registry / dba-master / 1.6.1

dba-master@1.6.1

MCP server para introspecção profunda de bancos de dados (Oracle, PostgreSQL, MySQL/MariaDB), voltado a consumo por agentes de IA e LLMs

Static Scan Results

scanned 16d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 57 file(s), 233 KB of source, external domains: opencode.ai

Source & flagged code

5 flagged

dist/src/infrastructure/tunnel/ssh-tunnel.jsView file

Lines 1-21javascript

1import net from "node:net";

2import { createHash, createHmac } from "node:crypto";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/infrastructure/tunnel/ssh-tunnel.jsView on unpkg · L1

3import { readFileSync, existsSync } from "node:fs";

4import { homedir } from "node:os";

5import { join } from "node:path";

6import { Client } from "ssh2";

7// Túnel SSH in-process (ssh2, puro JS, cross-platform). Cria um servidor TCP local

8// efêmero; cada conexão vira um forwardOut(dst) pelo bastion. Host key verificado

9// por known_hosts (default) ou pin de fingerprint.

10export class SshTunnel {

11 cfg;

12 client;

13 server;

14 constructor(cfg) {

15 this.cfg = cfg;

16 }

17 async open(dst) {

18 const client = new Client();

19 this.client = client;

20 await new Promise((res, rej) => {

21 client.on("ready", res).on("error", rej).connect({

dist/setup/index.jsView file

Lines 1-22javascript

1import { intro, outro, note, multiselect, spinner, isCancel, cancel, log, text, select, password as promptPassword, confirm } from "@clack/prompts";

2import fs from "node:fs";

3import { execFileSync } from "node:child_process";

4import { resolve, dirname } from

dist/src/config.test.jsView file

Lines 35-71javascript

35 assert.strictEqual(connections.dev.poolMax, DEFAULT_POOL_MAX);

36 assert.strictEqual(connections.dev.readOnly, true);

37 assert.deepStrictEqual(connections.dev.schemaFilter, []);

38 });

39 test("preserva settings explícitos do connections.json", () => {

Source & flagged code

5 flagged · loading source

dist/src/infrastructure/tunnel/ssh-tunnel.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code