registry / ldapts / 8.2.0

ldapts@8.2.0

LDAP client

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCrypto

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 108 file(s), 403 KB of source

Source & flagged code

5 flagged

dist/index.cjsView file

Lines 3260-3300javascript

3260 if (messageDetails) {

3261 this._destroySocket(messageDetails.socket);

3262 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3263 }

3264 }, this.clientOptions.timeout) : null;

3265 const sendPromise = new Promise((resolve, reject) => {

3266 messageResolve = resolve;

3267 messageReject = reject;

3268 }).finally(() => {

3269 if (messageTimeoutId) clearTimeout(messageTimeoutId);

3270 });

3271 this.messageDetailsByMessageId.set(message.messageId.toString(), {

3272 message,

3273 resolve: messageResolve,

3274 reject: messageReject,

3275 timeoutTimer: messageTimeoutId,

3276 socket: this.socket

3277 });

3278 if (message.password) logDebug(`Sending message: ${JSON.stringify({

3279 ...message,

3280 password: "__redacted__"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.cjsView on unpkg · L3280

3281 })}`);

3282 else logDebug(`Sending message: ${JSON.stringify(message)}`);

3283 this.socket.write(messageContentBuffer, () => {

3284 if (message instanceof AbandonRequest) {

3285 logDebug(`Abandoned message: ${message.messageId}`);

3286 this.messageDetailsByMessageId.delete(message.messageId.toString());

3287 messageResolve();

3288 } else if (message instanceof UnbindRequest) {

3289 logDebug("Unbind success. Ending socket");

3290 if (this.socket) this._destroySocket(this.socket);

3291 } else logDebug("Message sent successfully.");

3292 });

3293 return sendPromise;

3294 }

3295 _handleSendResponse(message) {

3296 const messageDetails = this.messageDetailsByMessageId.get(message.messageId.toString());

3297 if (messageDetails) if (message instanceof SearchEntry) {

3298 messageDetails.searchEntries = messageDetails.searchEntries ?? [];

3299 messageDetails.searchEntries.push(message);

3300 } else if (message instanceof SearchReference) {

dist/index.mjsView file

Lines 3233-3273javascript

3233 if (messageDetails) {

3234 this._destroySocket(messageDetails.socket);

3235 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3236 }

3237 }, this.clientOptions.timeout) : null;

README.mdView file

Lines 563-627markdown

563

564`unbind()`

565

566Used to indicate that the client wants to close the connection to the directory server.

567

568Example:

569

570```ts

571await client.unbind();

572```

573

574## Usage Examples

575

576### Authenticate example

src/Client.tsView file

Lines 1112-1152typescript

1112 }).finally(() => {

1113 if (messageTimeoutId) {

1114 clearTimeout(messageTimeoutId);

1115 }

1116 });

1117

1118 this.messageDetailsByMessageId.set(message.messageId.toString(), {

1119 message,

1120

Source & flagged code

5 flagged · loading source

dist/index.cjsView file

3280patternName = generic_password severity = medium line = 3280 matchedText = password...d__"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.cjsView on unpkg · L3280

dist/index.mjsView file

3253patternName = generic_password severity = medium line = 3253 matchedText = password...d__"

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L3253

README.mdView file

583patternName = generic_password severity = medium line = 583 matchedText = const pa...rd';

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L583

607patternName = generic_password severity = medium line = 607 matchedText = const pa...rm';

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L607

src/Client.tsView file

1132patternName = generic_password severity = medium line = 1132 matchedText = password...__',

Medium

Secret Pattern

Hardcoded password in src/Client.ts

src/Client.tsView on unpkg · L1132

Findings

5 Medium3 Low

MediumSecret Patterndist/index.cjs

MediumSecret Patterndist/index.mjs

MediumSecret PatternREADME.md

MediumSecret Patternsrc/Client.ts

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

5 flagged

dist/index.cjsView file

Lines 3260-3300javascript

3260 if (messageDetails) {

3261 this._destroySocket(messageDetails.socket);

3262 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3263 }

3264 }, this.clientOptions.timeout) : null;

3265 const sendPromise = new Promise((resolve, reject) => {

3266 messageResolve = resolve;

3267 messageReject = reject;

3268 }).finally(() => {

3269 if (messageTimeoutId) clearTimeout(messageTimeoutId);

3270 });

3271 this.messageDetailsByMessageId.set(message.messageId.toString(), {

3272 message,

3273 resolve: messageResolve,

3274 reject: messageReject,

3275 timeoutTimer: messageTimeoutId,

3276 socket: this.socket

3277 });

3278 if (message.password) logDebug(`Sending message: ${JSON.stringify({

3279 ...message,

3280 password: "__redacted__"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.cjsView on unpkg · L3280

3281 })}`);

3282 else logDebug(`Sending message: ${JSON.stringify(message)}`);

3283 this.socket.write(messageContentBuffer, () => {

3284 if (message instanceof AbandonRequest) {

3285 logDebug(`Abandoned message: ${message.messageId}`);

3286 this.messageDetailsByMessageId.delete(message.messageId.toString());

3287 messageResolve();

3288 } else if (message instanceof UnbindRequest) {

3289 logDebug("Unbind success. Ending socket");

3290 if (this.socket) this._destroySocket(this.socket);

3291 } else logDebug("Message sent successfully.");

3292 });

3293 return sendPromise;

3294 }

3295 _handleSendResponse(message) {

3296 const messageDetails = this.messageDetailsByMessageId.get(message.messageId.toString());

3297 if (messageDetails) if (message instanceof SearchEntry) {

3298 messageDetails.searchEntries = messageDetails.searchEntries ?? [];

3299 messageDetails.searchEntries.push(message);

3300 } else if (message instanceof SearchReference) {

dist/index.mjsView file

Lines 3233-3273javascript

3233 if (messageDetails) {

3234 this._destroySocket(messageDetails.socket);

3235 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3236 }

3237 }, this.clientOptions.timeout) : null;

README.mdView file

Lines 563-627markdown

563

564`unbind()`

565

566Used to indicate that the client wants to close the connection to the directory server.

567

568Example:

569

570```ts

571await client.unbind();

572```

573

574## Usage Examples

575

576### Authenticate example

src/Client.tsView file

Lines 1112-1152typescript

1112 }).finally(() => {

1113 if (messageTimeoutId) {

1114 clearTimeout(messageTimeoutId);

1115 }

1116 });

1117

1118 this.messageDetailsByMessageId.set(message.messageId.toString(), {

1119 message,

1120