registry / @mastra/memory / 1.21.2

@mastra/memory@1.21.2

⚠ Under review

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 18 file(s), 4.10 MB of source, external domains: ai-gateway.vercel.sh, api.anthropic.com, api.openai.com, github.com, json-schema.org, vercel.com

Source & flagged code

4 flagged

dist/chunk-LEAP5DKB.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/memory@1.22.0 matchedIdentity = npm:QG1hc3RyYS9tZW1vcnk:1.22.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/chunk-LEAP5DKB.cjsView on unpkg

dist/docs/references/reference-storage-postgresql.mdView file

Lines 85-125markdown

85 connectionString: 'postgresql://user:password@localhost:5432/mydb',

86})

88// Using a connection string with pool options

89const store2 = new PostgresStore({

90 id: 'pg-storage-2',

91 connectionString: 'postgresql://user:password@localhost:5432/mydb',

92 schemaName: 'custom_schema',

93 max: 30, // Max pool connections

94 idleTimeoutMillis: 60000, // Idle timeout

95 ssl: { rejectUnauthorized: false },

96})

98// Using individual connection parameters

99const store3 = new PostgresStore({

100 id: 'pg-storage-3',

101 host: 'localhost',

102 port: 5432,

103 database: 'mydb',

104 user: 'user',

105 password: 'password',

Medium

Secret Pattern

Hardcoded password in dist/docs/references/reference-storage-postgresql.md

dist/docs/references/reference-storage-postgresql.mdView on unpkg · L105

106})

107

108// Using a pre-configured pg.Pool (recommended for pool reuse)

109const existingPool = new Pool({

110 connectionString: 'postgresql://user:password@localhost:5432/mydb',

111 max: 20,

112 // ... your custom pool configuration

113})

114

115const store4 = new PostgresStore({

116 id: 'pg-storage-4',

117 pool: existingPool,

118 schemaName: 'custom_schema', // optional

119})

120```

121

122## Additional notes

123

124### Schema Management

125

dist/docs/references/reference-vectors-pg.mdView file

Lines 33-73markdown

33### Connection String

35```ts

36import { PgVector } from '@mastra/pg'

38const vectorStore = new PgVector({

39 id: 'pg-vector'

dist/docs/references/reference-storage-redis.mdView file

Lines 15-55markdown

15```typescript

16import { RedisStore } from '@mastra/redis'

18const storage = new RedisStore({

19 id: 'redis-storage',

20 connectionString:

Source & flagged code

4 flagged · loading source

dist/chunk-LEAP5DKB.cjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code