@hed-hog/core@0.0.382: Clean npm security report (Allow)

Loading npm security reports…

@hed-hog/core@0.0.382: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

7 flagged

dist/install/dto/install.dto.jsView file

Lines 2-42javascript

2var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {

3 var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

4 if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);

5 else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c

6 return c > 3 && r && Object.defineProperty(target, key, r), r;

7};

8var __metadata = (this && this.__metadata) || function (k, v) {

9 if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);

10};

11Object.defineProperty(exports, "__esModule", { value: true });

12exports.InstallDTO = void 0;

13const api_locale_1 = require("@hed-hog/api-locale");

14const class_validator_1 = require("class-validator");

15const is_email_with_settings_validator_1 = require("../../validators/is-email-with-settings.validator");

16class InstallDTO {

17 constructor() {

18 this.appName = 'HedHog';

19 this.slogan = 'Administration Panel';

20 this.userName = 'Root User';

21 this.email = 'root@hedhog.com';

22 this.password = 'changeme';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/install/dto/install.dto.jsView on unpkg · L22

23 this.adminUrl = 'http://localhost:3200';

24 this.apiUrl = 'http://localhost:3100';

25 }

26}

27exports.InstallDTO = InstallDTO;

28__decorate([

29 (0, class_validator_1.IsOptional)(),

30 (0, class_validator_1.IsString)({ message: 'Nome da aplicação obrigatório' }),

31 (0, class_validator_1.MinLength)(1, { message: 'Nome da aplicação obrigatório' }),

32 __metadata("design:type", String)

33], InstallDTO.prototype, "appName", void 0);

34__decorate([

35 (0, class_validator_1.IsOptional)(),

36 (0, class_validator_1.IsString)({ message: 'Slogan obrigatório' }),

37 (0, class_validator_1.MinLength)(1, { message: 'Slogan obrigatório' }),

38 __metadata("design:type", String)

39], InstallDTO.prototype, "slogan", void 0);

40__decorate([

41 (0, class_validator_1.IsOptional)(),

42 (0, class_validator_1.IsString)({ message: 'Nome de usuário obrigatório' }),

dist/pdf/pdf.service.jsView file

Lines 111-151javascript

111 const port = (_a = this.configService.get('PORT')) !== null && _a !== void 0 ? _a

dist/dto/update-ids.dto.jsView file

Lines 1-28javascript

1"use strict";

2var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {

3 var

src/user/user.service.tsView file

Lines 54-94typescript

54 'updated_at',

55] as const;

57const USER_SEARCH_FIELDS = ['name'] as const;

59type

src/user/user.service.spec.tsView file

Lines 178-220typescript

178 });

179

180 it('não registra mudança quando nome igual', async () => {

181 const { service, deps } = makeService();

182 deps.prismaService.user.findUnique.

Source & flagged code

7 flagged · loading source

dist/install/dto/install.dto.jsView file

22patternName = generic_password severity = medium line = 22 matchedText = this.pas...me';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/install/dto/install.dto.jsView on unpkg · L22

dist/pdf/pdf.service.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @hed-hog/core@0.0.373 matchedIdentity = npm:QGhlZC1ob2cvY29yZQ:0.0.373 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/pdf/pdf.service.jsView on unpkg

131try { L132: const importPlaywright = new Function('moduleName', 'return import(moduleName);'); L133: const playwright = await importPlaywright('playwright');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pdf/pdf.service.jsView on unpkg · L131

dist/dto/update-ids.dto.jsView file

12exports.UpdateIdsDTO = void 0; L13: const api_locale_1 = require("@hed-hog/api-locale"); L14: const class_validator_1 = require("class-validator");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/dto/update-ids.dto.jsView on unpkg · L12

src/user/user.service.tsView file

74@Inject(forwardRef(() => PrismaService)) L75: private readonly prismaService: PrismaService, L76: @Inject(forwardRef(() => PaginationService)) ... L188: const user = await tx.user.create({ L189: data: { L190: name,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/user/user.service.tsView on unpkg · L74

src/user/user.service.spec.tsView file

198patternName = generic_password severity = medium line = 198 matchedText = const re...ny);

Medium

Secret Pattern

Hardcoded password in src/user/user.service.spec.ts

src/user/user.service.spec.tsView on unpkg · L198

200patternName = generic_password severity = medium line = 200 matchedText = expect(r... });

Medium

Secret Pattern

Hardcoded password in src/user/user.service.spec.ts

src/user/user.service.spec.tsView on unpkg · L200

Source & flagged code

7 flagged

dist/install/dto/install.dto.jsView file

Lines 2-42javascript

2var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {

3 var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;

4 if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);

5 else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c

6 return c > 3 && r && Object.defineProperty(target, key, r), r;

7};

8var __metadata = (this && this.__metadata) || function (k, v) {

9 if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);

10};

11Object.defineProperty(exports, "__esModule", { value: true });

12exports.InstallDTO = void 0;

13const api_locale_1 = require("@hed-hog/api-locale");

14const class_validator_1 = require("class-validator");

15const is_email_with_settings_validator_1 = require("../../validators/is-email-with-settings.validator");

16class InstallDTO {

17 constructor() {

18 this.appName = 'HedHog';

19 this.slogan = 'Administration Panel';

20 this.userName = 'Root User';

21 this.email = 'root@hedhog.com';

22 this.password = 'changeme';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/install/dto/install.dto.jsView on unpkg · L22

23 this.adminUrl = 'http://localhost:3200';

24 this.apiUrl = 'http://localhost:3100';

25 }

26}

27exports.InstallDTO = InstallDTO;

28__decorate([

29 (0, class_validator_1.IsOptional)(),

30 (0, class_validator_1.IsString)({ message: 'Nome da aplicação obrigatório' }),

31 (0, class_validator_1.MinLength)(1, { message: 'Nome da aplicação obrigatório' }),

32 __metadata("design:type", String)

33], InstallDTO.prototype, "appName", void 0);

34__decorate([

35 (0, class_validator_1.IsOptional)(),

36 (0, class_validator_1.IsString)({ message: 'Slogan obrigatório' }),

37 (0, class_validator_1.MinLength)(1, { message: 'Slogan obrigatório' }),

38 __metadata("design:type", String)

39], InstallDTO.prototype, "slogan", void 0);

40__decorate([

41 (0, class_validator_1.IsOptional)(),

42 (0, class_validator_1.IsString)({ message: 'Nome de usuário obrigatório' }),

dist/pdf/pdf.service.jsView file

Lines 111-151javascript

111 const port = (_a = this.configService.get('PORT')) !== null && _a !== void 0 ? _a

dist/dto/update-ids.dto.jsView file

Lines 1-28javascript

1"use strict";

2var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {

3 var

src/user/user.service.tsView file

Lines 54-94typescript

54 'updated_at',

55] as const;

57const USER_SEARCH_FIELDS = ['name'] as const;

59type

src/user/user.service.spec.tsView file

Lines 178-220typescript

178 });

179

180 it('não registra mudança quando nome igual', async () => {

181 const { service, deps } = makeService();

182 deps.prismaService.user.findUnique.

@hed-hog/core@0.0.382

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code