registry / @prescient-devices-oss/node-red-contrib-fileinput / 1.4.0

@prescient-devices-oss/node-red-contrib-fileinput@1.4.0

Asks user to select a file from the browser's file sytem and then emits its contents as a message or messages if the streaming option is selected

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 22.0 KB of source

Source & flagged code

1 flagged

test/fileinput_spec.jsView file

Lines 217-257javascript

217 "install",

218 "--production",

219 "--prefix",

220 path.resolve(testDir),

221 path.resolve(__dirname, ".."),

222 ])

223 let settings = {}

224 const settingsFile = path.resolve(testDir, "settings.js")

225 if (fs.existsSync(settingsFile)) {

226 settings = require(settingsFile)

227 }

228 settings.editorTheme = settings.editorTheme || {}

229 settings.editorTheme.tours = false

230 settings.flowFile = "flows.json"

231 if (readOnly) {

232 settings.adminAuth = {

233 type: "credentials",

234 users: [

235 {

236 username: "admin",

237 password: "$2b$08$v/98KrBPLWFtFc6FyzHuNuspzrQ6PZktnT2SYgTDJECpibZAk8YC6",

Medium

Secret Pattern

Package contains a possible secret pattern.

test/fileinput_spec.jsView on unpkg · L237

238 permissions: ["read"],

239 },

240 ],

241 }

242 }

243 const data = `module.exports = ${JSON.stringify(settings, null, 2)}`

244 fs.writeFileSync(settingsFile, data)

245 let cmdEnv = Object.assign(clone(process.env), env || {})

246 execObj = spawn(nodeRedBin, [`--userDir=${testDir}`], { env: cmdEnv })

247 stdout = ""

248 execObj.stdout.on("data", function (data) {

249 stdout += data.toString()

250 debug && console.log(data.toString().trimEnd())

251 if (stdout.includes("Started flows")) {

252 return resolve()

253 }

254 })

255 execObj.stderr.on("data", function (data) {

256 debug && console.log(data.toString().trim())

257 })

Source & flagged code

1 flagged · loading source

test/fileinput_spec.jsView file

237patternName = generic_password severity = medium line = 237 matchedText = password...C6",

Medium

Secret Pattern

Package contains a possible secret pattern.

test/fileinput_spec.jsView on unpkg · L237

Findings

2 Medium1 Low

MediumSecret Patterntest/fileinput_spec.js

MediumEnvironment Vars

LowScripts Present

Source & flagged code

1 flagged

test/fileinput_spec.jsView file

Lines 217-257javascript

217 "install",

218 "--production",

219 "--prefix",

220 path.resolve(testDir),

221 path.resolve(__dirname, ".."),

222 ])

223 let settings = {}

224 const settingsFile = path.resolve(testDir, "settings.js")

225 if (fs.existsSync(settingsFile)) {

226 settings = require(settingsFile)

227 }

228 settings.editorTheme = settings.editorTheme || {}

229 settings.editorTheme.tours = false

230 settings.flowFile = "flows.json"

231 if (readOnly) {

232 settings.adminAuth = {

233 type: "credentials",

234 users: [

235 {

236 username: "admin",

237 password: "$2b$08$v/98KrBPLWFtFc6FyzHuNuspzrQ6PZktnT2SYgTDJECpibZAk8YC6",

Medium

Secret Pattern

Package contains a possible secret pattern.

test/fileinput_spec.jsView on unpkg · L237

238 permissions: ["read"],

239 },

240 ],

241 }

242 }

243 const data = `module.exports = ${JSON.stringify(settings, null, 2)}`

244 fs.writeFileSync(settingsFile, data)

245 let cmdEnv = Object.assign(clone(process.env), env || {})

246 execObj = spawn(nodeRedBin, [`--userDir=${testDir}`], { env: cmdEnv })

247 stdout = ""

248 execObj.stdout.on("data", function (data) {

249 stdout += data.toString()

250 debug && console.log(data.toString().trimEnd())

251 if (stdout.includes("Started flows")) {

252 return resolve()

253 }

254 })

255 execObj.stderr.on("data", function (data) {

256 debug && console.log(data.toString().trim())

257 })