registry  /  @keshavsoft-org/express-todo  /  1.12.9

@keshavsoft-org/express-todo@1.12.9

CLI to scaffold Express.js projects using templates

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 678 file(s), 346 KB of source, external domains: keshavsoft.github.io, www.w3.org

Source & flagged code

1 flagged · loading source
bin/v12/commands/simpleWithUi/template/v2/.env.localView file
•patternName = blocked_file severity = critical matchedText = [redacted]/.env.local redactedSecretContext = secretLikeLines = 0 notes = no secret-like key/value lines found in sampled text
Critical
Critical Secret

Package contains a critical-looking secret pattern.

bin/v12/commands/simpleWithUi/template/v2/.env.localView on unpkg

Findings

1 Critical2 Medium4 Low
CriticalCritical Secretbin/v12/commands/simpleWithUi/template/v2/.env.local
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License