crescodb@0.2.0
Upgrade to crescodb@latest — versions below 1.0.0 are no longer supported and will be refused by the platform.
Instant local backend — SQLite + auto REST API + AI schema generation
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedsrc/server/manifest.jsView file
36patternName = generic_password
severity = medium
line = 36
matchedText = { method...} },
Medium
37patternName = generic_password
severity = medium
line = 37
matchedText = { method...} },
Medium
src/server/routes-loader.jsView file
22try {
L23: const mod = await import(pathToFileURL(routesPath).href + '?t=' + Date.now());
L24: defs = mod.default || mod.routes || [];
Medium
Dynamic Require
Package source references dynamic require/import behavior.
src/server/routes-loader.jsView on unpkg · L22Findings
1 High5 Medium4 Low
HighPrevious Version Dangerous Deltasrc/server/dev-server.js
MediumSecret Patternsrc/server/manifest.js
MediumDynamic Requiresrc/server/routes-loader.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patternsrc/server/manifest.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to crescodb@0.2.0.
See all versions of crescodb for other recorded verdicts.
- Review the evidence and your use of crescodb@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.