registry / node-red-contrib-remote / 3.0.0

node-red-contrib-remote@3.0.0

Remote-RED is an ecosystem to bring remote access, push notification and geofencing to Node-RED. There are also additional functions like directly answer on a notification and homescreen widgets.

Static Scan Results

scanned 20h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireFilesystemNetwork

Supply chain

HighEntropyStrings

Manifest

CopyleftLicense

scanned 5 file(s), 40.9 KB of source

Source & flagged code

3 flagged

nodes/remote-question.jsView file

Lines 1-21javascript

1module.exports = function(RED) {

2 const commons = require('./remote-commons');

3 const RateLimiter = require('limiter').RateLimiter;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

nodes/remote-question.jsView on unpkg · L1

5 function RemotequestionNode(config) {

6 RED.nodes.createNode(this,config);

7 const node = this;

9 // Retrieve the config node

10 node.confignode = RED.nodes.getNode(config.confignode);

11 if (node.confignode == undefined) {

12 node.log("No configuration found.");

13 }

15 // Init limiter for notifications

16 node.limiter = new RateLimiter(100, 'hour', true);

18 // Act on incomming messages

19 node.on('input', function(msg) {

20 if (node.confignode != undefined) {

21 if (msg.payload !== undefined && msg.payload.send === false) {

nodes/resources/sound_chime.mp3View file

•path = nodes/resources/sound_chime.mp3 kind = high_entropy_blob sizeBytes = 51856 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

nodes/resources/sound_chime.mp3View on unpkg

package.jsonView file

Lines 4-39json

4 "description": "Remote-RED is an ecosystem to bring remote access, push notification and geofencing to Node-RED. There are also additional functions like directly answer on a notification and homescreen widgets.",

5 "author": "Thorsten Heilmann",

6 "license": "GPL-3.0",

7 "node-red": {

8 "nodes": {

Source & flagged code

3 flagged · loading source

nodes/remote-question.jsView file

1module.exports = function(RED) { L2: const commons = require('./remote-commons'); L3: const RateLimiter = require('limiter').RateLimiter;

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code