registry  /  javascript-solid-server  /  0.0.219

javascript-solid-server@0.0.219

A minimal, fast Solid server

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 50 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsUrlStrings
Manifest
CopyleftLicense
scanned 87 file(s), 1.03 MB of source, external domains: 127.0.0.1, alice.example.com, cdn.jsdelivr.net, example.com, example.org, github.com, jss.live, litecoinspace.org, mempool.space, nodeinfo.diaspora.software, nostr.social, purl.org, raw.githubusercontent.com, remotestorage.io, schema.org, solid-apps.github.io, solid.social, solidos.org, solidproject.org, tools.ietf.org, unpkg.com, w3id.org, webacl.org, www.w3.org, xmlns.com

Source & flagged code

42 flagged · loading source
test/interop/nss-discovery.jsView file
25patternName = generic_password severity = medium line = 25 matchedText = body: JS... }),
Medium
Secret Pattern

Package contains a possible secret pattern.

test/interop/nss-discovery.jsView on unpkg · L25
src/plugins.jsView file
238try { L239: mod = await import(href); L240: } catch (err) {
Medium
Dynamic Require

Package source references dynamic require/import behavior.

src/plugins.jsView on unpkg · L238
src/storage/filesystem.jsView file
1import fs from 'fs-extra'; L2: import path from 'path';
Low
Weak Crypto

Package source references weak cryptographic algorithms.

src/storage/filesystem.jsView on unpkg · L1
scripts/install-termux.shView file
•path = scripts/install-termux.sh kind = build_helper sizeBytes = 2710 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install-termux.shView on unpkg
test/auth-agent.test.jsView file
84patternName = generic_password severity = medium line = 84 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/auth-agent.test.js

test/auth-agent.test.jsView on unpkg · L84
91patternName = generic_password severity = medium line = 91 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/auth-agent.test.js

test/auth-agent.test.jsView on unpkg · L91
test/interop/nss-local-fixed.jsView file
25patternName = generic_password severity = medium line = 25 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/interop/nss-local-fixed.js

test/interop/nss-local-fixed.jsView on unpkg · L25
test/interop/nss-local.jsView file
27patternName = generic_password severity = medium line = 27 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/interop/nss-local.js

test/interop/nss-local.jsView on unpkg · L27
test/interop/solidcommunity-interop.jsView file
28patternName = generic_password severity = medium line = 28 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/interop/solidcommunity-interop.js

test/interop/solidcommunity-interop.jsView on unpkg · L28
test/interop/css-interop.jsView file
72patternName = generic_password severity = medium line = 72 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/interop/css-interop.js

test/interop/css-interop.jsView on unpkg · L72
test/schnorr-complete-defensive.test.jsView file
76patternName = generic_password severity = medium line = 76 matchedText = password...45',
Medium
Secret Pattern

Hardcoded password in test/schnorr-complete-defensive.test.js

test/schnorr-complete-defensive.test.jsView on unpkg · L76
test/idp-change-password.test.jsView file
122patternName = generic_password severity = medium line = 122 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-change-password.test.js

test/idp-change-password.test.jsView on unpkg · L122
153patternName = generic_password severity = medium line = 153 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-change-password.test.js

test/idp-change-password.test.jsView on unpkg · L153
161patternName = generic_password severity = medium line = 161 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-change-password.test.js

test/idp-change-password.test.jsView on unpkg · L161
194patternName = generic_password severity = medium line = 194 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-change-password.test.js

test/idp-change-password.test.jsView on unpkg · L194
202patternName = generic_password severity = medium line = 202 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-change-password.test.js

test/idp-change-password.test.jsView on unpkg · L202
test/idp.test.jsView file
122patternName = generic_password severity = medium line = 122 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L122
155patternName = generic_password severity = medium line = 155 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L155
166patternName = generic_password severity = medium line = 166 matchedText = password...56',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L166
364patternName = generic_password severity = medium line = 364 matchedText = body: ne... }),
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L364
455patternName = generic_password severity = medium line = 455 matchedText = body: ne... }),
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L455
694patternName = generic_password severity = medium line = 694 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L694
720patternName = generic_password severity = medium line = 720 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L720
766patternName = generic_password severity = medium line = 766 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L766
811patternName = generic_password severity = medium line = 811 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L811
826patternName = generic_password severity = medium line = 826 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L826
839patternName = generic_password severity = medium line = 839 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L839
858patternName = generic_password severity = medium line = 858 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L858
895patternName = generic_password severity = medium line = 895 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in test/idp.test.js

test/idp.test.jsView on unpkg · L895
test/idp-login-error.test.jsView file
87patternName = generic_password severity = medium line = 87 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-login-error.test.js

test/idp-login-error.test.jsView on unpkg · L87
test/well-known-did-nostr.test.jsView file
100patternName = generic_password severity = medium line = 100 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in test/well-known-did-nostr.test.js

test/well-known-did-nostr.test.jsView on unpkg · L100
test/idp-export.test.jsView file
107patternName = generic_password severity = medium line = 107 matchedText = name: 'a...123'
Medium
Secret Pattern

Hardcoded password in test/idp-export.test.js

test/idp-export.test.jsView on unpkg · L107
117patternName = generic_password severity = medium line = 117 matchedText = name: 'b...456'
Medium
Secret Pattern

Hardcoded password in test/idp-export.test.js

test/idp-export.test.jsView on unpkg · L117
252patternName = generic_password severity = medium line = 252 matchedText = body: ne...g(),
Medium
Secret Pattern

Hardcoded password in test/idp-export.test.js

test/idp-export.test.jsView on unpkg · L252
355patternName = generic_password severity = medium line = 355 matchedText = body: ne...g(),
Medium
Secret Pattern

Hardcoded password in test/idp-export.test.js

test/idp-export.test.jsView on unpkg · L355
test/idp-delete-account.test.jsView file
120patternName = generic_password severity = medium line = 120 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-delete-account.test.js

test/idp-delete-account.test.jsView on unpkg · L120
148patternName = generic_password severity = medium line = 148 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-delete-account.test.js

test/idp-delete-account.test.jsView on unpkg · L148
259patternName = generic_password severity = medium line = 259 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-delete-account.test.js

test/idp-delete-account.test.jsView on unpkg · L259
266patternName = generic_password severity = medium line = 266 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-delete-account.test.js

test/idp-delete-account.test.jsView on unpkg · L266
386patternName = generic_password severity = medium line = 386 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-delete-account.test.js

test/idp-delete-account.test.jsView on unpkg · L386
418patternName = generic_password severity = medium line = 418 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-delete-account.test.js

test/idp-delete-account.test.jsView on unpkg · L418
451patternName = generic_password severity = medium line = 451 matchedText = body: JS... }),
Medium
Secret Pattern

Hardcoded password in test/idp-delete-account.test.js

test/idp-delete-account.test.jsView on unpkg · L451

Findings

44 Medium6 Low
MediumSecret Patterntest/interop/nss-discovery.js
MediumDynamic Requiresrc/plugins.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/install-termux.sh
MediumStructural Risk Force Deep Review
MediumSecret Patterntest/auth-agent.test.js
MediumSecret Patterntest/auth-agent.test.js
MediumSecret Patterntest/interop/nss-local-fixed.js
MediumSecret Patterntest/interop/nss-local.js
MediumSecret Patterntest/interop/solidcommunity-interop.js
MediumSecret Patterntest/interop/css-interop.js
MediumSecret Patterntest/schnorr-complete-defensive.test.js
MediumSecret Patterntest/idp-change-password.test.js
MediumSecret Patterntest/idp-change-password.test.js
MediumSecret Patterntest/idp-change-password.test.js
MediumSecret Patterntest/idp-change-password.test.js
MediumSecret Patterntest/idp-change-password.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp.test.js
MediumSecret Patterntest/idp-login-error.test.js
MediumSecret Patterntest/well-known-did-nostr.test.js
MediumSecret Patterntest/idp-export.test.js
MediumSecret Patterntest/idp-export.test.js
MediumSecret Patterntest/idp-export.test.js
MediumSecret Patterntest/idp-export.test.js
MediumSecret Patterntest/idp-delete-account.test.js
MediumSecret Patterntest/idp-delete-account.test.js
MediumSecret Patterntest/idp-delete-account.test.js
MediumSecret Patterntest/idp-delete-account.test.js
MediumSecret Patterntest/idp-delete-account.test.js
MediumSecret Patterntest/idp-delete-account.test.js
MediumSecret Patterntest/idp-delete-account.test.js
LowScripts Present
LowWeak Cryptosrc/storage/filesystem.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License