registry / busabase / 0.9.11

busabase@0.9.11

Open-source Busabase review app + CLI. `busabase server` boots a zero-setup local instance (pglite); other subcommands act as an OpenAPI client.

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 8.21 KB of source

Source & flagged code

6 flagged

.next/standalone/apps/busabase/.next/static/media/__worker__.0_husg21o_d3g.jsView file

13patternName = private_key_rsa severity = critical line = 13 matchedText = -----END...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.next/standalone/apps/busabase/.next/static/media/__worker__.0_husg21o_d3g.jsView on unpkg · L13

13patternName = private_key_rsa severity = critical line = 13 matchedText = -----END...----

Critical

Secret Pattern

RSA private key in .next/standalone/apps/busabase/.next/static/media/__worker__.0_husg21o_d3g.js

.next/standalone/apps/busabase/.next/static/media/__worker__.0_husg21o_d3g.jsView on unpkg · L13

bin/busabase.mjsView file

Lines 164-204

Source & flagged code

6 flagged · loading source

.next/standalone/apps/busabase/.next/static/media/__worker__.0_husg21o_d3g.jsView file

13patternName = private_key_rsa severity = critical line = 13 matchedText = -----END...----

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code