registry / @things-factory/operato-pms / 10.0.0-zeta.3

@things-factory/operato-pms@10.0.0-zeta.3

Application for plantation management system

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 282 file(s), 650 KB of source, external domains: www.w3.org

Source & flagged code

2 flagged

config/config.production.jsView file

Lines 16-41javascript

16 logger: {

17 file: {

18 filename: 'logs/application-%DATE%.log',

19 datePattern: 'YYYY-MM-DD-HH',

20 zippedArchive: false,

21 maxSize: '20m',

22 maxFiles: '2d',

23 level: 'info'

24 },

25 console: {

26 level: 'silly'

27 }

28 },

29 ormconfig: {

30 name: 'default',

31 type: 'postgres',

32 host: 'postgres',

33 port: 55432,

34 database: 'postgres',

35 username: 'postgres',

36 password: 'abcd1234',

Medium

Secret Pattern

Package contains a possible secret pattern.

config/config.production.jsView on unpkg · L36

37 synchronize: false,

38 logging: true

39 }

40}

dist-server/migrations/index.jsView file

Lines 1-12javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.migrations = void 0;

4const glob = require('glob');

5const path

Source & flagged code

2 flagged · loading source

config/config.production.jsView file

36patternName = generic_password severity = medium line = 36 matchedText = password...34',

Medium

Secret Pattern

Package contains a possible secret pattern.

config/config.production.jsView on unpkg · L36

dist-server/migrations/index.jsView file

3exports.migrations = void 0; L4: const glob = require('glob'); L5: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-server/migrations/index.jsView on unpkg · L3

Findings

3 Medium4 Low

MediumSecret Patternconfig/config.production.js

MediumDynamic Requiredist-server/migrations/index.js

MediumNetwork

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

config/config.production.jsView file

Lines 16-41javascript

16 logger: {

17 file: {

18 filename: 'logs/application-%DATE%.log',

19 datePattern: 'YYYY-MM-DD-HH',

20 zippedArchive: false,

21 maxSize: '20m',

22 maxFiles: '2d',

23 level: 'info'

24 },

25 console: {

26 level: 'silly'

27 }

28 },

29 ormconfig: {

30 name: 'default',

31 type: 'postgres',

32 host: 'postgres',

33 port: 55432,

34 database: 'postgres',

35 username: 'postgres',

36 password: 'abcd1234',

Medium

Secret Pattern

Package contains a possible secret pattern.

config/config.production.jsView on unpkg · L36

37 synchronize: false,

38 logging: true

39 }

40}

dist-server/migrations/index.jsView file

Lines 1-12javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.migrations = void 0;

4const glob = require('glob');

5const path