registry / @hotmeshio/hotmesh / 0.25.1

@hotmeshio/hotmesh@0.25.1

Durable Workflow

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStrings

Manifest

NoLicense

scanned 199 file(s), 1.48 MB of source

Source & flagged code

1 flagged

build/services/connector/providers/postgres.jsView file

Lines 1-33javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.PostgresConnection = void 0;

4const __1 = require("..");

5const utils_1 = require("../../../modules/utils");

6class PostgresConnection extends __1.AbstractConnection {

7 constructor() {

8 super(...arguments);

9 this.defaultOptions = {

10 host: 'postgres',

11 port: 5432,

12 user: 'postgres',

13 password: 'password',

Medium

Secret Pattern

Package contains a possible secret pattern.

build/services/connector/providers/postgres.jsView on unpkg · L13

14 database: 'hotmesh',

15 max: 20,

16 idleTimeoutMillis: 30000,

17 };

18 }

19 /**

20 * Get comprehensive connection statistics for monitoring taskQueue pooling effectiveness

21 */

22 static getConnectionStats() {

23 const taskQueueDetails = Array.from(this.taskQueueConnections.entries()).map(([key, connection]) => ({

24 key,

25 connectionId: connection.getConnectionId() || 'unknown',

26 reusedCount: connection.reusedCount || 0,

27 }));

28 return {

29 totalPoolClients: this.poolClientInstances.size,

30 totalConnections: this.connectionInstances.size,

31 taskQueueConnections: this.taskQueueConnections.size,

32 taskQueueDetails,

33 };

Source & flagged code

1 flagged · loading source

build/services/connector/providers/postgres.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = password...rd',

Medium

Secret Pattern

Package contains a possible secret pattern.

build/services/connector/providers/postgres.jsView on unpkg · L13

Findings

3 Medium4 Low

MediumSecret Patternbuild/services/connector/providers/postgres.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowNo License

Source & flagged code

1 flagged

build/services/connector/providers/postgres.jsView file

Lines 1-33javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.PostgresConnection = void 0;

4const __1 = require("..");

5const utils_1 = require("../../../modules/utils");

6class PostgresConnection extends __1.AbstractConnection {

7 constructor() {

8 super(...arguments);

9 this.defaultOptions = {

10 host: 'postgres',

11 port: 5432,

12 user: 'postgres',

13 password: 'password',

Medium

Secret Pattern

Package contains a possible secret pattern.

build/services/connector/providers/postgres.jsView on unpkg · L13

14 database: 'hotmesh',

15 max: 20,

16 idleTimeoutMillis: 30000,

17 };

18 }

19 /**

20 * Get comprehensive connection statistics for monitoring taskQueue pooling effectiveness

21 */

22 static getConnectionStats() {

23 const taskQueueDetails = Array.from(this.taskQueueConnections.entries()).map(([key, connection]) => ({

24 key,

25 connectionId: connection.getConnectionId() || 'unknown',

26 reusedCount: connection.reusedCount || 0,

27 }));

28 return {

29 totalPoolClients: this.poolClientInstances.size,

30 totalConnections: this.connectionInstances.size,

31 taskQueueConnections: this.taskQueueConnections.size,

32 taskQueueDetails,

33 };