registry / @terreno/ui / 0.24.0

@terreno/ui@0.24.0

[![Netlify Status](https://api.netlify.com/api/v1/badges/ffd05ee5-fbcf-417e-8455-45ea15447361/deploy-status)](https://app.netlify.com/sites/terreno-ui/deploys)

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 410 file(s), 2.49 MB of source, external domains: api.example.com, example.com, maps.googleapis.com, www.google.com

Source & flagged code

4 flagged

dist/TextField.jsView file

Lines 16-56javascript

16 number: "number-pad",

17 numberRange: "number-pad",

18 password: "default",

19 phoneNumber: "number-pad",

20 search: "default",

21 text: "default",

22 url: Platform.select({

23 android: "default",

24 ios: "url",

25 }),

26 username: "default",

27};

28// Not an exhaustive list of all the textContent types, but the ones we use.

29const textContentMap = {

30 date: "none",

31 decimal: "none",

32 decimalRange: "none",

33 email: "emailAddress",

34 height: "none",

35 number: "none",

36 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/TextField.jsView on unpkg · L36

37 search: "none",

38 text: "none",

39 url: Platform.select({

40 android: "none",

41 ios: "URL",

42 }),

43 username: "username",

44};

45export const TextField = ({ title, disabled, helperText, errorText, value, onChange, placeholder, blurOnSubmit = true, iconName, onIconClick, trimOnBlur = true, type = "text", autoComplete, inputRef, multiline,

46 const { theme } = useTheme();

47 const fieldTestIDs = resolveFieldTestIDsFromProps({ testID, testIDs });

48 const calendar = getCalendars()[0];

49 const localTimeZone = calendar === null || calendar === void 0 ? void 0 : calendar.timeZone;

50 if (!localTimeZone) {

51 console.warn("Could not automatically determine timezone.");

52 }

53 const [focused, setFocused] = useState(false);

54 const [height, setHeight] = useState(rows * 40);

55 let borderColor = focused ? theme.border.focus : theme.border.dark;

56 if (disabled) {

src/signUp/PasswordRequirements.test.tsxView file

Lines 17-42tsx

17 it("renders with custom testID", () => {

18 const {getByTestId} = renderWithTheme(

19 <PasswordRequirements

20 password=""

21 requirements={defaultPasswordRequirements}

22 testID="custom-reqs"

src/TextField.tsxView file

Lines 29-69tsx

29 phoneNumber: "number-pad",

30 search: "default",

31 text: "default",

32 url: Platform.select({

33 android: "default",

34 ios: "url",

35 }),

src/login/LoginScreen.test.tsxView file

Lines 160-183tsx

160

161 it("calls onSubmit with form values when submit button is pressed", async () => {

162 const onSubmit = mock(() => Promise.resolve());

163 const {getByTestId} = renderWithTheme(

Source & flagged code

4 flagged · loading source

dist/TextField.jsView file

36patternName = generic_password severity = medium line = 36 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/TextField.jsView on unpkg · L36

src/signUp/PasswordRequirements.test.tsxView file

37patternName = generic_password severity = medium line = 37 matchedText = <Passwor...} />

Medium

Secret Pattern

Hardcoded password in src/signUp/PasswordRequirements.test.tsx

src/signUp/PasswordRequirements.test.tsxView on unpkg · L37

src/TextField.tsxView file

49patternName = generic_password severity = medium line = 49 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in src/TextField.tsx

src/TextField.tsxView on unpkg · L49

src/login/LoginScreen.test.tsxView file

180patternName = generic_password severity = medium line = 180 matchedText = expect(o..."});

Medium

Secret Pattern

Hardcoded password in src/login/LoginScreen.test.tsx

src/login/LoginScreen.test.tsxView on unpkg · L180

Findings

6 Medium3 Low

MediumSecret Patterndist/TextField.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternsrc/signUp/PasswordRequirements.test.tsx

MediumSecret Patternsrc/TextField.tsx

MediumSecret Patternsrc/login/LoginScreen.test.tsx

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/TextField.jsView file

Lines 16-56javascript

16 number: "number-pad",

17 numberRange: "number-pad",

18 password: "default",

19 phoneNumber: "number-pad",

20 search: "default",

21 text: "default",

22 url: Platform.select({

23 android: "default",

24 ios: "url",

25 }),

26 username: "default",

27};

28// Not an exhaustive list of all the textContent types, but the ones we use.

29const textContentMap = {

30 date: "none",

31 decimal: "none",

32 decimalRange: "none",

33 email: "emailAddress",

34 height: "none",

35 number: "none",

36 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/TextField.jsView on unpkg · L36

37 search: "none",

38 text: "none",

39 url: Platform.select({

40 android: "none",

41 ios: "URL",

42 }),

43 username: "username",

44};

46 const { theme } = useTheme();

47 const fieldTestIDs = resolveFieldTestIDsFromProps({ testID, testIDs });

48 const calendar = getCalendars()[0];

49 const localTimeZone = calendar === null || calendar === void 0 ? void 0 : calendar.timeZone;

50 if (!localTimeZone) {

51 console.warn("Could not automatically determine timezone.");

52 }

53 const [focused, setFocused] = useState(false);

54 const [height, setHeight] = useState(rows * 40);

55 let borderColor = focused ? theme.border.focus : theme.border.dark;

56 if (disabled) {

src/signUp/PasswordRequirements.test.tsxView file

Lines 17-42tsx

17 it("renders with custom testID", () => {

18 const {getByTestId} = renderWithTheme(

19 <PasswordRequirements

20 password=""

21 requirements={defaultPasswordRequirements}

22 testID="custom-reqs"

src/TextField.tsxView file

Lines 29-69tsx

29 phoneNumber: "number-pad",

30 search: "default",

31 text: "default",

32 url: Platform.select({

33 android: "default",

34 ios: "url",

35 }),

src/login/LoginScreen.test.tsxView file

Lines 160-183tsx

160

161 it("calls onSubmit with form values when submit button is pressed", async () => {

162 const onSubmit = mock(() => Promise.resolve());

163 const {getByTestId} = renderWithTheme(