registry / @pawells/nestjs-nats / 4.2.0

@pawells/nestjs-nats@4.2.0

NestJS NATS messaging utilities — module wiring, subscriber querying, event broadcasting, connection health monitoring, JetStream support, and environment-driven connection configuration with graceful shutdown

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

FilesystemNetwork

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 13 file(s), 95.2 KB of source

Source & flagged code

2 flagged

dist/connection-options.jsView file

Lines 147-187javascript

147 user: firstCredentialed.user,

148 pass: firstCredentialed.pass

149 };

150}

151/**

152 * Load and validate TLS certificate/key files from the filesystem.

153 *

154 * Reads PEM-formatted certificate and key files from the paths specified in environment configuration.

Source & flagged code

2 flagged · loading source

dist/connection-options.jsView file

167patternName = private_key_rsa severity = critical line = 167 matchedText = * // => ....' }

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/connection-options.js

View on unpkg · L167

167patternName = private_key_rsa severity = critical line = 167 matchedText = * // => ....' }

Critical

Secret Pattern

RSA private key in dist/connection-options.js

dist/connection-options.jsView on unpkg · L167

Findings

2 Critical1 Medium2 Low

CriticalCritical Secretdist/connection-options.js

CriticalSecret Patterndist/connection-options.js

MediumNetwork

LowFilesystem

LowHigh Entropy Strings

LPM CLI

Source & flagged code

2 flagged

dist/connection-options.jsView file

Lines 147-187javascript

147 user: firstCredentialed.user,

148 pass: firstCredentialed.pass

149 };

150}

151/**

152 * Load and validate TLS certificate/key files from the filesystem.

153 *

154 * Reads PEM-formatted certificate and key files from the paths specified in environment configuration.

155 * All file paths are optional and independent.

156 *

157 * @param certFilePath - Path to certificate file (PEM format), if present

158 * @param keyFilePath - Path to private key file (PEM format), if present

159 * @param caFilePath - Path to CA certificate file (PEM format), if present

160 * @returns TLS options object with loaded certificates, or undefined if no files are specified

161 * @throws {NATSTLSConfigError} When a file path is configured but the file does not exist,

162 * is unreadable, or contains invalid content

163 *

164 * @example

165 * ```typescript

166 * const tls = LoadTlsFiles('/etc/nats/cert.pem', '/etc/nats/key.pem', '/etc/nats/ca.pem');

167 * // => { cert: '-----BEGIN CERTIFICATE-----\n...', key: '-----BEGIN PRIVATE KEY-----\n...', ca: '-----BEGIN CERTIFICATE-----\n...' }

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/connection-options.jsView on unpkg · L167

Critical

Secret Pattern

RSA private key in dist/connection-options.js

dist/connection-options.jsView on unpkg · L167

168 * ```

169 */

170function LoadTlsFiles(certFilePath, keyFilePath, caFilePath) {

171 // If no files are specified, return undefined

172 if (!certFilePath && !keyFilePath && !caFilePath) {

173 return undefined;

174 }

175 const tls = {};

176 try {

177 if (certFilePath) {

178 tls.cert = readFileSync(certFilePath, 'utf8');

179 }

180 }

181 catch (error) {

182 const err = error instanceof Error ? error : new Error(String(error));

183 throw new NATSTLSConfigError(`Failed to load NATS_TLS_CERT_FILE at ${certFilePath}: ${err.message}`, err);

184 }

185 try {

186 if (keyFilePath) {

187 tls.key = readFileSync(keyFilePath, 'utf8');