Loading npm security reports…

@laserfiche/lf-api-client-core: Clean npm security report (Allow) | LPM Firewall

registry / @laserfiche/lf-api-client-core / 1.1.21

@laserfiche/lf-api-client-core@1.1.21

Javascript Library containing the implementation of OAuth 2.0 credential handlers for the Laserfiche API and additional utility functions.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 96.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Network

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 40.1 KB of source

Source & flagged code

3 flagged

dist/lib/utils/JwtUtils.d.tsView file

Lines 55-95typescript

55 * Returns Laserfiche trustee id (user id) from Laserfiche jwt claims

56 * @param lfJwt - Laserfiche JWT

57 * @returns

58 * @example

59 * ```typescript

60 * const jwt : AccessTokenUtils.JWT = {

61 * header: { 'typ': 'JWT'},

62 * payload: {'trid' : '1008'},

63 * signature: '_signature'

64 * }

65 * getTrusteeIdFromLfJWT(jwt); // '1008';

66 * ```

67 */

68export declare function getTrusteeIdFromLfJWT(lfJwt: JWT): string;

69/**

70 * Parses a base64-encoded jwt

71 * @param jwt - JWT encoded as base64 string

72 * @returns

73 * @example

74 * ```typescript

75 * const jwtString = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib/utils/JwtUtils.d.tsView on unpkg · L75

Critical

Secret Pattern

Supabase service role key (JWT) in dist/lib/utils/JwtUtils.d.ts

dist/lib/utils/JwtUtils.d.tsView on unpkg · L75

76 * parseAccessToken(jstString);

77 * // => {

78 * header:

79 * {

80 * 'alg': 'HS256',

81 * 'typ': 'JWT'

82 * },

83 * payload:

84 * {

85 * 'sub': '1234567890',

86 * 'name': 'John Doe',

87 * 'iat': 1516239022

88 * },

89 * signature: 'SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c'

90 * }

91 * ```

92 */

93export declare function parseAccessToken(jwt: string): JWT;

94/**

95 * Function that determines if the environment is in a browser or not

dist/lib/utils/JwtUtils.jsView file

Lines 55-95javascript

55 * @returns

56 * @example

57 * ```typescript

58 * const jwt : AccessTokenUtils.JWT = {

59 * header: { 'typ': 'JWT'},

60 * payload: {'trid' : '1008'},

61 * signature: '_signature'

62 * }

Source & flagged code

3 flagged · loading source

dist/lib/utils/JwtUtils.d.tsView file

75patternName = supabase_service_key severity = critical line = 75 matchedText = * const ...5c';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib/utils/JwtUtils.d.ts

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code