registry  /  @schmock/openapi  /  2.2.2

@schmock/openapi@2.2.2

OpenAPI/Swagger spec-driven auto-registration plugin for Schmock

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
CryptoFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 46 file(s), 947 KB of source, external domains: 127.0.0.1, example.com, feross.org, github.com

Source & flagged code

4 flagged · loading source
src/__fixtures__/scalar-galaxy.yamlView file
840patternName = supabase_service_key severity = critical line = 840 matchedText = - eyJhbG...sw5c
Critical
Critical Secret

Package contains a critical-looking secret pattern.

src/__fixtures__/scalar-galaxy.yamlView on unpkg · L840
840patternName = supabase_service_key severity = critical line = 840 matchedText = - eyJhbG...sw5c
Critical
Secret Pattern

Supabase service role key (JWT) in src/__fixtures__/scalar-galaxy.yaml

src/__fixtures__/scalar-galaxy.yamlView on unpkg · L840
src/stress.test.tsView file
1850patternName = generic_password severity = medium line = 1850 matchedText = password...23",
Medium
Secret Pattern

Hardcoded password in src/stress.test.ts

src/stress.test.tsView on unpkg · L1850
1857patternName = generic_password severity = medium line = 1857 matchedText = body: { ..." },
Medium
Secret Pattern

Hardcoded password in src/stress.test.ts

src/stress.test.tsView on unpkg · L1857

Findings

2 Critical5 Medium5 Low
CriticalCritical Secretsrc/__fixtures__/scalar-galaxy.yaml
CriticalSecret Patternsrc/__fixtures__/scalar-galaxy.yaml
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patternsrc/stress.test.ts
MediumSecret Patternsrc/stress.test.ts
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings