registry / @regixo/compliance-core / 0.1.5

@regixo/compliance-core@0.1.5

RoPA/DORA DRAFT generation + schemas. DRAFT artifacts ONLY — no attestation, no official/stamp-free export (those live in private/portal-pro).

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoFilesystem

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 20 file(s), 136 KB of source, external domains: app.regixo.com

Source & flagged code

1 flagged

dist/describe.jsView file

Lines 8-48javascript

8import { kindLabel } from "./pii/labels.js";

9// Known abbreviations expanded when humanising an identifier. Conservative — only unambiguous ones.

10const ABBREVIATIONS = {

11 id: 'identifier',

12 ids: 'identifiers',

13 dob: 'date of birth',

14 ssn: 'social security number',

15 addr: 'address',

16 tel: 'telephone',

17 num: 'number',

18 amt: 'amount',

19 qty: 'quantity',

20 ts: 'timestamp',

21 desc: 'description',

22 fk: 'reference',

23 url: 'URL',

24 uri: 'URI',

25 ip: 'IP address',

26 msg: 'message',

27 img: 'image',

28 pwd: 'password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/describe.jsView on unpkg · L28

29 org: 'organisation',

30 acct: 'account',

31 txn: 'transaction',

32};

33/** snake_case / camelCase / kebab-case → space-separated words, with known abbreviations expanded. */

34export function humanizeName(name) {

35 return name

36 .replace(/([a-z0-9])([A-Z])/g, '$1 $2') // camelCase → camel Case

37 .split(/[_\-\s]+/)

38 .filter(Boolean)

39 .map((w) => w.toLowerCase())

40 .map((w) => ABBREVIATIONS[w] ?? w)

41 .join(' ');

42}

43function humanJoin(items) {

44 if (items.length <= 1)

45 return items[0] ?? '';

46 if (items.length === 2)

47 return `${items[0]} and ${items[1]}`;

48 return `${items.slice(0, -1).join(', ')}, and ${items[items.length - 1]}`;

Source & flagged code

1 flagged · loading source

dist/describe.jsView file

28patternName = generic_password severity = medium line = 28 matchedText = pwd: '...

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/describe.jsView on unpkg · L28

Findings

1 Medium5 Low

MediumSecret Patterndist/describe.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Source & flagged code

1 flagged

dist/describe.jsView file

Lines 8-48javascript

8import { kindLabel } from "./pii/labels.js";

9// Known abbreviations expanded when humanising an identifier. Conservative — only unambiguous ones.

10const ABBREVIATIONS = {

11 id: 'identifier',

12 ids: 'identifiers',

13 dob: 'date of birth',

14 ssn: 'social security number',

15 addr: 'address',

16 tel: 'telephone',

17 num: 'number',

18 amt: 'amount',

19 qty: 'quantity',

20 ts: 'timestamp',

21 desc: 'description',

22 fk: 'reference',

23 url: 'URL',

24 uri: 'URI',

25 ip: 'IP address',

26 msg: 'message',

27 img: 'image',

28 pwd: 'password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/describe.jsView on unpkg · L28

29 org: 'organisation',

30 acct: 'account',

31 txn: 'transaction',

32};

33/** snake_case / camelCase / kebab-case → space-separated words, with known abbreviations expanded. */

34export function humanizeName(name) {

35 return name

36 .replace(/([a-z0-9])([A-Z])/g, '$1 $2') // camelCase → camel Case

37 .split(/[_\-\s]+/)

38 .filter(Boolean)

39 .map((w) => w.toLowerCase())

40 .map((w) => ABBREVIATIONS[w] ?? w)

41 .join(' ');

42}

43function humanJoin(items) {

44 if (items.length <= 1)

45 return items[0] ?? '';

46 if (items.length === 2)

47 return `${items[0]} and ${items[1]}`;

48 return `${items.slice(0, -1).join(', ')}, and ${items[items.length - 1]}`;