registry / ctrlx-datalayer / 3.2.0

ctrlx-datalayer@3.2.0

Bosch Rexroth ctrlX Data Layer API

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 20 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNativeBindings

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 17 file(s), 70.6 KB of source

Source & flagged code

16 flagged

package.jsonView file

Lines 57-92json

57 "mocha": "^11.7.6",

58 "node-gyp": "^12.4.0",

59 "nyc": "^18.0.0",

60 "prebuildify": "^6.0.1",

61 "ts-node": "^10.9.2",

62 "typescript": "^6.0.3",

63 "typings": "^2.1.1"

64 },

65 "scripts": {

66 "tsc": "tsc",

67 "prepare": "tsc",

68 "pretest": "tsc",

69 "prebuild:debug": "prebuildify --napi --debug",

70 "prebuild": "prebuildify --napi",

71 "build:debug": "node-gyp build --debug",

72 "build": "node-gyp build",

73 "rebuild:debug": "node-gyp rebuild --debug",

74 "rebuild": "node-gyp rebuild",

75 "clean": "node-gyp clean",

76 "configure": "node-gyp configure",

77 "install": "node-gyp install",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L77

78 "build:samples": "cd ./sdk-samples && ./tsc.sh",

79 "benchmark": "mocha \"test/**/*benchmark*.spec.ts\"",

80 "test": "mocha \"test/**/*.spec.ts\"",

81 "test:utils": "mocha \"test/utils/**/*.spec.ts\"",

82 "test:client": "mocha \"test/client/**/*.spec.ts\"",

83 "test:client1": "mocha \"test/client/**/client.spec.ts\"",

84 "test:subscription": "mocha \"test/client/subscription/**/*.spec.ts\"",

85 "test:provider": "mocha \"test/provider/**/*.spec.ts\"",

86 "test:provider1": "mocha \"test/provider/**/publishEvent.spec.ts\"",

87 "test:coverage": "nyc npm run test",

88 "test:coverage:utils": "nyc npm run test:utils",

89 "debug": "node -r ts-node/register test/debug.ts"

90 }

91}

dist/remote.jsView file

Lines 3-90javascript

3 * SPDX-FileCopyrightText: Bosch Rexroth AG

4 *

5 * SPDX-License-Identifier: MIT

6 */

7var __importDefault = (this && this.__importDefault) ||

prebuilds/linux-arm64/ctrlx-datalayer.nodeView file

•path = prebuilds/linux-arm64/ctrlx-datalayer.node kind = native_binary sizeBytes = 13159608 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

prebuilds/linux-arm64/ctrlx-datalayer.nodeView on unpkg

LICENSES/tc_for_provision_of_products_free_of_charge.pdfView file

•path = LICENSES/tc_for_provision_of_products_free_of_charge.pdf kind = high_entropy_blob sizeBytes = 153265 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

LICENSES/tc_for_provision_of_products_free_of_charge.pdfView on unpkg

CHANGELOG.mdView file

Lines 61-101markdown

61+ Changed: Removed OpenSSL V3 libraries for Windows, because of export control relevance. You have to install the latest [Win64 OpenSSL v3 Light](https://slproweb.com/products/Win32OpenSSL.html) setup, if the API is used on Windows operating systems.

63### 2.0.1

64+ New: Updated to Data Layer API 2.2.7.

66+ Fix: API crash on arm64 and amd64 (undefined symbol: _ZN6common3log5trace11LogBufferedC1EPKcb)

68### 2.0.0

69+ New: Upgraded to Ubuntu 22.04 LTS (Jammy Jellyfish).

70+

README.mdView file

Lines 30-70markdown

30### Install

32```sh

33npm install ctrlx-datalayer --save

34```

36### Usage

38The following code snippet demonstrates how to create a client and read a value from a ctrlX Data Layer node:

40```ts

41async function

samples/client.tsView file

Lines 12-78typescript

12import { SubscriptionSettings } from 'ctrlx-datalayer-flatbuffers/dist/comm/datalayer/subscription-settings';

13import { SubscriptionProperties } from 'ctrlx-datalayer-flatbuffers/dist/comm/datalayer/subscription-properties';

14import { NotifyInfo } from 'ctrlx-datalayer-flatbuffers/dist/comm/datalayer/notify-info';

16//Reads a value from a ctrlX Data Layer node

17/*

18 * SPDX-FileCopyrightText: Bosch Rexroth AG

samples/provider.tsView file

97patternName = generic_password severity = medium line = 97 matchedText = password...th',

Medium

Secret Pattern

Hardcoded password in samples/provider.ts

samples/provider.tsView on unpkg · L97

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.install = node-gyp install

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/remote.jsView file

77patternName = generic_password severity = medium line = 77 matchedText = static b...}) {

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/remote.jsView on unpkg · L77

23patternName = generic_password severity = medium line = 23 matchedText = * pa...oth'

Medium

Secret Pattern

Hardcoded password in dist/remote.js

dist/remote.jsView on unpkg · L23

36patternName = generic_password severity = medium line = 36 matchedText = * co...' })

Medium

Secret Pattern

Hardcoded password in dist/remote.js

dist/remote.jsView on unpkg · L36

prebuilds/linux-arm64/ctrlx-datalayer.nodeView file

•path = prebuilds/linux-arm64/ctrlx-datalayer.node kind = native_binary sizeBytes = 13159608 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

prebuilds/linux-arm64/ctrlx-datalayer.nodeView on unpkg

LICENSES/tc_for_provision_of_products_free_of_charge.pdfView file

•path = LICENSES/tc_for_provision_of_products_free_of_charge.pdf kind = high_entropy_blob sizeBytes = 153265 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

LICENSES/tc_for_provision_of_products_free_of_charge.pdfView on unpkg

CHANGELOG.mdView file

81patternName = generic_password severity = medium line = 81 matchedText = const re..." })

Medium

Secret Pattern

Hardcoded password in CHANGELOG.md

CHANGELOG.mdView on unpkg · L81

README.mdView file

50patternName = generic_password severity = medium line = 50 matchedText = password...th',

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L50

samples/client.tsView file

32patternName = generic_password severity = medium line = 32 matchedText = password...th',

Medium

Secret Pattern