registry / ldapts / 9.0.0

ldapts@9.0.0

LDAP client

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCrypto

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 108 file(s), 402 KB of source

Source & flagged code

5 flagged

dist/index.cjsView file

Lines 3250-3290javascript

3250 if (messageDetails) {

3251 this._destroySocket(messageDetails.socket);

3252 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3253 }

3254 }, this.clientOptions.timeout) : null;

3255 const sendPromise = new Promise((resolve, reject) => {

3256 messageResolve = resolve;

3257 messageReject = reject;

3258 }).finally(() => {

3259 if (messageTimeoutId) clearTimeout(messageTimeoutId);

3260 });

3261 this.messageDetailsByMessageId.set(message.messageId.toString(), {

3262 message,

3263 resolve: messageResolve,

3264 reject: messageReject,

3265 timeoutTimer: messageTimeoutId,

3266 socket: this.socket

3267 });

3268 if (message.password) logDebug(`Sending message: ${JSON.stringify({

3269 ...message,

3270 password: "__redacted__"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.cjsView on unpkg · L3270

3271 })}`);

3272 else logDebug(`Sending message: ${JSON.stringify(message)}`);

3273 this.socket.write(messageContentBuffer, () => {

3274 if (message instanceof AbandonRequest) {

3275 logDebug(`Abandoned message: ${message.messageId}`);

3276 this.messageDetailsByMessageId.delete(message.messageId.toString());

3277 messageResolve();

3278 } else if (message instanceof UnbindRequest) {

3279 logDebug("Unbind success. Ending socket");

3280 if (this.socket) this._destroySocket(this.socket);

3281 } else logDebug("Message sent successfully.");

3282 });

3283 return sendPromise;

3284 }

3285 _handleSendResponse(message) {

3286 const messageDetails = this.messageDetailsByMessageId.get(message.messageId.toString());

3287 if (messageDetails) if (message instanceof SearchEntry) {

3288 messageDetails.searchEntries = messageDetails.searchEntries ?? [];

3289 messageDetails.searchEntries.push(message);

3290 } else if (message instanceof SearchReference) {

dist/index.mjsView file

Lines 3223-3263javascript

3223 if (messageDetails) {

3224 this._destroySocket(messageDetails.socket);

3225 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3226 }

3227 }, this.clientOptions.timeout) : null;

README.mdView file

Lines 563-627markdown

563

564`unbind()`

565

566Used to indicate that the client wants to close the connection to the directory server.

567

568Example:

569

570```ts

571await client.unbind();

572```

573

574## Usage Examples

575

576### Authenticate example

src/Client.tsView file

Lines 1109-1149typescript

1109 }).finally(() => {

1110 if (messageTimeoutId) {

1111 clearTimeout(messageTimeoutId);

1112 }

1113 });

1114

1115 this.messageDetailsByMessageId.set(message.messageId.toString(), {

1116 message,

1117

Source & flagged code

5 flagged · loading source

dist/index.cjsView file

3270patternName = generic_password severity = medium line = 3270 matchedText = password...d__"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.cjsView on unpkg · L3270

dist/index.mjsView file

3243patternName = generic_password severity = medium line = 3243 matchedText = password...d__"

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L3243

README.mdView file

583patternName = generic_password severity = medium line = 583 matchedText = const pa...rd';

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L583

607patternName = generic_password severity = medium line = 607 matchedText = const pa...rm';

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L607

src/Client.tsView file

1129patternName = generic_password severity = medium line = 1129 matchedText = password...__',

Medium

Secret Pattern

Hardcoded password in src/Client.ts

src/Client.tsView on unpkg · L1129

Findings

5 Medium3 Low

MediumSecret Patterndist/index.cjs

MediumSecret Patterndist/index.mjs

MediumSecret PatternREADME.md

MediumSecret Patternsrc/Client.ts

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

5 flagged

dist/index.cjsView file

Lines 3250-3290javascript

3250 if (messageDetails) {

3251 this._destroySocket(messageDetails.socket);

3252 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3253 }

3254 }, this.clientOptions.timeout) : null;

3255 const sendPromise = new Promise((resolve, reject) => {

3256 messageResolve = resolve;

3257 messageReject = reject;

3258 }).finally(() => {

3259 if (messageTimeoutId) clearTimeout(messageTimeoutId);

3260 });

3261 this.messageDetailsByMessageId.set(message.messageId.toString(), {

3262 message,

3263 resolve: messageResolve,

3264 reject: messageReject,

3265 timeoutTimer: messageTimeoutId,

3266 socket: this.socket

3267 });

3268 if (message.password) logDebug(`Sending message: ${JSON.stringify({

3269 ...message,

3270 password: "__redacted__"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.cjsView on unpkg · L3270

3271 })}`);

3272 else logDebug(`Sending message: ${JSON.stringify(message)}`);

3273 this.socket.write(messageContentBuffer, () => {

3274 if (message instanceof AbandonRequest) {

3275 logDebug(`Abandoned message: ${message.messageId}`);

3276 this.messageDetailsByMessageId.delete(message.messageId.toString());

3277 messageResolve();

3278 } else if (message instanceof UnbindRequest) {

3279 logDebug("Unbind success. Ending socket");

3280 if (this.socket) this._destroySocket(this.socket);

3281 } else logDebug("Message sent successfully.");

3282 });

3283 return sendPromise;

3284 }

3285 _handleSendResponse(message) {

3286 const messageDetails = this.messageDetailsByMessageId.get(message.messageId.toString());

3287 if (messageDetails) if (message instanceof SearchEntry) {

3288 messageDetails.searchEntries = messageDetails.searchEntries ?? [];

3289 messageDetails.searchEntries.push(message);

3290 } else if (message instanceof SearchReference) {

dist/index.mjsView file

Lines 3223-3263javascript

3223 if (messageDetails) {

3224 this._destroySocket(messageDetails.socket);

3225 messageReject(/* @__PURE__ */ new Error(`${message.constructor.name}: Operation timed out`));

3226 }

3227 }, this.clientOptions.timeout) : null;

README.mdView file

Lines 563-627markdown

563

564`unbind()`

565

566Used to indicate that the client wants to close the connection to the directory server.

567

568Example:

569

570```ts

571await client.unbind();

572```

573

574## Usage Examples

575

576### Authenticate example

src/Client.tsView file

Lines 1109-1149typescript

1109 }).finally(() => {

1110 if (messageTimeoutId) {

1111 clearTimeout(messageTimeoutId);

1112 }

1113 });

1114

1115 this.messageDetailsByMessageId.set(message.messageId.toString(), {

1116 message,

1117