registry  /  @schmock/openapi  /  2.3.0

@schmock/openapi@2.3.0

OpenAPI/Swagger spec-driven auto-registration plugin for Schmock

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
CryptoFilesystem
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 51 file(s), 1.01 MB of source, external domains: 127.0.0.1, callbacks.example.test, example.com, feross.org, github.com

Source & flagged code

4 flagged · loading source
src/__fixtures__/scalar-galaxy.yamlView file
840patternName = supabase_service_key severity = critical line = 840 matchedText = - eyJhbG...sw5c
Critical
Critical Secret

Package contains a critical-looking secret pattern.

src/__fixtures__/scalar-galaxy.yamlView on unpkg · L840
840patternName = supabase_service_key severity = critical line = 840 matchedText = - eyJhbG...sw5c
Critical
Secret Pattern

Supabase service role key (JWT) in src/__fixtures__/scalar-galaxy.yaml

src/__fixtures__/scalar-galaxy.yamlView on unpkg · L840
src/stress.test.tsView file
1851patternName = generic_password severity = medium line = 1851 matchedText = password...23",
Medium
Secret Pattern

Hardcoded password in src/stress.test.ts

src/stress.test.tsView on unpkg · L1851
1858patternName = generic_password severity = medium line = 1858 matchedText = body: { ..." },
Medium
Secret Pattern

Hardcoded password in src/stress.test.ts

src/stress.test.tsView on unpkg · L1858

Findings

2 Critical4 Medium5 Low
CriticalCritical Secretsrc/__fixtures__/scalar-galaxy.yaml
CriticalSecret Patternsrc/__fixtures__/scalar-galaxy.yaml
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/stress.test.ts
MediumSecret Patternsrc/stress.test.ts
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings