registry / @live-change/video-call-frontend / 0.9.215

@live-change/video-call-frontend@0.9.215

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 20.5 KB of source

Source & flagged code

1 flagged

server/init.jsView file

Lines 7-36javascript

8 await Room.create({

9 id: '[test-room]',

10 name: 'Test Room',

11 description: 'This is a test room',

12 })

14 const { PublicAccess, Access, AccessRequest, AccessInvitation } = services.accessControl.models

16 await PublicAccess.create({

17 id: App.encodeIdentifier(['videoCall_Room', '[test-room]']),

18 objectType: 'Room', object: '[test-room]',

19 userRoles: ['speaker'],

20 sessionRoles: ['speaker']

21 })

24 const user = '[testUser]'

25 const email = 'tester@test.com'

26 const email2 = 'tester2@test.com'

27 const password = 'Testy123'

Medium

Secret Pattern

Package contains a possible secret pattern.

server/init.jsView on unpkg · L27

28 const passwordHash = services.passwordAuthentication.models.PasswordAuthentication

29 .definition.properties.passwordHash.preFilter(password)

30 await services.user.models.User.create({ id: user, roles: [] })

31 await services.passwordAuthentication.models.PasswordAuthentication.create({ id: user, user, passwordHash })

32 await services.email.models.Email.create({ id: email, email, user })

33 await services.email.models.Email.create({ id: email2, email: email2, user })

35}

Source & flagged code

1 flagged · loading source

server/init.jsView file

27patternName = generic_password severity = medium line = 27 matchedText = const pa...123'

Medium

Secret Pattern

Package contains a possible secret pattern.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code