registry / @sylphx/sdk / 0.23.0

@sylphx/sdk@0.23.0

Sylphx SDK - State-of-the-art platform SDK with pure functions

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

NoLicense

scanned 7 file(s), 1.72 MB of source, external domains: api.example.com, bff.local, cdn.amplitude.com, cdn.mxpnl.com, cdn.segment.com, connect.facebook.net, docs.sylphx.com, static.hotjar.com, sylphx.com, us-assets.i.posthog.com, us.i.posthog.com, widget.intercom.io, www.googletagmanager.com, www.linkedin.com, your-app.api.sylphx.com

Source & flagged code

2 flagged

dist/react/index.mjsView file

32413patternName = generic_password severity = medium line = 32413 matchedText = password...ut",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/react/index.mjsView on unpkg · L32413

dist/index.d.tsView file

Lines 3464-3504typescript

3464declare function forgotPassword(config: SylphxConfig, email: string, options?: {

3465 redirectUrl?: string;

3466}): Promise<void>;

3467/**

3468 * Request a verification email resend.

3469 *

3470 * The Platform response is intentionally privacy-preserving: it never

3471 * indicates whether the email exists or is already verified.

3472 *

3473 * @example

3474 * ```typescript

3475 * await resendVerificationEmail(config, 'user@example.com')

3476 * ```

3477 */

3478declare function resendVerificationEmail(config: SylphxConfig, email: string): Promise<void>;

3479/**

3480 * Reset password with token

3481 *

3482 * @example

3483 * ```typescript

3484 * await resetPassword(config, { token, password: 'newpassword' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L3484

3485 * ```

3486 */

3487declare function resetPassword(config: SylphxConfig, input: {

3488 token: string;

3489 password: string;

3490}): Promise<void>;

3491/**

3492 * Get current session (requires authenticated config)

3493 *

3494 * @example

3495 * ```typescript

3496 * const session = await getSession(authenticatedConfig)

3497 * if (session.user) {

3498 * console.log(`Logged in as ${session.user.email}`)

3499 * }

3500 * ```

3501 */

3502declare function getSession(config: SylphxConfig): Promise<SessionResult>;

3503/**

3504 * Verify 2FA code (when signIn returns requiresTwoFactor: true)

Source & flagged code

2 flagged · loading source

dist/react/index.mjsView file

32413patternName = generic_password severity = medium line = 32413 matchedText = password...ut",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/react/index.mjsView on unpkg · L32413

dist/index.d.tsView file

3484patternName = generic_password severity = medium line = 3484 matchedText = * await ...' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L3484

Findings

4 Medium6 Low

MediumSecret Patterndist/react/index.mjs

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/index.d.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/react/index.mjsView file

32413patternName = generic_password severity = medium line = 32413 matchedText = password...ut",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/react/index.mjsView on unpkg · L32413

dist/index.d.tsView file

Lines 3464-3504typescript

3464declare function forgotPassword(config: SylphxConfig, email: string, options?: {

3465 redirectUrl?: string;

3466}): Promise<void>;

3467/**

3468 * Request a verification email resend.

3469 *

3470 * The Platform response is intentionally privacy-preserving: it never

3471 * indicates whether the email exists or is already verified.

3472 *

3473 * @example

3474 * ```typescript

3475 * await resendVerificationEmail(config, 'user@example.com')

3476 * ```

3477 */

3478declare function resendVerificationEmail(config: SylphxConfig, email: string): Promise<void>;

3479/**

3480 * Reset password with token

3481 *

3482 * @example

3483 * ```typescript

3484 * await resetPassword(config, { token, password: 'newpassword' })

Medium

Secret Pattern

Hardcoded password in dist/index.d.ts

dist/index.d.tsView on unpkg · L3484

3485 * ```

3486 */

3487declare function resetPassword(config: SylphxConfig, input: {

3488 token: string;

3489 password: string;

3490}): Promise<void>;

3491/**

3492 * Get current session (requires authenticated config)

3493 *

3494 * @example

3495 * ```typescript

3496 * const session = await getSession(authenticatedConfig)

3497 * if (session.user) {

3498 * console.log(`Logged in as ${session.user.email}`)

3499 * }

3500 * ```

3501 */

3502declare function getSession(config: SylphxConfig): Promise<SessionResult>;

3503/**

3504 * Verify 2FA code (when signIn returns requiresTwoFactor: true)