registry / mp-js-api / 0.0.49

mp-js-api@0.0.49

Node MinistryPlatform API

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 52 file(s), 144 KB of source, external domains: mp.revival.com, www.thinkministry.com

Source & flagged code

2 flagged

docs/npm-publishing-guide.mdView file

Lines 30-70markdown

30 - **Expiration**: Choose duration (max 90 days)

31 - **Packages**: Select which packages this token can access

32 - **Permissions**: Set to **"Read and write"** for publishing

334. Click **Generate** and copy the token immediately

35### Configure Token Locally

37```bash

38npm config set //registry.npmjs.org/:_authToken=YOUR_TOKEN_HERE

39```

41Or add to `.npmrc` file:

43```

44//registry.npmjs.org/:_authToken=YOUR_TOKEN_HERE

45```

47### Store in .env (for reference)

49```env

50NPM_TOKEN=npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Critical

Critical Secret

Package contains a critical-looking secret pattern.

docs/npm-publishing-guide.mdView on unpkg · L50

Critical

Secret Pattern

npm access token in docs/npm-publishing-guide.md

docs/npm-publishing-guide.mdView on unpkg · L50

51```

53---

55## Publishing

57### 1. Update Version

59```bash

60npm version patch # 0.0.30 → 0.0.31

61npm version minor # 0.0.31 → 0.1.0

62npm version major # 0.1.0 → 1.0.0

63```

65### 2. Publish

67```bash

68npm publish

69```

Source & flagged code

2 flagged · loading source

docs/npm-publishing-guide.mdView file

50patternName = npm_token severity = critical line = 50 matchedText = NPM_TOKE...xxxx

Critical

Critical Secret

Package contains a critical-looking secret pattern.

docs/npm-publishing-guide.mdView on unpkg · L50

50patternName = npm_token severity = critical line = 50 matchedText = NPM_TOKE...xxxx

Critical

Secret Pattern

npm access token in docs/npm-publishing-guide.md

docs/npm-publishing-guide.mdView on unpkg · L50

Findings

2 Critical1 Medium4 Low

CriticalCritical Secretdocs/npm-publishing-guide.md

CriticalSecret Patterndocs/npm-publishing-guide.md

MediumNetwork

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings