registry / @lightdash/common / 0.3290.0

@lightdash/common@0.3290.0

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,512 file(s), 10.5 MB of source, external domains: anything.bad-example.com, api.githubcopilot.com, app.example.com, app.lightdash.cloud, attacker.invalid, docs.lightdash.com, evil.example.com, example.com, github.com, google.com, json-schema.org, malicious.com, placehold.co, schemas.getdbt.com, schemas.lightdash.com, www.lightdash.com, www.w3.org

Source & flagged code

13 flagged

dist/types/index.jsView file

Lines 274-370javascript

274}

275// Seeds

276export const SEED_ORG_1 = {

277 organization_uuid: '172a2270-000f-42be-9c68-c4752c23ae51',

278 organization_name: 'Jaffle Shop',

279};

280export const SEED_ORG_1_ADMIN = {

281 user_uuid: 'b264d83a-9000-426a-85ec-3f9c20f368ce',

282 first_name: 'David',

283 last_name: 'Attenborough',

284 is_marketing_opted_in: true,

285 is_tracking_anonymized: false,

286 is_setup_complete: true,

287 is_active: true,

288};

289export const SEED_ORG_1_ADMIN_EMAIL = {

290 email: 'demo@lightdash.com',

291 is_primary: true,

292};

293export const SEED_ORG_1_ADMIN_PASSWORD = {

294 password: 'demo_password!',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/types/index.jsView on unpkg · L294

295};

296export const SEED_ORG_1_ADMIN_ROLE = OrganizationMemberRole.ADMIN;

297export const SEED_ORG_1_EDITOR = {

298 user_uuid: '80fb8b59-d6b7-4ed6-b969-9849310f3e53',

299 first_name: 'Editor',

300 last_name: 'User',

301 is_marketing_opted_in: true,

302 is_tracking_anonymized: false,

303 is_setup_complete: true,

304 is_active: true,

305};

306export const SEED_ORG_1_EDITOR_EMAIL = {

307 email: 'demo2@lightdash.com',

308 is_primary: true,

309};

310export const SEED_ORG_1_EDITOR_PASSWORD = {

311 password: 'demo_password!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L311

312};

313export const SEED_ORG_1_EDITOR_ROLE = OrganizationMemberRole.EDITOR;

314export const SEED_ORG_1_VIEWER = {

315 user_uuid: 'e0dd2003-c291-4e14-b977-7a03b7edc842',

316 first_name: 'Viewer',

317 last_name: 'User',

318 is_marketing_opted_in: true,

319 is_tracking_anonymized: false,

320 is_setup_complete: true,

321 is_active: true,

322};

323export const SEED_ORG_1_VIEWER_EMAIL = {

324 email: 'demo3@lightdash.com',

325 is_primary: true,

326};

327export const SEED_ORG_1_VIEWER_PASSWORD = {

328 password: 'demo_password!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L328

329};

330export const SEED_ORG_1_VIEWER_ROLE = OrganizationMemberRole.VIEWER;

331// Another user

332export const SEED_ORG_2 = {

333 organization_uuid: '42339eef-359e-4ec4-b810-54ef0b4e3446',

334 organization_name: 'Another Shop',

335};

336export const SEED_ORG_2_ADMIN = {

337 user_uuid: '57cd4548-cbe3-42b3-aa13-97821713e307',

338 first_name: 'Another',

339 last_name: 'User',

340 is_marketing_opted_in: true,

341 is_tracking_anonymized: false,

342 is_setup_complete: true,

343 is_active: true,

344};

345export const SEED_ORG_2_ADMIN_EMAIL = {

346 email: 'another@lightdash.com',

347 is_primary: true,

348};

349export const SEED_ORG_2_ADMIN_PASSWORD = {

350 password: 'demo_password!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L350

351};

352export const SEED_ORG_2_ADMIN_ROLE = OrganizationMemberRole.ADMIN;

353export const SEED_EMBED_SECRET = 'zU3h50saDOO20czNFNRok';

354// Deterministic PAT for dev environment

355// Use with: Authorization: ApiKey ldpat_deadbeefdeadbeefdeadbeefdeadbeef

356export const SEED_PAT = {

357 token: 'ldpat_deadbeefdeadbeefdeadbeefdeadbeef',

358 description: 'Dev seed PAT',

359};

360export const SEED_PROJECT = {

361 project_uuid: '3675b69e-8324-4110-bdca-059031aa8da3',

362 name: 'Jaffle shop',

363 project_type: ProjectType.DEFAULT,

364 dbt_connection_type: DbtProjectType.DBT,

365 dbt_connection: null,

366 copied_from_project_uuid: null,

367 organization_warehouse_credentials_uuid: null,

368};

369export const SEED_SPACE = {

370 name: SEED_PROJECT.name,

dist/types/dbt/validation.csp.test.jsView file

Lines 8-33javascript

8 * property directly: importing the module must not generate code at all.

9 */

10describe('CSP: dbt/validation must not generate code at import (#21276)', () => {

11 const RealFunction = global.Function;

dist/esm/index.jsView file

Lines 274-348javascript

274}

275// Seeds

276export const SEED_ORG_1 = {

277 organization_uuid: '172a2270-000f-42be-9c68-c4752c23ae51',

278 organization_name: 'Jaffle Shop',

279};

280export const SEED_ORG_1_ADMIN = {

281

dist/cjs/index.jsView file

357patternName = generic_password severity = medium line = 357 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L357

374patternName = generic_password severity = medium line = 374 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L374

391patternName = generic_password severity = medium line = 391 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L391

413patternName = generic_password severity = medium line = 413 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L413

Source & flagged code

13 flagged · loading source

dist/types/index.jsView file

294patternName = generic_password severity = medium line = 294 matchedText = password...d!',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/types/index.jsView on unpkg · L294

311patternName = generic_password severity = medium line = 311 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L311

328patternName = generic_password severity = medium line = 328 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L328

350patternName = generic_password severity = medium line = 350 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L350

dist/types/dbt/validation.csp.test.jsView file

28vi.resetModules(); L29: await import('./validation'); L30: expect(constructed).toEqual([]);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/types/dbt/validation.csp.test.jsView on unpkg · L28

dist/esm/index.jsView file

294patternName = generic_password severity = medium line = 294 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/esm/index.js

dist/esm/index.jsView on unpkg · L294

311patternName = generic_password severity = medium line = 311 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/esm/index.js

dist/esm/index.jsView on unpkg · L311

328patternName = generic_password severity = medium line = 328 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/esm/index.js

dist/esm/index.jsView on unpkg · L328

350patternName = generic_password severity = medium line = 350 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/esm/index.js

dist/esm/index.jsView on unpkg · L350

dist/cjs/index.jsView file

357patternName = generic_password severity = medium line = 357 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L357

374patternName = generic_password severity = medium line = 374 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L374

391patternName = generic_password severity = medium line = 391 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L391

413patternName = generic_password severity = medium line = 413 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L413

Findings

14 Medium4 Low

MediumSecret Patterndist/types/index.js

MediumDynamic Requiredist/types/dbt/validation.csp.test.js

MediumEnvironment Vars

MediumSecret Patterndist/types/index.js

MediumSecret Patterndist/esm/index.js

MediumSecret Patterndist/cjs/index.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

13 flagged

dist/types/index.jsView file

Lines 274-370javascript

274}

275// Seeds

276export const SEED_ORG_1 = {

277 organization_uuid: '172a2270-000f-42be-9c68-c4752c23ae51',

278 organization_name: 'Jaffle Shop',

279};

280export const SEED_ORG_1_ADMIN = {

281 user_uuid: 'b264d83a-9000-426a-85ec-3f9c20f368ce',

282 first_name: 'David',

283 last_name: 'Attenborough',

284 is_marketing_opted_in: true,

285 is_tracking_anonymized: false,

286 is_setup_complete: true,

287 is_active: true,

288};

289export const SEED_ORG_1_ADMIN_EMAIL = {

290 email: 'demo@lightdash.com',

291 is_primary: true,

292};

293export const SEED_ORG_1_ADMIN_PASSWORD = {

294 password: 'demo_password!',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/types/index.jsView on unpkg · L294

295};

296export const SEED_ORG_1_ADMIN_ROLE = OrganizationMemberRole.ADMIN;

297export const SEED_ORG_1_EDITOR = {

298 user_uuid: '80fb8b59-d6b7-4ed6-b969-9849310f3e53',

299 first_name: 'Editor',

300 last_name: 'User',

301 is_marketing_opted_in: true,

302 is_tracking_anonymized: false,

303 is_setup_complete: true,

304 is_active: true,

305};

306export const SEED_ORG_1_EDITOR_EMAIL = {

307 email: 'demo2@lightdash.com',

308 is_primary: true,

309};

310export const SEED_ORG_1_EDITOR_PASSWORD = {

311 password: 'demo_password!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L311

312};

313export const SEED_ORG_1_EDITOR_ROLE = OrganizationMemberRole.EDITOR;

314export const SEED_ORG_1_VIEWER = {

315 user_uuid: 'e0dd2003-c291-4e14-b977-7a03b7edc842',

316 first_name: 'Viewer',

317 last_name: 'User',

318 is_marketing_opted_in: true,

319 is_tracking_anonymized: false,

320 is_setup_complete: true,

321 is_active: true,

322};

323export const SEED_ORG_1_VIEWER_EMAIL = {

324 email: 'demo3@lightdash.com',

325 is_primary: true,

326};

327export const SEED_ORG_1_VIEWER_PASSWORD = {

328 password: 'demo_password!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L328

329};

330export const SEED_ORG_1_VIEWER_ROLE = OrganizationMemberRole.VIEWER;

331// Another user

332export const SEED_ORG_2 = {

333 organization_uuid: '42339eef-359e-4ec4-b810-54ef0b4e3446',

334 organization_name: 'Another Shop',

335};

336export const SEED_ORG_2_ADMIN = {

337 user_uuid: '57cd4548-cbe3-42b3-aa13-97821713e307',

338 first_name: 'Another',

339 last_name: 'User',

340 is_marketing_opted_in: true,

341 is_tracking_anonymized: false,

342 is_setup_complete: true,

343 is_active: true,

344};

345export const SEED_ORG_2_ADMIN_EMAIL = {

346 email: 'another@lightdash.com',

347 is_primary: true,

348};

349export const SEED_ORG_2_ADMIN_PASSWORD = {

350 password: 'demo_password!',

Medium

Secret Pattern

Hardcoded password in dist/types/index.js

dist/types/index.jsView on unpkg · L350

351};

352export const SEED_ORG_2_ADMIN_ROLE = OrganizationMemberRole.ADMIN;

353export const SEED_EMBED_SECRET = 'zU3h50saDOO20czNFNRok';

354// Deterministic PAT for dev environment

355// Use with: Authorization: ApiKey ldpat_deadbeefdeadbeefdeadbeefdeadbeef

356export const SEED_PAT = {

357 token: 'ldpat_deadbeefdeadbeefdeadbeefdeadbeef',

358 description: 'Dev seed PAT',

359};

360export const SEED_PROJECT = {

361 project_uuid: '3675b69e-8324-4110-bdca-059031aa8da3',

362 name: 'Jaffle shop',

363 project_type: ProjectType.DEFAULT,

364 dbt_connection_type: DbtProjectType.DBT,

365 dbt_connection: null,

366 copied_from_project_uuid: null,

367 organization_warehouse_credentials_uuid: null,

368};

369export const SEED_SPACE = {

370 name: SEED_PROJECT.name,

dist/types/dbt/validation.csp.test.jsView file

Lines 8-33javascript

8 * property directly: importing the module must not generate code at all.

9 */

10describe('CSP: dbt/validation must not generate code at import (#21276)', () => {

11 const RealFunction = global.Function;

dist/esm/index.jsView file

Lines 274-348javascript

274}

275// Seeds

276export const SEED_ORG_1 = {

277 organization_uuid: '172a2270-000f-42be-9c68-c4752c23ae51',

278 organization_name: 'Jaffle Shop',

279};

280export const SEED_ORG_1_ADMIN = {

281

dist/cjs/index.jsView file

357patternName = generic_password severity = medium line = 357 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L357

374patternName = generic_password severity = medium line = 374 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L374

391patternName = generic_password severity = medium line = 391 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L391

413patternName = generic_password severity = medium line = 413 matchedText = password...d!',

Medium

Secret Pattern

Hardcoded password in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L413