData;

442

443 // Simulate data update with a different timestamp

444 const updatedData: UserData = {

445 ...decrypted1,

446 lastLogin: '2024-01-02T15:30:00.000Z'

447 };

448 const encrypted2 = DyFM_Crypto.encrypt(updatedData, key);

449 const decrypted2 = DyFM_Crypto.decrypt(encrypted2, key) as UserData;

450

451 expect(decrypted1).toEqual(userData);

452 expect(decrypted2).toEqual(updatedData);

453 expect(decrypted2.lastLogin).not.toBe(userData.lastLogin);

454 });

455

456 it('| should maintain data integrity through multiple database operations', () => {

457 const sensitiveData = {

458 id: 1,

459 password: 'hashed-password-123',

Medium

Secret Pattern

Hardcoded password in src/_modules/crypto/_collections/crypto.util.edge.spec.ts

src/_modules/crypto/_collections/crypto.util.edge.spec.tsView on unpkg · L459

460 securityQuestions: [

461 { question: 'What is your pet name?', answer: 'Fluffy' },

462 { question: 'Where were you born?', answer: 'New York' }

463 ]

464 };

465 const key = 'sensitive-data-key';

466

467 // Simulate multiple database operations with the same data

468 const encrypted1 = DyFM_Crypto.encrypt(sensitiveData, key);

469 const decrypted1 = DyFM_Crypto.decrypt(encrypted1, key);

470 const encrypted2 = DyFM_Crypto.encrypt(decrypted1, key);

471 const decrypted2 = DyFM_Crypto.decrypt(encrypted2, key);

472

473 expect(decrypted1).toEqual(sensitiveData);

474 expect(decrypted2).toEqual(sensitiveData);

475 expect(encrypted1).toBe(encrypted2); // Different encryption instances

476 });

477 });

478

479 describe('| special characters', () => {