registry  /  @luka-cat-mimi/n8n-nodes-kingdee  /  0.2.4

@luka-cat-mimi/n8n-nodes-kingdee@0.2.4

金蝶云星空 N8N 集成插件

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequire
Supply chain
HighEntropyStringsUrlStrings
Manifest
WildcardDependency
scanned 193 file(s), 549 KB of source, external domains: open.kingdee.com, your-domain.kingdee.com

Source & flagged code

2 flagged · loading source
dist/credentials/KingdeePasswordApi.credentials.jsView file
101patternName = generic_password severity = medium line = 101 matchedText = password...}}',
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/credentials/KingdeePasswordApi.credentials.jsView on unpkg · L101
dist/nodes/Kingdee/Kingdee.node.jsView file
6exports.Kingdee = void 0; L7: const n8n_workflow_1 = require("n8n-workflow"); L8: const ResourceFactory_1 = __importDefault(require("../help/builder/ResourceFactory"));
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/nodes/Kingdee/Kingdee.node.jsView on unpkg · L6

Findings

3 Medium3 Low
MediumSecret Patterndist/credentials/KingdeePasswordApi.credentials.js
MediumDynamic Requiredist/nodes/Kingdee/Kingdee.node.js
MediumWildcard Dependency
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings