registry / @getmicdrop/venue-calendar / 4.0.107

@getmicdrop/venue-calendar@4.0.107

A customizable Svelte calendar component for displaying comedy events

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 30 file(s), 3.48 MB of source, external domains: calendar.google.com, connect.facebook.net, docs.stripe.com, get-micdrop.com, github.com, images.unsplash.com, js.stripe.com, moxy.sfo3.cdn.digitaloceanspaces.com, moxy.sfo3.digitaloceanspaces.com, outlook.live.com, schema.org, svelte.dev, www.google.com, www.googletagmanager.com, www.w3.org

Source & flagged code

9 flagged

dist/labels-DgU1irgj.jsView file

Lines 474-514javascript

474 includesFees: "Includes",

475 fees: "fees",

476 fee: "fee",

477 // ── Checkout CTAs ─────────────────────────────────────────────────

478 checkout: "Checkout",

479 getTickets: "Get tickets",

480 selectTickets: "Select tickets",

481 selectTicketsBelow: "Select tickets below",

482 selectTicketsToContinue: "Select tickets to continue",

483 reserveASpot: "Reserve a spot",

484 // ── Password modal / gate ─────────────────────────────────────────

485 enterPassword: "Enter Password",

486 enterEventPassword: "Enter event password",

487 passwordRequired: "Password Required",

488 passwordRequiredShort: "Password required",

489 eventRequiresPassword: "This event requires a password to purchase tickets.",

490 eventRequiresPasswordAccess: "This event requires a password to access tickets.",

491 enterEventPasswordToView: "Enter the event password to view tickets.",

492 enterEventPasswordToViewAvailable: "Enter the event password to view available tickets.",

493 eventPassword: "Event password",

494 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/labels-DgU1irgj.jsView on unpkg · L494

495 pleaseEnterPassword: "Please enter the event password",

496 pleaseEnterAPassword: "Please enter a password",

497 eventRequiresPasswordShort: "This event requires a password",

498 unlockTickets: "Unlock tickets",

499 cancel: "Cancel",

500 continue: "Continue",

501 submit: "Submit",

502 // ── Order summary ─────────────────────────────────────────────────

503 subtotal: "Subtotal",

504 serviceFees: "Service fees",

505 taxes: "Taxes",

506 tax: "Tax",

507 promoDiscount: "Promo discount",

508 giftCard: "Gift card",

509 total: "Total",

510 orderSummary: "Order summary",

511 yourOrder: "Your Order",

512 // ── Ticket counts (used in CTA buttons) ───────────────────────────

513 ticket: "ticket",

514 tickets: "tickets",

dist/venue-calendar.umd.jsView file

17patternName = generic_password severity = medium line = 17 matchedText = `&&g()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L17

29patternName = generic_password severity = medium line = 29 matchedText = ${be??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L29

dist/venue-calendar.iife.jsView file

32patternName = generic_password severity = medium line = 32 matchedText = `&&c()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L32

44patternName = generic_password severity = medium line = 44 matchedText = ${Le??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L44

dist/api/api.cjsView file

Lines 1-3javascript

1"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const S=require("@getmicdrop/svelte-components/utils/logger"),U=require("@getmicdrop/svelte-components/errors"),p=require("@getmicdrop/svelte-components"),M=require("@getmicdrop/svelte-components/datetime"),Ce=require("@getmicdrop/svelte-components/transforms"

dist/api/api.mjsView file

Lines 679-734javascript

679 try {

680 const r = e ? `${c()}/collections/${t}?password=${encodeURIComponent(e)}` : `${c()}/collections/${t}`, n = await

dist/VenueCalendar-DmxiEy6q.jsView file

12776patternName = generic_password severity = medium line = 12776 matchedText = return X...1 };

Medium

Secret Pattern

Hardcoded password in dist/VenueCalendar-DmxiEy6q.js

dist/VenueCalendar-DmxiEy6q.jsView on unpkg · L12776

Source & flagged code

9 flagged · loading source

dist/labels-DgU1irgj.jsView file

494patternName = generic_password severity = medium line = 494 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/labels-DgU1irgj.jsView on unpkg · L494

dist/venue-calendar.umd.jsView file

17patternName = generic_password severity = medium line = 17 matchedText = `&&g()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L17

29patternName = generic_password severity = medium line = 29 matchedText = ${be??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L29

dist/venue-calendar.iife.jsView file

32patternName = generic_password severity = medium line = 32 matchedText = `&&c()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L32

44patternName = generic_password severity = medium line = 44 matchedText = ${Le??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L44

dist/api/api.cjsView file

1patternName = generic_password severity = medium line = 1 matchedText = "use str...=Vt;

Medium

Secret Pattern

Hardcoded password in dist/api/api.cjs

dist/api/api.cjsView on unpkg · L1

dist/api/api.mjsView file

699patternName = generic_password severity = medium line = 699 matchedText = return m... !1;

Medium

Secret Pattern

Hardcoded password in dist/api/api.mjs

dist/api/api.mjsView on unpkg · L699

714patternName = generic_password severity = medium line = 714 matchedText = return m...1 };

Medium

Secret Pattern

Hardcoded password in dist/api/api.mjs

dist/api/api.mjsView on unpkg · L714

dist/VenueCalendar-DmxiEy6q.jsView file

12776patternName = generic_password severity = medium line = 12776 matchedText = return X...1 };

Medium

Secret Pattern

Hardcoded password in dist/VenueCalendar-DmxiEy6q.js

dist/VenueCalendar-DmxiEy6q.jsView on unpkg · L12776

Findings

12 Medium4 Low

MediumSecret Patterndist/labels-DgU1irgj.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/venue-calendar.umd.js

MediumSecret Patterndist/venue-calendar.iife.js

MediumSecret Patterndist/api/api.cjs

MediumSecret Patterndist/api/api.mjs

MediumSecret Patterndist/VenueCalendar-DmxiEy6q.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/labels-DgU1irgj.jsView file

Lines 474-514javascript

474 includesFees: "Includes",

475 fees: "fees",

476 fee: "fee",

477 // ── Checkout CTAs ─────────────────────────────────────────────────

478 checkout: "Checkout",

479 getTickets: "Get tickets",

480 selectTickets: "Select tickets",

481 selectTicketsBelow: "Select tickets below",

482 selectTicketsToContinue: "Select tickets to continue",

483 reserveASpot: "Reserve a spot",

484 // ── Password modal / gate ─────────────────────────────────────────

485 enterPassword: "Enter Password",

486 enterEventPassword: "Enter event password",

487 passwordRequired: "Password Required",

488 passwordRequiredShort: "Password required",

489 eventRequiresPassword: "This event requires a password to purchase tickets.",

490 eventRequiresPasswordAccess: "This event requires a password to access tickets.",

491 enterEventPasswordToView: "Enter the event password to view tickets.",

492 enterEventPasswordToViewAvailable: "Enter the event password to view available tickets.",

493 eventPassword: "Event password",

494 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/labels-DgU1irgj.jsView on unpkg · L494

495 pleaseEnterPassword: "Please enter the event password",

496 pleaseEnterAPassword: "Please enter a password",

497 eventRequiresPasswordShort: "This event requires a password",

498 unlockTickets: "Unlock tickets",

499 cancel: "Cancel",

500 continue: "Continue",

501 submit: "Submit",

502 // ── Order summary ─────────────────────────────────────────────────

503 subtotal: "Subtotal",

504 serviceFees: "Service fees",

505 taxes: "Taxes",

506 tax: "Tax",

507 promoDiscount: "Promo discount",

508 giftCard: "Gift card",

509 total: "Total",

510 orderSummary: "Order summary",

511 yourOrder: "Your Order",

512 // ── Ticket counts (used in CTA buttons) ───────────────────────────

513 ticket: "ticket",

514 tickets: "tickets",

dist/venue-calendar.umd.jsView file

17patternName = generic_password severity = medium line = 17 matchedText = `&&g()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L17

29patternName = generic_password severity = medium line = 29 matchedText = ${be??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.umd.js

dist/venue-calendar.umd.jsView on unpkg · L29

dist/venue-calendar.iife.jsView file

32patternName = generic_password severity = medium line = 32 matchedText = `&&c()}r...ne">

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L32

44patternName = generic_password severity = medium line = 44 matchedText = ${Le??""...ghs.

Medium

Secret Pattern

Hardcoded password in dist/venue-calendar.iife.js

dist/venue-calendar.iife.jsView on unpkg · L44

dist/api/api.cjsView file

Lines 1-3javascript

dist/api/api.mjsView file

Lines 679-734javascript

679 try {

680 const r = e ? `${c()}/collections/${t}?password=${encodeURIComponent(e)}` : `${c()}/collections/${t}`, n = await

dist/VenueCalendar-DmxiEy6q.jsView file

12776patternName = generic_password severity = medium line = 12776 matchedText = return X...1 };

Medium

Secret Pattern

Hardcoded password in dist/VenueCalendar-DmxiEy6q.js

dist/VenueCalendar-DmxiEy6q.jsView on unpkg · L12776