registry / @tricoteuses/assemblee / 3.2.14

@tricoteuses/assemblee@3.2.14

Retrieve, clean up & handle French Assemblée nationale's open data

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 9 file(s), 613 KB of source, external domains: data.assemblee-nationale.fr, forum.en-root.org, fr.wikipedia.org, github.com, schemas.assemblee-nationale.fr, www.assemblee-nationale.fr, www.ibm.com, www.legifrance.gouv.fr, www.performance-publique.budget.gouv.fr, www.senat.fr, www.w3.org, www2.assemblee-nationale.fr

Source & flagged code

1 flagged

lib/parsers.jsView file

Lines 2388-2428javascript

2388 }

2389};

2390function Ur(e, t, n, r) {

2391 if (n === null) {

2392 if (e.length > r) throw Error(`Pseudo-class :${t} requires an argument`);

2393 } else if (e.length === r) throw Error(`Pseudo-class :${t} doesn't have any arguments`);

2394}

2395//#endregion

2396//#region node_modules/css-select/lib/esm/pseudo-selectors/aliases.js

2397var Wr = {

2398 "any-link": ":is(a, area, link)[href]",

2399 link: ":any-link:not(:visited)",

2400 disabled: ":is(\n :is(button, input, select, textarea, optgroup, option)[disabled],\n optgroup[disabled] > option,\n fieldset[disabled]:not(fieldset[disabled] legend:first-of-type *)\n )",

2401 enabled: ":not(:disabled)",

2402 checked: ":is(:is(input[type=radio], input[type=checkbox])[checked], option:selected)",

2403 required: ":is(input, select, textarea)[required]",

2404 optional: ":is(input, select, textarea):not([required])",

2405 selected: "option:is([selected], select:not([multiple]):not(:has(> option[selected])) > :first-of-type)",

2406 checkbox: "[type=checkbox]",

2407 file: "[type=file]",

2408 password: "[type=password]",

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/parsers.jsView on unpkg · L2408

2409 radio: "[type=radio]",

2410 reset: "[type=reset]",

2411 image: "[type=image]",

2412 submit: "[type=submit]",

2413 parent: ":not(:empty)",

2414 header: ":is(h1, h2, h3, h4, h5, h6)",

2415 button: ":is(button, input[type=button])",

2416 input: ":is(input, textarea, select, button)",

2417 text: "input:is(:not([type!='']), [type=text])"

2418}, Gr = {};

2419function Kr(e, t) {

2420 return e === L.default.falseFunc ? L.default.falseFunc : (n) => t.isTag(n) && e(n);

2421}

2422function qr(e, t) {

2423 let n = t.getSiblings(e);

2424 if (n.length <= 1) return [];

2425 let r = n.indexOf(e);

2426 return r < 0 || r === n.length - 1 ? [] : n.slice(r + 1).filter(t.isTag);

2427}

2428function Jr(e) {

Source & flagged code

1 flagged · loading source

lib/parsers.jsView file

2408patternName = generic_password severity = medium line = 2408 matchedText = password...d]",

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/parsers.jsView on unpkg · L2408

Findings

3 Medium6 Low

MediumSecret Patternlib/parsers.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Source & flagged code

1 flagged

lib/parsers.jsView file

Lines 2388-2428javascript

2388 }

2389};

2390function Ur(e, t, n, r) {

2391 if (n === null) {

2392 if (e.length > r) throw Error(`Pseudo-class :${t} requires an argument`);

2393 } else if (e.length === r) throw Error(`Pseudo-class :${t} doesn't have any arguments`);

2394}

2395//#endregion

2396//#region node_modules/css-select/lib/esm/pseudo-selectors/aliases.js

2397var Wr = {

2398 "any-link": ":is(a, area, link)[href]",

2399 link: ":any-link:not(:visited)",

2400 disabled: ":is(\n :is(button, input, select, textarea, optgroup, option)[disabled],\n optgroup[disabled] > option,\n fieldset[disabled]:not(fieldset[disabled] legend:first-of-type *)\n )",

2401 enabled: ":not(:disabled)",

2402 checked: ":is(:is(input[type=radio], input[type=checkbox])[checked], option:selected)",

2403 required: ":is(input, select, textarea)[required]",

2404 optional: ":is(input, select, textarea):not([required])",

2405 selected: "option:is([selected], select:not([multiple]):not(:has(> option[selected])) > :first-of-type)",

2406 checkbox: "[type=checkbox]",

2407 file: "[type=file]",

2408 password: "[type=password]",

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/parsers.jsView on unpkg · L2408

2409 radio: "[type=radio]",

2410 reset: "[type=reset]",

2411 image: "[type=image]",

2412 submit: "[type=submit]",

2413 parent: ":not(:empty)",

2414 header: ":is(h1, h2, h3, h4, h5, h6)",

2415 button: ":is(button, input[type=button])",

2416 input: ":is(input, textarea, select, button)",

2417 text: "input:is(:not([type!='']), [type=text])"

2418}, Gr = {};

2419function Kr(e, t) {

2420 return e === L.default.falseFunc ? L.default.falseFunc : (n) => t.isTag(n) && e(n);

2421}

2422function qr(e, t) {

2423 let n = t.getSiblings(e);

2424 if (n.length <= 1) return [];

2425 let r = n.indexOf(e);

2426 return r < 0 || r === n.length - 1 ? [] : n.slice(r + 1).filter(t.isTag);

2427}

2428function Jr(e) {