registry / @getmicdrop/venue-calendar / 4.0.93

@getmicdrop/venue-calendar@4.0.93

A customizable Svelte calendar component for displaying comedy events

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 29 file(s), 3.38 MB of source, external domains: calendar.google.com, connect.facebook.net, docs.stripe.com, get-micdrop.com, github.com, images.unsplash.com, js.stripe.com, moxy.sfo3.cdn.digitaloceanspaces.com, moxy.sfo3.digitaloceanspaces.com, outlook.live.com, schema.org, svelte.dev, www.google.com, www.googletagmanager.com, www.w3.org

Source & flagged code

9 flagged

dist/labels-CnpAWtkz.jsView file

Lines 480-520javascript

480 includesFees: "Includes",

481 fees: "fees",

482 fee: "fee",

483 // ── Checkout CTAs ─────────────────────────────────────────────────

484 checkout: "Checkout",

485 getTickets: "Get tickets",

486 selectTickets: "Select tickets",

487 selectTicketsBelow: "Select tickets below",

488 selectTicketsToContinue: "Select tickets to continue",

489 reserveASpot: "Reserve a spot",

490 // ── Password modal / gate ─────────────────────────────────────────

491 enterPassword: "Enter Password",

492 enterEventPassword: "Enter event password",

493 passwordRequired: "Password Required",

494 passwordRequiredShort: "Password required",

495 eventRequiresPassword: "This event requires a password to purchase tickets.",

496 eventRequiresPasswordAccess: "This event requires a password to access tickets.",

497 enterEventPasswordToView: "Enter the event password to view tickets.",

498 enterEventPasswordToViewAvailable: "Enter the event password to view available tickets.",

499 eventPassword: "Event password",

500 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/labels-CnpAWtkz.jsView on unpkg · L500

501 pleaseEnterPassword: "Please enter the event password",

502 pleaseEnterAPassword: "Please enter a password",

503 eventRequiresPasswordShort: "This event requires a password",

504 unlockTickets: "Unlock tickets",

505 cancel: "Cancel",

506 continue: "Continue",

507 submit: "Submit",

508 // ── Order summary ─────────────────────────────────────────────────

509 subtotal: "Subtotal",

510 serviceFees: "Service fees",

511 taxes: "Taxes",

512 tax: "Tax",

513 promoDiscount: "Promo discount",

514 giftCard: "Gift card",

515 total: "Total",

516 orderSummary: "Order summary",

517 yourOrder: "Your Order",

518 // ── Ticket counts (used in CTA buttons) ───────────────────────────

519 ticket: "ticket",

520 tickets: "tickets",

dist/venue-calendar.umd.jsView file

15patternName = generic_password severity = medium line = 15 matchedText = `&&g()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L15

27patternName = generic_password severity = medium line = 27 matchedText = ${Y??""}...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L27

dist/VenueCalendar-Bth_j-Wp.jsView file

12034patternName = generic_password severity = medium line = 12034 matchedText = return l...1 };

Medium

Secret Pattern

Hardcoded password in dist/VenueCalendar-Bth_j-Wp.js

dist/VenueCalendar-Bth_j-Wp.jsView on unpkg · L12034

dist/venue-calendar.iife.jsView file

30patternName = generic_password severity = medium line = 30 matchedText = `&&c()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L30

42patternName = generic_password severity = medium line = 42 matchedText = ${oe??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L42

dist/api/api.cjsView file

Lines 1-3javascript

1"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const P=require("@getmicdrop/svelte-components/utils/logger"),f=require("@getmicdrop/svelte-components"),x=require("@getmicdrop/svelte-components/utils/formatters"),he=require("@getmicdrop/svelte-components/transforms"),q=P.createLogger

dist/api/api.mjsView file

Lines 666-706javascript

666async function qt(t, e) {

667 try {

668 const r = e ? `${c()}/collections/${t}?password=${encodeURIComponent(e)}` : `${

Source & flagged code

9 flagged · loading source

dist/labels-CnpAWtkz.jsView file

500patternName = generic_password severity = medium line = 500 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/labels-CnpAWtkz.jsView on unpkg · L500

dist/venue-calendar.umd.jsView file

15patternName = generic_password severity = medium line = 15 matchedText = `&&g()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L15

27patternName = generic_password severity = medium line = 27 matchedText = ${Y??""}...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L27

dist/VenueCalendar-Bth_j-Wp.jsView file

12034patternName = generic_password severity = medium line = 12034 matchedText = return l...1 };

Medium

Secret Pattern

Hardcoded password in dist/VenueCalendar-Bth_j-Wp.js

dist/VenueCalendar-Bth_j-Wp.jsView on unpkg · L12034

dist/venue-calendar.iife.jsView file

30patternName = generic_password severity = medium line = 30 matchedText = `&&c()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L30

42patternName = generic_password severity = medium line = 42 matchedText = ${oe??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L42

dist/api/api.cjsView file

1patternName = generic_password severity = medium line = 1 matchedText = "use str...=rt;

Medium

Secret Pattern

Hardcoded password in dist/api/api.cjs

dist/api/api.cjsView on unpkg · L1

dist/api/api.mjsView file

686patternName = generic_password severity = medium line = 686 matchedText = return m... !1;

Medium

Secret Pattern

Hardcoded password in dist/api/api.mjs

dist/api/api.mjsView on unpkg · L686

699patternName = generic_password severity = medium line = 699 matchedText = return m...1 };

Medium

Secret Pattern

Hardcoded password in dist/api/api.mjs

dist/api/api.mjsView on unpkg · L699

Findings

12 Medium4 Low

MediumSecret Patterndist/labels-CnpAWtkz.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/venue-calendar.umd.js

MediumSecret Patterndist/VenueCalendar-Bth_j-Wp.js

MediumSecret Patterndist/venue-calendar.iife.js

MediumSecret Patterndist/api/api.cjs

MediumSecret Patterndist/api/api.mjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/labels-CnpAWtkz.jsView file

Lines 480-520javascript

480 includesFees: "Includes",

481 fees: "fees",

482 fee: "fee",

483 // ── Checkout CTAs ─────────────────────────────────────────────────

484 checkout: "Checkout",

485 getTickets: "Get tickets",

486 selectTickets: "Select tickets",

487 selectTicketsBelow: "Select tickets below",

488 selectTicketsToContinue: "Select tickets to continue",

489 reserveASpot: "Reserve a spot",

490 // ── Password modal / gate ─────────────────────────────────────────

491 enterPassword: "Enter Password",

492 enterEventPassword: "Enter event password",

493 passwordRequired: "Password Required",

494 passwordRequiredShort: "Password required",

495 eventRequiresPassword: "This event requires a password to purchase tickets.",

496 eventRequiresPasswordAccess: "This event requires a password to access tickets.",

497 enterEventPasswordToView: "Enter the event password to view tickets.",

498 enterEventPasswordToViewAvailable: "Enter the event password to view available tickets.",

499 eventPassword: "Event password",

500 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/labels-CnpAWtkz.jsView on unpkg · L500

501 pleaseEnterPassword: "Please enter the event password",

502 pleaseEnterAPassword: "Please enter a password",

503 eventRequiresPasswordShort: "This event requires a password",

504 unlockTickets: "Unlock tickets",

505 cancel: "Cancel",

506 continue: "Continue",

507 submit: "Submit",

508 // ── Order summary ─────────────────────────────────────────────────

509 subtotal: "Subtotal",

510 serviceFees: "Service fees",

511 taxes: "Taxes",

512 tax: "Tax",

513 promoDiscount: "Promo discount",

514 giftCard: "Gift card",

515 total: "Total",

516 orderSummary: "Order summary",

517 yourOrder: "Your Order",

518 // ── Ticket counts (used in CTA buttons) ───────────────────────────

519 ticket: "ticket",

520 tickets: "tickets",

dist/venue-calendar.umd.jsView file

15patternName = generic_password severity = medium line = 15 matchedText = `&&g()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L15

27patternName = generic_password severity = medium line = 27 matchedText = ${Y??""}...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L27

dist/VenueCalendar-Bth_j-Wp.jsView file

12034patternName = generic_password severity = medium line = 12034 matchedText = return l...1 };

Medium

Secret Pattern

Hardcoded password in dist/VenueCalendar-Bth_j-Wp.js

dist/VenueCalendar-Bth_j-Wp.jsView on unpkg · L12034

dist/venue-calendar.iife.jsView file

30patternName = generic_password severity = medium line = 30 matchedText = `&&c()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L30

42patternName = generic_password severity = medium line = 42 matchedText = ${oe??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L42

dist/api/api.cjsView file

Lines 1-3javascript

dist/api/api.mjsView file

Lines 666-706javascript

666async function qt(t, e) {

667 try {

668 const r = e ? `${c()}/collections/${t}?password=${encodeURIComponent(e)}` : `${