registry / @orbe-agro/client-core / 5.6.164

@orbe-agro/client-core@5.6.164

Biblioteca principal de componentes e utilidades para os microfrontends do Orbe Agro.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

Manifest

NoLicense

scanned 5,017 file(s), 8.73 MB of source, external domains: 172.16.14.27, apexcharts.com, cdn.jsdelivr.net, console.firebase.google.com, developer.mozilla.org, edge.themenate.net, firebase.google.com, fullcalendar.io, gateway.apps.prd.orbeagro.com.br, gateway.apps.qas.orbeagro.com.br, getbootstrap.com, github.com, highlightjs.org, images.unsplash.com, marketplace.visualstudio.com, nodejs.org, prismjs.com, raw.githubusercontent.com, react-hook-form.com, react-icons.github.io, react-select.com, react-table-v7.tanstack.com, react-table.tanstack.com, react.i18next.com, reactjs.org, reactrouter.com, s-yadav.github.io, sodipodi.sourceforge.net, swr.vercel.app, tailwindcss.com, tanstack.com, tiptap.dev, vitejs.dev, www.google.com, www.inkscape.org, www.npmjs.com, www.react-simple-maps.io, www.typescriptlang.org, www.w3.org, yet-another-react-lightbox.com, yourdevdomain.com, zod.dev, zustand.docs.pmnd.rs

Source & flagged code

2 flagged

dist/@ecme/views/guide/Documentations/components/Authentication.jsView file

Lines 63-103javascript

63 propName: "oAuthSignIn",

64 type: `<code>callback: (payload: {

65 onSignIn: (tokens: Token, user?: User) => void

66 redirect: () => void

67}) => void</code>`,

68 default: `-`,

69 desc: `A method to handle OAuth sign-in callbacks for third-party authentication providers.</p>`

70 }

71 ]

72 }

73 ]

74 }

75 ),

76 /* @__PURE__ */ jsx("p", { children: "Here's how you can use the useAuth hook in components:" }),

77 /* @__PURE__ */ jsx(SyntaxHighlighter, { language: "tsx", children: `import { useAuth } from '@/auth'

79const YourComponent = () => {

80 const { signIn, signOut, user, authenticated } = useAuth();

82 const handleLogin = async () => {

83 const credentials = { email: 'user@example.com', password: 'password' };

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/@ecme/views/guide/Documentations/components/Authentication.jsView on unpkg · L83

84 const result = await signIn(credentials);

85 if (result?.status === 'success') {

86 console.log('Logged in successfully');

87 }

88 if (result?.status === 'failed') {

89 console.error('Failed to login')

90 }

91 };

93 const handleLogout = () => {

94 signOut();

95 };

97 return (

98 <div>

99 {authenticated ? <p>Welcome, {user.userName}</p> : <p>Please log in</p>}

100 <button onClick={handleLogin}>Login</button>

101 <button onClick={handleLogout}>Logout</button>

102 </div>

103 );

lib/@ecme/views/guide/Documentations/components/Authentication.tsxView file

Lines 63-103tsx

63 {

64 propName: 'oAuthSignIn',

65 type: `<code>callback: (payload: {

66 onSignIn: (tokens: Token, user?: User) => void

67 redirect: () => void

68}) => void</code>`,

69 default: `-`,

Source & flagged code

2 flagged · loading source

dist/@ecme/views/guide/Documentations/components/Authentication.jsView file

83patternName = generic_password severity = medium line = 83 matchedText = const cr...' };

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/@ecme/views/guide/Documentations/components/Authentication.jsView on unpkg · L83

lib/@ecme/views/guide/Documentations/components/Authentication.tsxView file

83patternName = generic_password severity = medium line = 83 matchedText = const cr...' };

Medium

Secret Pattern

Hardcoded password in lib/@ecme/views/guide/Documentations/components/Authentication.tsx

lib/@ecme/views/guide/Documentations/components/Authentication.tsxView on unpkg · L83

Findings

5 Medium5 Low

MediumSecret Patterndist/@ecme/views/guide/Documentations/components/Authentication.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patternlib/@ecme/views/guide/Documentations/components/Authentication.tsx

LowScripts Present

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/@ecme/views/guide/Documentations/components/Authentication.jsView file

Lines 63-103javascript

63 propName: "oAuthSignIn",

64 type: `<code>callback: (payload: {

65 onSignIn: (tokens: Token, user?: User) => void

66 redirect: () => void

67}) => void</code>`,

68 default: `-`,

69 desc: `A method to handle OAuth sign-in callbacks for third-party authentication providers.</p>`

70 }

71 ]

72 }

73 ]

74 }

75 ),

76 /* @__PURE__ */ jsx("p", { children: "Here's how you can use the useAuth hook in components:" }),

77 /* @__PURE__ */ jsx(SyntaxHighlighter, { language: "tsx", children: `import { useAuth } from '@/auth'

79const YourComponent = () => {

80 const { signIn, signOut, user, authenticated } = useAuth();

82 const handleLogin = async () => {

83 const credentials = { email: 'user@example.com', password: 'password' };

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/@ecme/views/guide/Documentations/components/Authentication.jsView on unpkg · L83

84 const result = await signIn(credentials);

85 if (result?.status === 'success') {

86 console.log('Logged in successfully');

87 }

88 if (result?.status === 'failed') {

89 console.error('Failed to login')

90 }

91 };

93 const handleLogout = () => {

94 signOut();

95 };

97 return (

98 <div>

99 {authenticated ? <p>Welcome, {user.userName}</p> : <p>Please log in</p>}

100 <button onClick={handleLogin}>Login</button>

101 <button onClick={handleLogout}>Logout</button>

102 </div>

103 );

lib/@ecme/views/guide/Documentations/components/Authentication.tsxView file

Lines 63-103tsx

63 {

64 propName: 'oAuthSignIn',

65 type: `<code>callback: (payload: {

66 onSignIn: (tokens: Token, user?: User) => void

67 redirect: () => void

68}) => void</code>`,

69 default: `-`,