registry / @terreno/ui / 0.26.0

@terreno/ui@0.26.0

[![Netlify Status](https://api.netlify.com/api/v1/badges/ffd05ee5-fbcf-417e-8455-45ea15447361/deploy-status)](https://app.netlify.com/sites/terreno-ui/deploys)

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 405 file(s), 2.56 MB of source, external domains: api.example.com, example.com, maps.googleapis.com, www.google.com

Source & flagged code

4 flagged

dist/TextField.jsView file

Lines 18-58javascript

18 number: "number-pad",

19 numberRange: "number-pad",

20 password: "default",

21 phoneNumber: "number-pad",

22 search: "default",

23 text: "default",

24 url: Platform.select({

25 android: "default",

26 ios: "url",

27 }),

28 username: "default",

29};

30// Not an exhaustive list of all the textContent types, but the ones we use.

31const textContentMap = {

32 date: "none",

33 decimal: "none",

34 decimalRange: "none",

35 email: "emailAddress",

36 height: "none",

37 number: "none",

38 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/TextField.jsView on unpkg · L38

39 search: "none",

40 text: "none",

41 url: Platform.select({

42 android: "none",

43 ios: "URL",

44 }),

45 username: "username",

46};

47export const TextField = ({ title, disabled, helperText, errorText, value, onChange, placeholder, blurOnSubmit = true, iconName, onIconClick, trimOnBlur = true, type = "text", autoComplete, inputRef, multiline,

48 const { theme } = useTheme();

49 const fieldTestIDs = resolveFieldTestIDsFromProps({ testID, testIDs });

50 const calendar = getCalendars()[0];

51 const localTimeZone = calendar === null || calendar === void 0 ? void 0 : calendar.timeZone;

52 if (!localTimeZone) {

53 console.warn("Could not automatically determine timezone.");

54 }

55 const [focused, setFocused] = useState(false);

56 const [height, setHeight] = useState(rows * 40);

57 let borderColor = focused ? theme.border.focus : theme.border.dark;

58 if (disabled) {

src/signUp/PasswordRequirements.test.tsxView file

Lines 17-42tsx

17 it("renders with custom testID", () => {

18 const {getByTestId} = renderWithTheme(

19 <PasswordRequirements

20 password=""

21 requirements={defaultPasswordRequirements}

22 testID="custom-reqs"

src/TextField.tsxView file

Lines 31-71tsx

31 phoneNumber: "number-pad",

32 search: "default",

33 text: "default",

34 url: Platform.select({

35 android: "default",

36 ios: "url",

37 }),

src/login/LoginScreen.test.tsxView file

Lines 160-183tsx

160

161 it("calls onSubmit with form values when submit button is pressed", async () => {

162 const onSubmit = mock(() => Promise.resolve());

163 const {getByTestId} = renderWithTheme(

Source & flagged code

4 flagged · loading source

dist/TextField.jsView file

38patternName = generic_password severity = medium line = 38 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/TextField.jsView on unpkg · L38

src/signUp/PasswordRequirements.test.tsxView file

37patternName = generic_password severity = medium line = 37 matchedText = <Passwor...} />

Medium

Secret Pattern

Hardcoded password in src/signUp/PasswordRequirements.test.tsx

src/signUp/PasswordRequirements.test.tsxView on unpkg · L37

src/TextField.tsxView file

51patternName = generic_password severity = medium line = 51 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in src/TextField.tsx

src/TextField.tsxView on unpkg · L51

src/login/LoginScreen.test.tsxView file

180patternName = generic_password severity = medium line = 180 matchedText = expect(o..."});

Medium

Secret Pattern

Hardcoded password in src/login/LoginScreen.test.tsx

src/login/LoginScreen.test.tsxView on unpkg · L180

Findings

6 Medium3 Low

MediumSecret Patterndist/TextField.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternsrc/signUp/PasswordRequirements.test.tsx

MediumSecret Patternsrc/TextField.tsx

MediumSecret Patternsrc/login/LoginScreen.test.tsx

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/TextField.jsView file

Lines 18-58javascript

18 number: "number-pad",

19 numberRange: "number-pad",

20 password: "default",

21 phoneNumber: "number-pad",

22 search: "default",

23 text: "default",

24 url: Platform.select({

25 android: "default",

26 ios: "url",

27 }),

28 username: "default",

29};

30// Not an exhaustive list of all the textContent types, but the ones we use.

31const textContentMap = {

32 date: "none",

33 decimal: "none",

34 decimalRange: "none",

35 email: "emailAddress",

36 height: "none",

37 number: "none",

38 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/TextField.jsView on unpkg · L38

39 search: "none",

40 text: "none",

41 url: Platform.select({

42 android: "none",

43 ios: "URL",

44 }),

45 username: "username",

46};

48 const { theme } = useTheme();

49 const fieldTestIDs = resolveFieldTestIDsFromProps({ testID, testIDs });

50 const calendar = getCalendars()[0];

51 const localTimeZone = calendar === null || calendar === void 0 ? void 0 : calendar.timeZone;

52 if (!localTimeZone) {

53 console.warn("Could not automatically determine timezone.");

54 }

55 const [focused, setFocused] = useState(false);

56 const [height, setHeight] = useState(rows * 40);

57 let borderColor = focused ? theme.border.focus : theme.border.dark;

58 if (disabled) {

src/signUp/PasswordRequirements.test.tsxView file

Lines 17-42tsx

17 it("renders with custom testID", () => {

18 const {getByTestId} = renderWithTheme(

19 <PasswordRequirements

20 password=""

21 requirements={defaultPasswordRequirements}

22 testID="custom-reqs"

src/TextField.tsxView file

Lines 31-71tsx

31 phoneNumber: "number-pad",

32 search: "default",

33 text: "default",

34 url: Platform.select({

35 android: "default",

36 ios: "url",

37 }),

src/login/LoginScreen.test.tsxView file

Lines 160-183tsx

160

161 it("calls onSubmit with form values when submit button is pressed", async () => {

162 const onSubmit = mock(() => Promise.resolve());

163 const {getByTestId} = renderWithTheme(