registry / @nimbleflux/fluxbase-sdk / 2026.7.1

@nimbleflux/fluxbase-sdk@2026.7.1

Official TypeScript SDK for Fluxbase - Backend as a Service

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 47 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 778 KB of source

Source & flagged code

42 flagged

dist/index.jsView file

Lines 4467-4507javascript

4467 domain,

4468 eu_region: options?.eu_region ?? false

4469 }

4470 }

4471 });

4472 }

4473 /**

4474 * Configure AWS SES email provider

4475 *

Source & flagged code

42 flagged · loading source

dist/index.jsView file

4487patternName = aws_access_key severity = critical line = 4487 matchedText = * 'AKI...LE',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.jsView on unpkg · L4487

4487patternName = aws_access_key severity = critical line = 4487 matchedText = * 'AKI...LE',

Critical

Secret Pattern

AWS access key ID in dist/index.js

dist/index.jsView on unpkg · L4487

587patternName = generic_password severity = medium line = 587 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L587

595patternName = generic_password severity = medium line = 595 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L595

4382patternName = generic_password severity = medium line = 4382 matchedText = * pass...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L4382

5031patternName = generic_password severity = medium line = 5031 matchedText = * smtp...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L5031

6508patternName = generic_password severity = medium line = 6508 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L6508

9435patternName = generic_password severity = medium line = 9435 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L9435

9465patternName = generic_password severity = medium line = 9465 matchedText = * pass...123'

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L9465

dist/index.d.ctsView file

6024patternName = aws_access_key severity = critical line = 6024 matchedText = * 'AKI...LE',

Critical

Secret Pattern

AWS access key ID in dist/index.d.cts

dist/index.d.ctsView on unpkg · L6024

4351patternName = generic_password severity = medium line = 4351 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L4351

4359patternName = generic_password severity = medium line = 4359 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L4359

5946patternName = generic_password severity = medium line = 5946 matchedText = * pass...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L5946

6480patternName = generic_password severity = medium line = 6480 matchedText = * smtp...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L6480

7602patternName = generic_password severity = medium line = 7602 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L7602

7729patternName = generic_password severity = medium line = 7729 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L7729

7866patternName = generic_password severity = medium line = 7866 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L7866

7951patternName = generic_password severity = medium line = 7951 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L7951

10237patternName = generic_password severity = medium line = 10237 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L10237

10258patternName = generic_password severity = medium line = 10258 matchedText = * pass...123'

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L10258

10544patternName = generic_password severity = medium line = 10544 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L10544

dist/index.cjsView file

4489patternName = aws_access_key severity = critical line = 4489 matchedText = * 'AKI...LE',

Critical

Secret Pattern

AWS access key ID in dist/index.cjs

dist/index.cjsView on unpkg · L4489

589patternName = generic_password severity = medium line = 589 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L589

597patternName = generic_password severity = medium line = 597 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L597

4384patternName = generic_password severity = medium line = 4384 matchedText = * pass...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L4384

5033patternName = generic_password severity = medium line = 5033 matchedText = * smtp...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L5033

6510patternName = generic_password severity = medium line = 6510 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L6510

9437patternName = generic_password severity = medium line = 9437 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L9437

9467patternName = generic_password severity = medium line = 9467 matchedText = * pass...123'

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L9467

dist/index.d.tsView file

6024patternName = aws_access_key severity = critical line = 6024 matchedText = * 'AKI...LE',

Critical

Secret Pattern

AWS access key ID in dist/index.d.ts

dist/index.d.tsView on unpkg · L6024

4351patternName = generic_password severity = medium line = 4351 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L4351

4359patternName = generic_password severity = medium line = 4359 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L4359

5946patternName = generic_password severity = medium line = 5946 matchedText = * pass...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L5946

6480patternName = generic_password severity = medium line = 6480 matchedText = * smtp...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L6480

7602patternName = generic_password severity = medium line = 7602 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7602

7729patternName = generic_password severity = medium line = 7729 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7729

7866patternName = generic_password severity = medium line = 7866 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7866

7951patternName = generic_password severity = medium line = 7951 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7951

10237patternName = generic_password severity = medium line = 10237 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L10237

10258patternName = generic_password severity = medium line = 10258 matchedText = * pass...123'

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L10258

10544patternName = generic_password severity = medium line = 10544 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L10544

README.mdView file

47patternName = generic_password severity = medium line = 47 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L47

Findings

5 Critical39 Medium3 Low

CriticalCritical Secretdist/index.js

CriticalSecret Patterndist/index.d.cts

CriticalSecret Patterndist/index.js

CriticalSecret Patterndist/index.cjs

CriticalSecret Patterndist/index.d.ts

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/index.d.cts

MediumSecret Patterndist/index.js

MediumSecret Patterndist/index.cjs

MediumSecret Patterndist/index.d.ts

MediumSecret PatternREADME.md

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

dist/index.d.ctsView file

Lines 4331-4379typescript

4331 * to provide a better user experience for trusted users.

4332 *

4333 * @param request - Check request with endpoint and optional trust signals

4334 * @returns Promise with whether CAPTCHA is required and challenge tracking info

4335 *

4336 * @example

4337 * ```typescript

4338 * // Check if CAPTCHA is needed for login

4339 * const { data, error } = await client.auth.checkCaptcha({

4340 * endpoint: 'login',

4341 * email: 'user@example.com'

4342 * });

4343 *

4344 * if (data?.captcha_required) {

4345 * // Show CAPTCHA widget using data.provider and data.site_key

4346 * const captchaToken = await showCaptchaWidget(data.provider, data.site_key);

4347 *

4348 * // Include challenge_id and captcha token in sign in

4349 * await client.auth.signIn({

4350 * email: 'user@example.com',

4351 * password: 'password',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L4351

4352 * captchaToken,

4353 * challengeId: data.challenge_id

4354 * });

4355 * } else {

4356 * // No CAPTCHA needed - trusted user

4357 * await client.auth.signIn({

4358 * email: 'user@example.com',

4359 * password: 'password',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L4359

4360 * challengeId: data?.challenge_id // Still include challenge_id

4361 * });

4362 * }

4363 * ```

4364 */

4365 checkCaptcha(request: CaptchaCheckRequest): Promise<DataResponse<CaptchaCheckResponse>>;

4366 /**

4367 * Get comprehensive authentication configuration from the server

4368 * Returns all public auth settings including signup status, OAuth providers,

4369 * SAML providers, password requirements, and CAPTCHA config in a single request.

4370 *

4371 * Use this to:

4372 * - Conditionally render signup forms based on signup_enabled

4373 * - Display available OAuth/SAML provider buttons

4374 * - Show password requirements to users

4375 * - Configure CAPTCHA widgets

4376 *

4377 * @returns Promise with complete authentication configuration

4378 * @example

4379 * ```typescript

Lines 5926-5966typescript

5926 * @example

5927 * ```typescript

5928 * await client.admin.settings.app.setRateLimiting(true)

5929 * ```

5930 */

5931 setRateLimiting(enabled: boolean): Promise<AppSettings>;

5932 /**

5933 * Configure SMTP email provider

5934 *

5935 * Convenience method to set up SMTP email delivery.

Lines 6004-6044typescript

6004 configureMailgun(apiKey: string, domain: string, options?: {

6005 eu_region?: boolean;

6006 from_address?: string;

6007 from_name?: string;

6008 reply_to_address?: string;

6009 }): Promise<AppSettings>;

6010 /**

6011 * Configure AWS SES email provider

6012 *

Lines 6460-6500typescript

6460 * Update email provider settings

6461 *

6462 * Supports partial updates - only provide the fields you want to change.

6463 * Secret fields (passwords, client keys) are only updated if provided.

6464 *

6465 * @param request - Settings to update (partial update supported)

6466 * @returns Promise

Lines 7582-7622typescript

7582 *

7583 * userHistory.sessions.forEach(session => {

7584 * console.log(`Admin ${session.admin_user_id} impersonated user`)

7585 * console.log(`Reason: ${session.reason}`)

7586 * console.

Lines 7709-7749typescript

7709 * ```typescript

7710 * await client.management.clientKeys.delete('key-uuid')

7711 * console.log('Client key deleted')

7712 * ```

7713 */

7714 delete(keyId: string): Promise<DeleteClientKeyResponse>;

7715}

7716/**

7717 * @deprecated

7866patternName = generic_password severity = medium line = 7866 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L7866

7951patternName = generic_password severity = medium line = 7951 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L7951

10237patternName = generic_password severity = medium line = 10237 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L10237

10258patternName = generic_password severity = medium line = 10258 matchedText = * pass...123'

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L10258

10544patternName = generic_password severity = medium line = 10544 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.cts

dist/index.d.ctsView on unpkg · L10544

dist/index.d.tsView file

6024patternName = aws_access_key severity = critical line = 6024 matchedText = * 'AKI...LE',

Critical

Secret Pattern

AWS access key ID in dist/index.d.ts

dist/index.d.tsView on unpkg · L6024

4351patternName = generic_password severity = medium line = 4351 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L4351

4359patternName = generic_password severity = medium line = 4359 matchedText = * pa...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L4359

5946patternName = generic_password severity = medium line = 5946 matchedText = * pass...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L5946

6480patternName = generic_password severity = medium line = 6480 matchedText = * smtp...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L6480

7602patternName = generic_password severity = medium line = 7602 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7602

7729patternName = generic_password severity = medium line = 7729 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7729

7866patternName = generic_password severity = medium line = 7866 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7866

7951patternName = generic_password severity = medium line = 7951 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L7951

10237patternName = generic_password severity = medium line = 10237 matchedText = * pass...3!',

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L10237

10258patternName = generic_password severity = medium line = 10258 matchedText = * pass...123'

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L10258

10544patternName = generic_password severity = medium line = 10544 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L10544