registry / @tekir/mongodb / 0.1.2

@tekir/mongodb@0.1.2

MongoDB integration with models and hooks

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 49.8 KB of source

1 flagged

dist/connection.jsView file

Lines 1-37javascript

1let _mongoose = null;

2/**

3 * Lazily load and cache the `mongoose` module.

4 *

5 * @returns The mongoose module instance.

6 * @throws If `mongoose` is not installed.

7 *

8 * @example

1 flagged · loading source

dist/connection.jsView file

17package = @tekir/mongodb; repositoryIdentity = tekir; dependency = mongoose L17: try { L18: _mongoose = require('mongoose'); L19: return _mongoose;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

1 High1 Medium2 Low

HighCopied Package Dependency Bridgedist/connection.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present