registry  /  @vonage/client-sdk  /  2.6.0

@vonage/client-sdk@2.6.0

The Client SDK is intended to provide a ready solution for developers to build Programmable Conversation applications across multiple Channels including: Messages, Voice, SIP, websockets, and App.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessFilesystemNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 10 file(s), 3.61 MB of source, external domains: api-ap-3.vonage.com, api-ap-4.vonage.com, api-ap.vonage.com, api-eu-3.vonage.com, api-eu-4.vonage.com, api-eu.vonage.com, api-us-3.vonage.com, api-us-4.vonage.com, api-us.vonage.com, hlg.tokbox.com, lunrjs.com, socket.io, tartarus.org, ws-ap.vonage.com, ws-eu.vonage.com, ws-us.vonage.com, www.w3.org
Oversized source lightweight scan
dist/client/index.cjs3.66 MB file, sampled 256 KB
NetworkHighEntropyStrings
dist/client/index.mjs3.66 MB file, sampled 256 KB
NetworkWebSocketHighEntropyStrings
dist/vonageClientSDK.js4.22 MB file, sampled 256 KB
HighEntropyStringsUrlStringssocket.io
dist/vonageClientSDK.mjs3.84 MB file, sampled 256 KB
ChildProcessHighEntropyStringsUrlStringssocket.io

Source & flagged code

3 flagged · loading source
dist/vonageClientSDK.min.jsView file
143patternName = generic_password severity = medium line = 143 matchedText = var Yn,V...)});
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/vonageClientSDK.min.jsView on unpkg · L143
dist/vonageClientSDK.mjsView file
•path = dist/vonageClientSDK.mjs kind = oversized_source_file sizeBytes = 4030000 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/vonageClientSDK.mjsView on unpkg
dist/vonageClientSDK.min.mjsView file
143patternName = generic_password severity = medium line = 143 matchedText = var Bn,Y...me};
Medium
Secret Pattern

Hardcoded password in dist/vonageClientSDK.min.mjs

dist/vonageClientSDK.min.mjsView on unpkg · L143

Findings

1 High4 Medium6 Low
HighOversized Source Filedist/vonageClientSDK.mjs
MediumSecret Patterndist/vonageClientSDK.min.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/vonageClientSDK.min.mjs
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License