@mastra/pg: Clean npm security report (Allow)

Loading npm security reports…

Static Scan Results

scanned 21d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVars

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.39 MB of source

Source & flagged code

5 flagged

dist/docs/references/reference-storage-postgresql.mdView file

Lines 85-125markdown

85 connectionString: 'postgresql://user:password@localhost:5432/mydb',

86})

88// Using a connection string with pool options

89const store2 = new PostgresStore({

90 id: 'pg-storage-2',

91 connectionString: 'postgresql://user:password@localhost:5432/mydb',

92 schemaName: 'custom_schema',

93 max: 30, // Max pool connections

94 idleTimeoutMillis: 60000, // Idle timeout

95 ssl: { rejectUnauthorized: false },

96})

98// Using individual connection parameters

99const store3 = new PostgresStore({

100 id: 'pg-storage-3',

101 host: 'localhost',

102 port: 5432,

103 database: 'mydb',

104 user: 'user',

105 password: 'password',

Medium

Secret Pattern

Hardcoded password in dist/docs/references/reference-storage-postgresql.md

dist/docs/references/reference-storage-postgresql.mdView on unpkg · L105

106})

107

108// Using a pre-configured pg.Pool (recommended for pool reuse)

109const existingPool = new Pool({

110 connectionString: 'postgresql://user:password@localhost:5432/mydb',

111 max: 20,

112 // ... your custom pool configuration

113})

114

115const store4 = new PostgresStore({

116 id: 'pg-storage-4',

117 pool: existingPool,

118 schemaName: 'custom_schema', // optional

119})

120```

121

122## Additional notes

123

124### Schema Management

125

dist/docs/references/reference-vectors-pg.mdView file

Lines 33-73markdown

33### Connection String

35```ts

36import { PgVector } from '@mastra/pg'

38const vectorStore = new PgVector({

39 id: 'pg-vector'

README.mdView file

Lines 22-62markdown

22PgVector supports multiple connection methods:

24**1. Connection String (Recommended)**

26```typescript

27import { PgVector } from '@mastra/pg';

29const vectorStore = new PgVector

Source & flagged code

5 flagged · loading source

dist/docs/references/reference-storage-postgresql.mdView file

105patternName = generic_password severity = medium line = 105 matchedText = password...rd',

@mastra/pg: Clean npm security report (Allow) | LPM Firewall

@mastra/pg@1.14.3

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code