registry / @reldens/storage / 0.103.0

@reldens/storage@0.103.0

Reldens - Storage

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 63 file(s), 389 KB of source

Source & flagged code

6 flagged

tests/utils/test-helpers.jsView file

Lines 1-28javascript

1/**

2 *

3 * Reldens - Storage Test Helpers

4 *

5 */

7const { FileHandler } = require('@reldens/server-utils');

8const { Logger, sc } = require('@reldens/utils');

9const { exec } = require('child_process');

10const { promisify } = require('util');

High

Child Process

Package source references child process execution.

tests/utils/test-helpers.jsView on unpkg · L8

11const execAsync = promisify(exec);

13class TestHelpers

14{

15 static getTestDbConfig()

16 {

17 return {

18 host: process.env.RELDENS_TEST_DB_HOST || 'localhost',

19 port: parseInt(process.env.RELDENS_TEST_DB_PORT) || 3306,

20 user: process.env.RELDENS_TEST_DB_USER || 'test_user',

21 password: process.env.RELDENS_TEST_DB_PASSWORD || 'test_password',

22 database: process.env.RELDENS_TEST_DB_NAME || 'reldens_storage_test',

23 client: process.env.RELDENS_TEST_DB_CLIENT || 'mysql'

24 };

25 }

27 static async setupDriver(driverName, rawEntities)

28 {

Lines 405-445javascript

405 FileHandler.remove(prismaPath);

406 }

407 let prismaConfigPath = FileHandler.joinPaths(process.cwd(), 'prisma.config.js');

408 if(FileHandler.exists(prismaConfigPath)){

409 Logger.info('Cleaning up Prisma config file: '+prismaConfigPath);

410 FileHandler.remove(prismaConfigPath);

411 }

tests/utils/prisma-subprocess-worker.jsView file

Lines 72-112javascript

72 }

74 async processIncomingMessage(message)

75 {

76 let projectRoot = sc.get(message, 'projectRoot', './');

77 let config = sc.get(message, 'config', {});

bin/reldens-storage.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

3/**

4 *

5 * Reldens - Storage CLI

6 *

7 */

9const { EntitiesGenerator } = require('../lib/entities-generator');

10const { PrismaClientLoader } =

lib/prisma/prisma-schema-generator.jsView file

Lines 43-83javascript

43 return false;

44 }

45 let stubDir = FileHandler.joinPaths(projectRoot, 'node_modules', '.prisma', 'client');

46 FileHandler.createFolder(stubDir);

47 FileHandler.copyFile(defaultIndexPath, stubPath);

48 Logger.info

.claude/test-architecture.mdView file

Lines 566-606markdown

566 --host=localhost \

567 --port=3306 \

568 --user=test_user \

569 --password=test_password \

570 --database=reldens_storage_test \

571 --client=mysql

572```

573

574**Generate Prisma Client:**

575```bash

576npx prisma generate --schema=prisma/schema.prisma

577```

578

Source & flagged code

6 flagged · loading source

tests/utils/test-helpers.jsView file

8const { Logger, sc } = require('@reldens/utils'); L9: const { exec } = require('child_process'); L10: const { promisify } = require('util');

High

Child Process

Package source references child process execution.

tests/utils/test-helpers.jsView on unpkg · L8

425patternName = generic_password severity = medium line = 425 matchedText = +' --pas...word

Medium

Secret Pattern

Package contains a possible secret pattern.

tests/utils/test-helpers.jsView on unpkg · L425

tests/utils/prisma-subprocess-worker.jsView file

92{ L93: let execAsync = promisify(exec); L94: let prismaPath = FileHandler.joinPaths(projectRoot, 'prisma');

High

Shell

Package source references shell execution.

tests/utils/prisma-subprocess-worker.jsView on unpkg · L92

bin/reldens-storage.jsView file

8L9: const { EntitiesGenerator } = require('../lib/entities-generator'); L10: const { PrismaClientLoader } = require('../lib/prisma/prisma-client-loader');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/reldens-storage.jsView on unpkg · L8

lib/prisma/prisma-schema-generator.jsView file

63try { L64: execSync('npx prisma db pull', {stdio: 'inherit'}); L65: } catch(error) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/prisma/prisma-schema-generator.jsView on unpkg · L63

.claude/test-architecture.mdView file

586patternName = generic_password severity = medium line = 586 matchedText = +' --pas...word

Medium

Secret Pattern

Hardcoded password in .claude/test-architecture.md

.claude/test-architecture.mdView on unpkg · L586

Findings

3 High5 Medium3 Low

HighChild Processtests/utils/test-helpers.js

HighShelltests/utils/prisma-subprocess-worker.js

HighRuntime Package Installlib/prisma/prisma-schema-generator.js

MediumSecret Patterntests/utils/test-helpers.js

MediumDynamic Requirebin/reldens-storage.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Pattern.claude/test-architecture.md

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

6 flagged

tests/utils/test-helpers.jsView file

Lines 1-28javascript

1/**

2 *

3 * Reldens - Storage Test Helpers

4 *

5 */

7const { FileHandler } = require('@reldens/server-utils');

8const { Logger, sc } = require('@reldens/utils');

9const { exec } = require('child_process');

10const { promisify } = require('util');

High

Child Process

Package source references child process execution.

tests/utils/test-helpers.jsView on unpkg · L8

11const execAsync = promisify(exec);

13class TestHelpers

14{

15 static getTestDbConfig()

16 {

17 return {

18 host: process.env.RELDENS_TEST_DB_HOST || 'localhost',

19 port: parseInt(process.env.RELDENS_TEST_DB_PORT) || 3306,

20 user: process.env.RELDENS_TEST_DB_USER || 'test_user',

21 password: process.env.RELDENS_TEST_DB_PASSWORD || 'test_password',

22 database: process.env.RELDENS_TEST_DB_NAME || 'reldens_storage_test',

23 client: process.env.RELDENS_TEST_DB_CLIENT || 'mysql'

24 };

25 }

27 static async setupDriver(driverName, rawEntities)

28 {

Lines 405-445javascript

405 FileHandler.remove(prismaPath);

406 }

407 let prismaConfigPath = FileHandler.joinPaths(process.cwd(), 'prisma.config.js');

408 if(FileHandler.exists(prismaConfigPath)){

409 Logger.info('Cleaning up Prisma config file: '+prismaConfigPath);

410 FileHandler.remove(prismaConfigPath);

411 }

tests/utils/prisma-subprocess-worker.jsView file

Lines 72-112javascript

72 }

74 async processIncomingMessage(message)

75 {

76 let projectRoot = sc.get(message, 'projectRoot', './');

77 let config = sc.get(message, 'config', {});

bin/reldens-storage.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

3/**

4 *

5 * Reldens - Storage CLI

6 *

7 */

9const { EntitiesGenerator } = require('../lib/entities-generator');

10const { PrismaClientLoader } =

lib/prisma/prisma-schema-generator.jsView file

Lines 43-83javascript

43 return false;

44 }

45 let stubDir = FileHandler.joinPaths(projectRoot, 'node_modules', '.prisma', 'client');

46 FileHandler.createFolder(stubDir);

47 FileHandler.copyFile(defaultIndexPath, stubPath);

48 Logger.info

.claude/test-architecture.mdView file

Lines 566-606markdown

566 --host=localhost \

567 --port=3306 \

568 --user=test_user \

569 --password=test_password \

570 --database=reldens_storage_test \

571 --client=mysql

572```

573

574**Generate Prisma Client:**

575```bash

576npx prisma generate --schema=prisma/schema.prisma

577```

578