@mastra/voice-google: Clean npm security report (Allow)

Loading npm security reports…

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 35.7 KB of source

Source & flagged code

2 flagged

dist/docs/references/reference-voice-google.mdView file

Lines 201-241markdown

201

202// Using service account key file

203const voice = new GoogleVoice({

204 vertexAI: true,

205 project: 'your-gcp-project',

206 speechModel: {

207 keyFilename: '/path/to/service-account.json',

208 },

209 listeningModel: {

210 keyFilename: '/path/to/service-account.json',

211 },

212})

213

214// Using in-memory credentials

215const voice = new GoogleVoice({

216 vertexAI: true,

217 project: 'your-gcp-project',

218 speechModel: {

219 credentials: {

220 client_email: 'service-account@project.iam.gserviceaccount.com',

221 private_key: '-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----',

Critical

Secret Pattern

RSA private key in dist/docs/references/reference-voice-google.md

dist/docs/references/reference-voice-google.mdView on unpkg · L221

222 },

223 },

224})

225```

226

227#### Required Permissions

228

229#### IAM Roles

230

231For Text-to-Speech:

232

233- `roles/texttospeech.admin` - Text-to-Speech Admin (full access)

234- `roles/texttospeech.editor` - Text-to-Speech Editor (create and manage)

235- `roles/texttospeech.viewer` - Text-to-Speech Viewer (read-only)

236

237For Speech-to-Text:

238

239- `roles/speech.client` - Speech-to-Text Client

240

241#### OAuth Scopes

README.mdView file

Lines 121-161markdown

121 speechModel: {

122 keyFilename: '/path/to/service-account.json',

123 },

124 listeningModel: {

125 keyFilename: '/path/to/service-account.json',

126 },

127});

128```

129

130### Vertex AI with In-Memory Credentials

131

132```typescript

Source & flagged code

2 flagged · loading source

dist/docs/references/reference-voice-google.mdView file

221patternName = private_key_rsa severity = critical line = 221 matchedText = private_...--',

Critical

Secret Pattern

@mastra/voice-google: Clean npm security report (Allow) | LPM Firewall

@mastra/voice-google@0.14.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code