registry  /  @geek-fun/serverlessinsight  /  0.7.8

@geek-fun/serverlessinsight@0.7.8

Full life cycle cross providers serverless application management for your fast-growing business.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 183 file(s), 1.08 MB of source, external domains: oss.console.aliyun.com, serverlessinsight.geekfun.club

Source & flagged code

5 flagged · loading source
samples/aliyun-poc-rds.ymlView file
21patternName = generic_password severity = medium line = 21 matchedText = password...qFg'
Medium
Secret Pattern

Package contains a possible secret pattern.

samples/aliyun-poc-rds.ymlView on unpkg · L21
dist/src/stack/localStack/functionRunner.jsView file
58// which would replace import() with require() that breaks with file:// URLs L59: const importModule = new Function('specifier', 'return import(specifier)'); L60: const fileUrl = (0, node_url_1.pathToFileURL)(handlerPath + '.js').href;
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/src/stack/localStack/functionRunner.jsView on unpkg · L58
dist/src/types/index.jsView file
16Object.defineProperty(exports, "__esModule", { value: true }); L17: __exportStar(require("./domains/resolvable"), exports); L18: __exportStar(require("./domains/database"), exports);
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/src/types/index.jsView on unpkg · L16
samples/aliyun-poc-es.ymlView file
24patternName = generic_password severity = medium line = 24 matchedText = password...qFg'
Medium
Secret Pattern

Hardcoded password in samples/aliyun-poc-es.yml

samples/aliyun-poc-es.ymlView on unpkg · L24
32patternName = generic_password severity = medium line = 32 matchedText = password...qFg'
Medium
Secret Pattern

Hardcoded password in samples/aliyun-poc-es.yml

samples/aliyun-poc-es.ymlView on unpkg · L32

Findings

7 Medium6 Low
MediumSecret Patternsamples/aliyun-poc-rds.yml
MediumDynamic Requiredist/src/types/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsamples/aliyun-poc-es.yml
MediumSecret Patternsamples/aliyun-poc-es.yml
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/src/stack/localStack/functionRunner.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings