registry / @openfn/language-gmail / 3.0.0

@openfn/language-gmail@3.0.0

OpenFn gmail adaptor

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

CopyleftLicense

scanned 2 file(s), 30.5 KB of source

Source & flagged code

1 flagged

package.jsonView file

Lines 24-52json

24 "dependencies": {

25 "googleapis": "171.4.0",

26 "jszip": "^3.10.1",

27 "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",

28 "@openfn/language-common": "3.3.4"

29 },

30 "devDependencies": {

31 "assertion-error": "2.0.0",

32 "chai": "4.3.6",

33 "deep-eql": "4.1.1",

34 "mocha": "^10.8.2",

35 "rimraf": "3.0.2",

36 "undici": "^7.28.0"

37 },

38 "repository": {

39 "type": "git",

40 "url": "https://github.com/openfn/adaptors.git"

41 },

42 "types": "types/index.d.ts",

43 "main": "dist/index.cjs",

44 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L44

45 "build": "pnpm clean && build-adaptor gmail",

46 "test": "mocha --experimental-specifier-resolution=node --no-warnings",

47 "test:watch": "mocha -w --experimental-specifier-resolution=node --no-warnings",

48 "clean": "rimraf dist types docs",

49 "pack": "pnpm pack --pack-destination ../../dist",

50 "lint": "eslint src"

51 }

52}

Source & flagged code

1 flagged · loading source

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

1 Medium2 Low

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowCopyleft License

Source & flagged code

1 flagged

package.jsonView file

Lines 24-52json

24 "dependencies": {

25 "googleapis": "171.4.0",

26 "jszip": "^3.10.1",

27 "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",

28 "@openfn/language-common": "3.3.4"

29 },

30 "devDependencies": {

31 "assertion-error": "2.0.0",

32 "chai": "4.3.6",

33 "deep-eql": "4.1.1",

34 "mocha": "^10.8.2",

35 "rimraf": "3.0.2",

36 "undici": "^7.28.0"

37 },

38 "repository": {

39 "type": "git",

40 "url": "https://github.com/openfn/adaptors.git"

41 },

42 "types": "types/index.d.ts",

43 "main": "dist/index.cjs",

44 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L44

45 "build": "pnpm clean && build-adaptor gmail",

46 "test": "mocha --experimental-specifier-resolution=node --no-warnings",

47 "test:watch": "mocha -w --experimental-specifier-resolution=node --no-warnings",

48 "clean": "rimraf dist types docs",

49 "pack": "pnpm pack --pack-destination ../../dist",

50 "lint": "eslint src"

51 }

52}