registry / pacificdb-client / 0.1.0

pacificdb-client@0.1.0

Official PacificDB TypeScript/JavaScript client

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 40.6 KB of source

Source & flagged code

3 flagged

dist/index.jsView file

Lines 81-121javascript

81 authSource: url.searchParams.get("authSource") || "admin",

82 appName: url.searchParams.get("appName") || void 0

83 };

84}

85function buildConnectionString(input) {

86 const url = new URL(`pacificdb://${input.clusterHost}/${encodeURIComponent(input.databaseName)}`);

87 url.username = encodeURIComponent(input.username);

88 url.password = encodeURIComponent(input.password);

89 if (input.orgId) url.searchParams.set("orgId", input.orgId);

90 url.searchParams.set("projectId", input.projectId);

91 url.searchParams.set("clusterId", input.clusterId);

92 url.searchParams.set("databaseId", input.databaseId);

93 url.searchParams.set("tls", String(input.tls !== false));

94 url.searchParams.set("authSource", input.authSource || "admin");

95 if (input.appName) url.searchParams.set("appName", input.appName);

96 return url.toString();

97}

98function redactConnectionString(uri) {

99 try {

100 const url = new URL(uri);

101 if (url.password) url.password = "REDACTED";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L101

102 return url.toString();

103 } catch {

104 return uri.replace(/(pacificdb:\/\/[^:]+:)[^@]+@/i, "$1REDACTED@");

105 }

106}

107function redactSecrets(value) {

108 if (!value || typeof value !== "object") return value;

109 if (Array.isArray(value)) return value.map(redactSecrets);

110 const out = {};

111 for (const [key, item] of Object.entries(value)) {

112 out[key] = SECRET_KEYS.has(key.toLowerCase()) ? "REDACTED" : redactSecrets(item);

113 }

114 return out;

115}

116

117// src/client.ts

118var RETRIABLE_CODES = /* @__PURE__ */ new Set(["server_busy", "not_leader", "TIMEOUT", "RATE_LIMITED", "HTTP_503", "HTTP_429", "ENGINE_UNAVAILABLE"]);

119function randomRequestId() {

120 return `req_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;

121}

dist/index.cjsView file

Lines 117-157javascript

117 authSource: url.searchParams.get("authSource") || "admin",

118 appName: url.searchParams.get("appName") || void 0

119 };

120}

121function buildConnectionString(input) {

dist/index.mjsView file

Lines 81-121javascript

81 authSource: url.searchParams.get("authSource") || "admin",

82 appName: url.searchParams.get("appName") || void 0

83 };

84}

85function buildConnectionString(input) {

Source & flagged code

3 flagged · loading source

dist/index.jsView file

101patternName = generic_password severity = medium line = 101 matchedText = if (url....ED";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L101

dist/index.cjsView file

137patternName = generic_password severity = medium line = 137 matchedText = if (url....ED";

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L137

dist/index.mjsView file

101patternName = generic_password severity = medium line = 101 matchedText = if (url....ED";

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L101

Findings

3 Medium2 Low

MediumSecret Patterndist/index.js

MediumSecret Patterndist/index.cjs

MediumSecret Patterndist/index.mjs

LowNon Install Lifecycle Scripts

LowScripts Present

Source & flagged code

3 flagged

dist/index.jsView file

Lines 81-121javascript

81 authSource: url.searchParams.get("authSource") || "admin",

82 appName: url.searchParams.get("appName") || void 0

83 };

84}

85function buildConnectionString(input) {

86 const url = new URL(`pacificdb://${input.clusterHost}/${encodeURIComponent(input.databaseName)}`);

87 url.username = encodeURIComponent(input.username);

88 url.password = encodeURIComponent(input.password);

89 if (input.orgId) url.searchParams.set("orgId", input.orgId);

90 url.searchParams.set("projectId", input.projectId);

91 url.searchParams.set("clusterId", input.clusterId);

92 url.searchParams.set("databaseId", input.databaseId);

93 url.searchParams.set("tls", String(input.tls !== false));

94 url.searchParams.set("authSource", input.authSource || "admin");

95 if (input.appName) url.searchParams.set("appName", input.appName);

96 return url.toString();

97}

98function redactConnectionString(uri) {

99 try {

100 const url = new URL(uri);

101 if (url.password) url.password = "REDACTED";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L101

102 return url.toString();

103 } catch {

104 return uri.replace(/(pacificdb:\/\/[^:]+:)[^@]+@/i, "$1REDACTED@");

105 }

106}

107function redactSecrets(value) {

108 if (!value || typeof value !== "object") return value;

109 if (Array.isArray(value)) return value.map(redactSecrets);

110 const out = {};

111 for (const [key, item] of Object.entries(value)) {

112 out[key] = SECRET_KEYS.has(key.toLowerCase()) ? "REDACTED" : redactSecrets(item);

113 }

114 return out;

115}

116

117// src/client.ts

118var RETRIABLE_CODES = /* @__PURE__ */ new Set(["server_busy", "not_leader", "TIMEOUT", "RATE_LIMITED", "HTTP_503", "HTTP_429", "ENGINE_UNAVAILABLE"]);

119function randomRequestId() {

120 return `req_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;

121}

dist/index.cjsView file

Lines 117-157javascript

117 authSource: url.searchParams.get("authSource") || "admin",

118 appName: url.searchParams.get("appName") || void 0

119 };

120}

121function buildConnectionString(input) {

dist/index.mjsView file

Lines 81-121javascript

81 authSource: url.searchParams.get("authSource") || "admin",

82 appName: url.searchParams.get("appName") || void 0

83 };

84}

85function buildConnectionString(input) {