registry / @things-factory/kpi / 10.0.0-zeta.8

@things-factory/kpi@10.0.0-zeta.8

kpi module

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 160 file(s), 1.24 MB of source, external domains: images.unsplash.com, maps.googleapis.com, unpkg.com

Source & flagged code

4 flagged

dist-client/google-map/google-map-loader.jsView file

Lines 1-22javascript

1import ScriptLoader from '@operato/utils/script-loader.js';

2export default class GoogleMapLoader {

3 static { this.loaded = false; }

4 static { this

Source & flagged code

4 flagged · loading source

dist-client/google-map/google-map-loader.jsView file

9patternName = google_api_key severity = high line = 9 matchedText = var key ...gA';

High

High Secret

Package contains a high-severity secret pattern.

dist-client/google-map/google-map-loader.jsView on unpkg · L9

9patternName = google_api_key severity = high line = 9 matchedText = var key ...gA';

High

Secret Pattern

Google API key in dist-client/google-map/google-map-loader.js

dist-client/google-map/google-map-loader.jsView on unpkg · L9

dist-server/migrations/1752192090129-seed-kpi-values.jsView file

3exports.SeedKpiValues1752192090129 = void 0; L4: const tslib_1 = require("tslib"); L5: const shell_1 = require("@things-factory/shell");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-server/migrations/1752192090129-seed-kpi-values.jsView on unpkg · L3

client/google-map/google-map-loader.tsView file

11patternName = google_api_key severity = high line = 11 matchedText = var key ...PgA'

High

Secret Pattern

Google API key in client/google-map/google-map-loader.ts

client/google-map/google-map-loader.tsView on unpkg · L11

Findings

3 High2 Medium4 Low

HighHigh Secretdist-client/google-map/google-map-loader.js

HighSecret Patterndist-client/google-map/google-map-loader.js

HighSecret Patternclient/google-map/google-map-loader.ts

MediumDynamic Requiredist-server/migrations/1752192090129-seed-kpi-values.js

MediumNetwork

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

dist-server/migrations/1752192090129-seed-kpi-values.jsView file

Lines 1-23javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.SeedKpiValues1752192090129 = void 0;

4const tslib_1 = require("tslib");

5const shell_1 = require("@things-factory/shell");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-server/migrations/1752192090129-seed-kpi-values.jsView on unpkg · L3

6const kpi_value_1 = require("../service/kpi-value/kpi-value");

7const kpi_1 = require("../service/kpi/kpi");

8const kpi_org_scope_1 = require("../service/kpi-org-scope/kpi-org-scope");

9const fs = tslib_1.__importStar(require("fs"));

10const path = tslib_1.__importStar(require("path"));

11class SeedKpiValues1752192090129 {

12 constructor() {

13 this.name = 'SeedKpiValues1752192090129';

14 }

15 async up(queryRunner) {

16 try {

17 const repository = (0, shell_1.getRepository)(kpi_value_1.KpiValue);

18 const domainRepository = (0, shell_1.getRepository)(shell_1.Domain);

19 const kpiRepository = (0, shell_1.getRepository)(kpi_1.Kpi);

20 const kpiOrgScopeRepository = (0, shell_1.getRepository)(kpi_org_scope_1.KpiOrgScope);

21 // SYSTEM 도메인 확인

22 const domain = await domainRepository.findOneBy({ name: 'SYSTEM' });

23 if (!domain) {

client/google-map/google-map-loader.tsView file

Lines 1-30typescript

1import ScriptLoader from '@operato/utils/script-loader.js'

3export default class GoogleMapLoader {

4 static loaded = false

5 static markerClustererLoaded = false

7 static async load() {

8 if (GoogleMapLoader.loaded) {

9 return

10 }

11 var key = 'AIzaSyBgQZb-SFqjQBC_XTxNiz0XapejNwV9PgA'

High

Secret Pattern

Google API key in client/google-map/google-map-loader.ts

client/google-map/google-map-loader.tsView on unpkg · L11

13 await ScriptLoader.load(

14 'https://maps.googleapis.com/maps/api/js' + (key ? '?key=' + key : '') + '&libraries=places'

15 )

16 GoogleMapLoader.loaded = true

17 }

19 static async loadMarkerClusterer() {

20 if (GoogleMapLoader.markerClustererLoaded) {

21 return

22 }

24 // Google Maps 공식 MarkerClusterer 라이브러리 로드

25 await ScriptLoader.load('https://unpkg.com/@googlemaps/markerclusterer/dist/index.min.js')

27 GoogleMapLoader.markerClustererLoaded = true

28 }

29}