registry / @graphlit/durable-agents-sdk / 1.0.20260703011-dev

@graphlit/durable-agents-sdk@1.0.20260703011-dev

TypeScript SDK for the Durable Agents public API.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 92 file(s), 520 KB of source, external domains: dev.durableagents.ai

Source & flagged code

4 flagged

dist/src/generated/models/index.jsView file

Lines 8365-8413javascript

8365 Google_drive: "google_drive",

8366 Hub_spot: "hub_spot",

8367 Intercom: "intercom",

8368 Jira: "jira",

8369 Linear: "linear",

8370 Linked_in: "linked_in",

8371 Microsoft_calendar: "microsoft_calendar",

8372 Microsoft_outlook: "microsoft_outlook",

8373 Microsoft_teams: "microsoft_teams",

8374 Microsoft_word: "microsoft_word",

8375 Notion: "notion",

8376 One_drive: "one_drive",

8377 Salesforce: "salesforce",

8378 Share_point: "share_point",

8379 Slack: "slack",

8380 Twitter: "twitter",

8381 Zendesk: "zendesk",

8382};

8383export const TeamsSetupGuide_do_not_proceed_until_createObject = {

8384 Bot_id: "bot_id",

8385 Bot_password: "bot_password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/generated/models/index.jsView on unpkg · L8385

8386 Tenant_id: "tenant_id",

8387};

8388export const TeamsSetupGuide_recommended_bot_typeObject = {

8389 Single_tenant: "single_tenant",

8390};

8391export const TeamsSetupGuide_required_credentialsObject = {

8392 Bot_id: "bot_id",

8393 Bot_password: "bot_password",

Medium

Secret Pattern

Hardcoded password in dist/src/generated/models/index.js

dist/src/generated/models/index.jsView on unpkg · L8393

8394 Tenant_id: "tenant_id",

8395};

8396export const VfsBody_formatObject = {

8397 Markdown: "markdown",

8398 Summary: "summary",

8399 Name: "name",

8400};

8401export const VfsEntry_kindObject = {

8402 Directory: "directory",

8403 Content: "content",

8404};

8405export const VoiceNumber_providerObject = {

8406 Twilio: "twilio",

8407};

8408export const VoiceNumber_statusObject = {

8409 Available: "available",

8410 Bound: "bound",

8411};

8412export const VoiceStatus_providerObject = {

8413 Twilio: "twilio",

dist/src/generated/models/index.d.tsView file

Lines 8093-8141typescript

8093 readonly Google_drive: "google_drive";

8094 readonly Hub_spot: "hub_spot";

8095 readonly Intercom: "intercom";

8096 readonly Jira: "jira";

8097 readonly Linear: "linear";

8098 readonly

Source & flagged code

4 flagged · loading source

dist/src/generated/models/index.jsView file

8385patternName = generic_password severity = medium line = 8385 matchedText = Bot_pass...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/generated/models/index.jsView on unpkg · L8385

8393patternName = generic_password severity = medium line = 8393 matchedText = Bot_pass...rd",

Medium

Secret Pattern

Hardcoded password in dist/src/generated/models/index.js

dist/src/generated/models/index.jsView on unpkg · L8393

dist/src/generated/models/index.d.tsView file

8113patternName = generic_password severity = medium line = 8113 matchedText = readonly...rd";

Medium

Secret Pattern

Hardcoded password in dist/src/generated/models/index.d.ts

dist/src/generated/models/index.d.tsView on unpkg · L8113

8121patternName = generic_password severity = medium line = 8121 matchedText = readonly...rd";

Medium

Secret Pattern

Hardcoded password in dist/src/generated/models/index.d.ts

dist/src/generated/models/index.d.tsView on unpkg · L8121

Findings

4 Medium3 Low

MediumSecret Patterndist/src/generated/models/index.js

MediumSecret Patterndist/src/generated/models/index.d.ts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/src/generated/models/index.jsView file

Lines 8365-8413javascript

8365 Google_drive: "google_drive",

8366 Hub_spot: "hub_spot",

8367 Intercom: "intercom",

8368 Jira: "jira",

8369 Linear: "linear",

8370 Linked_in: "linked_in",

8371 Microsoft_calendar: "microsoft_calendar",

8372 Microsoft_outlook: "microsoft_outlook",

8373 Microsoft_teams: "microsoft_teams",

8374 Microsoft_word: "microsoft_word",

8375 Notion: "notion",

8376 One_drive: "one_drive",

8377 Salesforce: "salesforce",

8378 Share_point: "share_point",

8379 Slack: "slack",

8380 Twitter: "twitter",

8381 Zendesk: "zendesk",

8382};

8383export const TeamsSetupGuide_do_not_proceed_until_createObject = {

8384 Bot_id: "bot_id",

8385 Bot_password: "bot_password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/generated/models/index.jsView on unpkg · L8385

8386 Tenant_id: "tenant_id",

8387};

8388export const TeamsSetupGuide_recommended_bot_typeObject = {

8389 Single_tenant: "single_tenant",

8390};

8391export const TeamsSetupGuide_required_credentialsObject = {

8392 Bot_id: "bot_id",

8393 Bot_password: "bot_password",

Medium

Secret Pattern

Hardcoded password in dist/src/generated/models/index.js

dist/src/generated/models/index.jsView on unpkg · L8393

8394 Tenant_id: "tenant_id",

8395};

8396export const VfsBody_formatObject = {

8397 Markdown: "markdown",

8398 Summary: "summary",

8399 Name: "name",

8400};

8401export const VfsEntry_kindObject = {

8402 Directory: "directory",

8403 Content: "content",

8404};

8405export const VoiceNumber_providerObject = {

8406 Twilio: "twilio",

8407};

8408export const VoiceNumber_statusObject = {

8409 Available: "available",

8410 Bound: "bound",

8411};

8412export const VoiceStatus_providerObject = {

8413 Twilio: "twilio",

dist/src/generated/models/index.d.tsView file

Lines 8093-8141typescript

8093 readonly Google_drive: "google_drive";

8094 readonly Hub_spot: "hub_spot";

8095 readonly Intercom: "intercom";

8096 readonly Jira: "jira";

8097 readonly Linear: "linear";

8098 readonly