registry / blogger-publisher / 1.3.0

blogger-publisher@1.3.0

A powerful CLI to automate your Blogger publishing using Markdown, Multi-CDN, and AI Agents.

Static Scan Results

scanned 12h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 33.6 KB of source, external domains: api.github.com, api.imgbb.com, cdn.jsdelivr.net, drive.google.com, www.googleapis.com

Source & flagged code

1 flagged

lib/uploaders/github.jsView file

Lines 1-21javascript

1const axios = require('axios');

2const fs = require('fs');

3const path = require('path');

4const crypto = require('crypto');

6async function uploadImageToGitHub(authClient, localFilePath) {

7 const token = process.env.GITHUB_TOKEN;

8 const repo = process.env.GITHUB_REPO; // format: username/repo

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/uploaders/github.jsView on unpkg · L1

10 if (!token || !repo) {

11 throw new Error("GITHUB_TOKEN atau GITHUB_REPO tidak ditemukan di .env");

12 }

14 if (!fs.existsSync(localFilePath)) {

15 throw new Error(`File gambar tidak ditemukan: ${localFilePath}`);

16 }

18 const fileName = path.basename(localFilePath);

20 // Gunakan hash agar tidak bentrok jika nama sama

21 const fileBuffer = fs.readFileSync(localFilePath);

Source & flagged code

1 flagged · loading source

lib/uploaders/github.jsView file

1const axios = require('axios'); L2: const fs = require('fs'); ... L6: async function uploadImageToGitHub(authClient, localFilePath) { L7: const token = process.env.GITHUB_TOKEN; L8: const repo = process.env.GITHUB_REPO; // format: username/repo ... L23: const uniqueFileName = `${hash}-${fileName}`; L24: const imageBase64 = fileBuffer.toString('base64'); L25:

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code