registry / @jsm-mit/sultana-core-motoko-package / 0.0.5

@jsm-mit/sultana-core-motoko-package@0.0.5

A TypeScript library for interacting with the Sultana Core Motoko actor on the Internet Computer (IC) platform.

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 32 file(s), 156 KB of source, external domains: icp0.io

Source & flagged code

5 flagged

README.mdView file

Lines 14-66markdown

14dfx identity new worker1

15dfx identity new customer1

16```

18### 2. Export PEM values

20Export the PEM for each identity and copy the output:

22```bash

23dfx identity export superadmin

24dfx identity export owner1

Source & flagged code

5 flagged · loading source

README.mdView file

34patternName = private_key_ec severity = critical line = 34 matchedText = IDENTITY...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code