registry / privacy-redactor / 0.1.2

privacy-redactor@0.1.2

Local-first sensitive information redaction for text, logs, support tickets, and app integrations.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 162 KB of source, external domains: esm.sh, schemas.openxmlformats.org, uilpx.github.io, unpkg.com

Source & flagged code

13 flagged

test/fixtures/redaction-cases.jsonView file

Lines 1-33json

2 "positive": [

3 {

4 "name": "support contact bundle",

5 "mode": "all",

6 "input": "Email: yang@example.com\nPhone: +1 415 555 0123\nSSN: 219-09-9999\nRemote IPv6: 2001:db8:85a3::8a2e:370:7334",

7 "types": ["EMAIL", "PHONE", "US_SSN", "IPV6_ADDRESS"],

8 "placeholders": ["[EMAIL]", "[PHONE]", "[US_SSN]", "[IPV6_ADDRESS]"]

9 },

10 {

11 "name": "developer secret bundle",

12 "mode": "developer",

13 "input": "openai=sk-proj-abcdefghijklmnopqrstuvwxyzABCDE1234567890\ngithub=ghp_abcdefghijklmnopqrstuvwxyzABCDE1234567890\naws=AKIAIOSFODNN7EXAMPLE\ndatabase=postgres://redactor:s3cr3t-pass@db.example.com:5432/app\npassword=\"CorrectHorse7!\"",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

test/fixtures/redaction-cases.jsonView on unpkg · L13

Critical

Secret Pattern

GitHub personal access token in test/fixtures/redaction-cases.json

test/fixtures/redaction-cases.jsonView on unpkg · L13

Critical

Secret Pattern

AWS access key ID in test/fixtures/redaction-cases.json

test/fixtures/redaction-cases.jsonView on unpkg · L13

14 "types": ["OPENAI_API_KEY", "GITHUB_TOKEN", "AWS_ACCESS_KEY_ID", "URL_CREDENTIALS", "PASSWORD"],

15 "placeholders": ["[OPENAI_API_KEY]", "[GITHUB_TOKEN]", "[AWS_ACCESS_KEY_ID]", "[URL_CREDENTIALS]", "[PASSWORD]"]

16 },

17 {

18 "name": "travel booking bundle",

19 "mode": "travel",

20 "input": "Passenger: PENG/YANG\nBooking reference: ZX9K2Q\nTicket number: 220-1234567890\nPassport No: E12345678",

21 "types": ["PASSENGER_NAME", "BOOKING_REFERENCE", "TICKET_NUMBER", "PASSPORT_NUMBER"],

22 "placeholders": ["[PASSENGER_NAME]", "[BOOKING_REFERENCE]", "[TICKET_NUMBER]", "[PASSPORT_NUMBER]"]

23 },

24 {

25 "name": "finance bundle",

26 "mode": "finance",

27 "input": "IBAN: GB82 WEST 1234 5698 7654 32\nRouting number: 021000021\nBank account number: ACCT-99887766\nSWIFT: BOFAUS3NXXX\nTax ID: 94-3126847\nInvoice number: INV-2026-778899\nTransaction ID: TXN-2026-ABC-7788",

28 "types": ["IBAN", "US_ROUTING_NUMBER", "BANK_ACCOUNT_NUMBER", "SWIFT_BIC", "TAX_ID", "INVOICE_NUMBER", "TRANSACTION_ID"],

29 "placeholders": ["[IBAN]", "[US_ROUTING_NUMBER]", "[BANK_ACCOUNT_NUMBER]", "[SWIFT_BIC]", "[TAX_ID]", "[INVOICE_NUMBER]", "[TRANSACTION_ID]"]

30 },

31 {

32 "name": "healthcare bundle",

33 "mode": "healthcare",

docs/launch-plan.mdView file

Lines 12-52markdown

13GitHub topics:

15- `privacy`

16- `pii`

17- `redaction`

18- `local-first`

19- `web-component`

20- `ai-safety`

21- `data-loss-prevention`

README.mdView file

Lines 19-59markdown

20| Mode | Purpose | Examples |

21|---|---|---|

22| `general` | Common personal data | email, phone, card number, date of birth, address, SSN, national ID, IPv4/IPv6 address |

23| `travel` | Travel and booking data | PNR, booking reference, ticket number, passport number, passenger name, loyalty number, QR payload |

24| `developer` | Developer secrets and logs | API keys, passwords, bearer tokens, JWTs, URLs with embedded credentials, OpenAI keys, Google keys, Stripe keys, GitHub tokens, Slack tokens, AWS access key IDs, private key blocks |

25| `finance` | Banking and payment operations | IBAN, routing number, bank account, SWIFT/BIC, tax ID, invoice, transaction ID |

26| `healthcare` | Patient and insurance workflows | MRN, patient ID, NPI, prescription number, claim number, insurance member ID |

samples/developer-log.txtView file

Lines 1-6text

12026-07-08T18:11:42Z ERROR request failed

2authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.fakepayload

3aws_key=AKIAIOSFODNN7EXAMPLE

Critical

Secret Pattern

AWS access key ID in samples/developer-log.txt

samples/developer-log.txtView on unpkg · L3

4github_token=ghp_abcdefghijklmnopqrstuvwxyzABCDE1234567890

Critical

Secret Pattern

GitHub personal access token in samples/developer-log.txt

samples/developer-log.txtView on unpkg · L4

5client_secret=client_secret_1234567890abcdefghijklmnop

samples/support-ticket.txtView file

6patternName = stripe_test_secret severity = high line = 6 matchedText = api_key=...mnop

High

Secret Pattern

Stripe test secret key in samples/support-ticket.txt

samples/support-ticket.txtView on unpkg · L6

CONTRIBUTING.mdView file

32patternName = stripe_test_secret severity = high line = 32 matchedText = - `api_k...nop`

High

Secret Pattern

Stripe test secret key in CONTRIBUTING.md

CONTRIBUTING.mdView on unpkg · L32

src/component.jsView file

451patternName = aws_access_key severity = critical line = 451 matchedText = "aws_key...LE",

Critical

Secret Pattern

AWS access key ID in src/component.js

src/component.jsView on unpkg · L451

452patternName = github_pat severity = critical line = 452 matchedText = "github_...90",

Critical

Secret Pattern

GitHub personal access token in src/component.js

src/component.jsView on unpkg · L452

443patternName = stripe_test_secret severity = high line = 443 matchedText = "api_key...nop"

High

Secret Pattern

Stripe test secret key in src/component.js

src/component.jsView on unpkg · L443

Source & flagged code

13 flagged · loading source

test/fixtures/redaction-cases.jsonView file

13patternName = github_pat severity = critical line = 13 matchedText = "input":...\"",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

test/fixtures/redaction-cases.jsonView on unpkg · L13

13patternName = github_pat severity = critical line = 13 matchedText = "input":...\"",

Critical

Secret Pattern

GitHub personal access token in test/fixtures/redaction-cases.json

test/fixtures/redaction-cases.jsonView on unpkg · L13

13patternName = aws_access_key severity = critical line = 13 matchedText = "input":...\"",

Critical

Secret Pattern

AWS access key ID in test/fixtures/redaction-cases.json

test/fixtures/redaction-cases.jsonView on unpkg · L13

docs/launch-plan.mdView file

32patternName = stripe_test_secret severity = high line = 32 matchedText = api_key=...mnop

High

Secret Pattern

Stripe test secret key in docs/launch-plan.md

docs/launch-plan.mdView on unpkg · L32

README.mdView file

39patternName = stripe_test_secret severity = high line = 39 matchedText = api_key=...mnop

High

Secret Pattern

Stripe test secret key in README.md

README.mdView on unpkg · L39

94patternName = stripe_test_secret severity = high line = 94 matchedText = const re...", {

High

Secret Pattern

Stripe test secret key in README.md

README.mdView on unpkg · L94

samples/developer-log.txtView file

3patternName = aws_access_key severity = critical line = 3 matchedText = aws_key=...MPLE

Critical

Secret Pattern

AWS access key ID in samples/developer-log.txt

samples/developer-log.txtView on unpkg · L3

4patternName = github_pat severity = critical line = 4 matchedText = github_t...7890

Critical

Secret Pattern

GitHub personal access token in samples/developer-log.txt

samples/developer-log.txtView on unpkg · L4

samples/support-ticket.txtView file

6patternName = stripe_test_secret severity = high line = 6 matchedText = api_key=...mnop

High

Secret Pattern

Stripe test secret key in samples/support-ticket.txt

samples/support-ticket.txtView on unpkg · L6

CONTRIBUTING.mdView file

32patternName = stripe_test_secret severity = high line = 32 matchedText = - `api_k...nop`

High

Secret Pattern

Stripe test secret key in CONTRIBUTING.md

CONTRIBUTING.mdView on unpkg · L32

src/component.jsView file

451patternName = aws_access_key severity = critical line = 451 matchedText = "aws_key...LE",

Critical

Secret Pattern

AWS access key ID in src/component.js

src/component.jsView on unpkg · L451

452patternName = github_pat severity = critical line = 452 matchedText = "github_...90",

Critical

Secret Pattern

GitHub personal access token in src/component.js

src/component.jsView on unpkg · L452

443patternName = stripe_test_secret severity = high line = 443 matchedText = "api_key...nop"

High

Secret Pattern

Stripe test secret key in src/component.js

src/component.jsView on unpkg · L443

Findings

7 Critical6 High4 Low

CriticalCritical Secrettest/fixtures/redaction-cases.json

CriticalSecret Patterntest/fixtures/redaction-cases.json

CriticalSecret Patternsamples/developer-log.txt

CriticalSecret Patternsrc/component.js

HighSecret Patterndocs/launch-plan.md

HighSecret PatternREADME.md

HighSecret Patternsamples/support-ticket.txt

HighSecret PatternCONTRIBUTING.md

HighSecret Patternsrc/component.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

13 flagged

test/fixtures/redaction-cases.jsonView file

Lines 1-33json

2 "positive": [

3 {

4 "name": "support contact bundle",

5 "mode": "all",

6 "input": "Email: yang@example.com\nPhone: +1 415 555 0123\nSSN: 219-09-9999\nRemote IPv6: 2001:db8:85a3::8a2e:370:7334",

7 "types": ["EMAIL", "PHONE", "US_SSN", "IPV6_ADDRESS"],

8 "placeholders": ["[EMAIL]", "[PHONE]", "[US_SSN]", "[IPV6_ADDRESS]"]

9 },

10 {

11 "name": "developer secret bundle",

12 "mode": "developer",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

test/fixtures/redaction-cases.jsonView on unpkg · L13

Critical

Secret Pattern

GitHub personal access token in test/fixtures/redaction-cases.json

test/fixtures/redaction-cases.jsonView on unpkg · L13

Critical

Secret Pattern

AWS access key ID in test/fixtures/redaction-cases.json

test/fixtures/redaction-cases.jsonView on unpkg · L13

14 "types": ["OPENAI_API_KEY", "GITHUB_TOKEN", "AWS_ACCESS_KEY_ID", "URL_CREDENTIALS", "PASSWORD"],

15 "placeholders": ["[OPENAI_API_KEY]", "[GITHUB_TOKEN]", "[AWS_ACCESS_KEY_ID]", "[URL_CREDENTIALS]", "[PASSWORD]"]

16 },

17 {

18 "name": "travel booking bundle",

19 "mode": "travel",

20 "input": "Passenger: PENG/YANG\nBooking reference: ZX9K2Q\nTicket number: 220-1234567890\nPassport No: E12345678",

21 "types": ["PASSENGER_NAME", "BOOKING_REFERENCE", "TICKET_NUMBER", "PASSPORT_NUMBER"],

22 "placeholders": ["[PASSENGER_NAME]", "[BOOKING_REFERENCE]", "[TICKET_NUMBER]", "[PASSPORT_NUMBER]"]

23 },

24 {

25 "name": "finance bundle",

26 "mode": "finance",

28 "types": ["IBAN", "US_ROUTING_NUMBER", "BANK_ACCOUNT_NUMBER", "SWIFT_BIC", "TAX_ID", "INVOICE_NUMBER", "TRANSACTION_ID"],

29 "placeholders": ["[IBAN]", "[US_ROUTING_NUMBER]", "[BANK_ACCOUNT_NUMBER]", "[SWIFT_BIC]", "[TAX_ID]", "[INVOICE_NUMBER]", "[TRANSACTION_ID]"]

30 },

31 {

32 "name": "healthcare bundle",

33 "mode": "healthcare",

docs/launch-plan.mdView file

Lines 12-52markdown

13GitHub topics:

15- `privacy`

16- `pii`

17- `redaction`

18- `local-first`

19- `web-component`

20- `ai-safety`

21- `data-loss-prevention`

README.mdView file

Lines 19-59markdown

20| Mode | Purpose | Examples |

21|---|---|---|

22| `general` | Common personal data | email, phone, card number, date of birth, address, SSN, national ID, IPv4/IPv6 address |

23| `travel` | Travel and booking data | PNR, booking reference, ticket number, passport number, passenger name, loyalty number, QR payload |

25| `finance` | Banking and payment operations | IBAN, routing number, bank account, SWIFT/BIC, tax ID, invoice, transaction ID |

26| `healthcare` | Patient and insurance workflows | MRN, patient ID, NPI, prescription number, claim number, insurance member ID |

samples/developer-log.txtView file

Lines 1-6text

12026-07-08T18:11:42Z ERROR request failed

2authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.fakepayload

3aws_key=AKIAIOSFODNN7EXAMPLE

Critical

Secret Pattern

AWS access key ID in samples/developer-log.txt

samples/developer-log.txtView on unpkg · L3

4github_token=ghp_abcdefghijklmnopqrstuvwxyzABCDE1234567890

Critical

Secret Pattern

GitHub personal access token in samples/developer-log.txt

samples/developer-log.txtView on unpkg · L4

5client_secret=client_secret_1234567890abcdefghijklmnop

samples/support-ticket.txtView file

6patternName = stripe_test_secret severity = high line = 6 matchedText = api_key=...mnop

High

Secret Pattern

Stripe test secret key in samples/support-ticket.txt

samples/support-ticket.txtView on unpkg · L6

CONTRIBUTING.mdView file

32patternName = stripe_test_secret severity = high line = 32 matchedText = - `api_k...nop`

High

Secret Pattern

Stripe test secret key in CONTRIBUTING.md

CONTRIBUTING.mdView on unpkg · L32

src/component.jsView file

451patternName = aws_access_key severity = critical line = 451 matchedText = "aws_key...LE",

Critical

Secret Pattern

AWS access key ID in src/component.js

src/component.jsView on unpkg · L451

452patternName = github_pat severity = critical line = 452 matchedText = "github_...90",

Critical

Secret Pattern

GitHub personal access token in src/component.js

src/component.jsView on unpkg · L452

443patternName = stripe_test_secret severity = high line = 443 matchedText = "api_key...nop"

High

Secret Pattern

Stripe test secret key in src/component.js

src/component.jsView on unpkg · L443