@mastra/deployer-vercel@1.2.13: Suspicious npm security report

Loading npm security reports…

@mastra/deployer-vercel@1.2.13: Suspicious npm security report | LPM Firewall

Source & flagged code

3 flagged

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView on unpkg · L13

dist/studio/assets/tsx-B6W0miNI.jsView file

Lines 1-2javascript

1const e=Object.freeze(JSON.parse(`{"displayName":"TSX","name":"tsx","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-modifier":{"match":"(?<![_$[:alnum:]])(?:(?<=\\\\.\\\\.\\\\.)|(?<!\\\\.))(abstract|declare|override|public|protected|private|readonly|static)(?![_$[:alnum:]])(?:(?=\\\\.\\\\.\\\\.)|(?!\\\\.))","name":"storage.modifier.tsx"},"after-operator-block-as-object-literal":{"begin":"(?<!\\\\+\\\\+|--)(?<=[:=(,\\\\[?+!>]|^await|[^\\\\._$[:alnum:]]await|^return|[^\\\\._$[:alnum:]]return|^yield|[^\\\\._$[:alnum:]]yield|^throw|[^\\ ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio/assets/tsx-B6W0miNI.jsView on unpkg · L1

Long lines were clipped for display.

dist/studio/assets/main-BiFSrjyM.jsView file

•path = dist/studio/assets/main-BiFSrjyM.js kind = oversized_source_file sizeBytes = 6976006 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-BiFSrjyM.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView on unpkg · L13

dist/studio/assets/tsx-B6W0miNI.jsView file

1const e=Object.freeze(JSON.parse(`{"displayName":"TSX","name":"tsx","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-mo...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio/assets/tsx-B6W0miNI.jsView on unpkg · L1

dist/studio/assets/main-BiFSrjyM.jsView file

•path = dist/studio/assets/main-BiFSrjyM.js kind = oversized_source_file sizeBytes = 6976006 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-BiFSrjyM.jsView on unpkg

@mastra/deployer-vercel@1.2.13

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code