registry / signup-service / 0.1.1

signup-service@0.1.1

signup

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Crypto

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 2 file(s), 51.3 KB of source

Source & flagged code

4 flagged

lib/index.jsView file

Lines 415-455javascript

415exports.useService = useRepository;

416exports.useSignupService = useRepository;

417exports.useSignupRepository = useRepository;

418exports.useSignup = useRepository;

419exports.useUserRepository = useRepository;

420exports.useUserRegistrationService = useRepository;

421exports.useUserRegistrationRepository = useRepository;

422exports.useUserRegistration = useRepository;

423var SqlRepository = (function () {

424 function SqlRepository(db, user, authen, conf, id, contact, username, status, password, maxPasswordAge, maxPasswordAgeField, track, mp) {

425 this.db = db;

426 this.user = user;

427 this.authen = authen;

428 this.conf = conf;

429 this.maxPasswordAge = maxPasswordAge;

430 this.maxPasswordAgeField = maxPasswordAgeField;

431 this.track = track;

432 this.id = id ? id : "id";

433 this.username = username ? username : "username";

434 this.contact = contact ? contact : "email";

435 this.password = password ? password : "password";

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/index.jsView on unpkg · L435

436 this.status = status ? status : "status";

437 this.map = mp;

438 this.checkUsername = this.checkUsername.bind(this);

439 this.checkContact = this.checkContact.bind(this);

440 this.save = this.save.bind(this);

441 this.verify = this.verify.bind(this);

442 this.activate = this.activate.bind(this);

443 }

444 SqlRepository.prototype.checkUsername = function (username) {

445 var query = "select " + this.username + " from " + this.user + " where " + this.username + " = " + this.db.param(1);

446 return this.db.query(query, [username]).then(function (users) { return (users && users.length > 0 ? true : false); });

447 };

448 SqlRepository.prototype.checkContact = function (contact) {

449 var query = "select " + this.contact + " from " + this.user + " where " + this.contact + " = " + this.db.param(1);

450 return this.db.query(query, [contact]).then(function (users) { return (users && users.length > 0 ? true : false); });

451 };

452 SqlRepository.prototype.save = function (id, info) {

453 var _a;

454 var user = {};

455 if (this.map) {

README.mdView file

Lines 105-145markdown

105const validator = new Validator();

106

107const signup = new SignupService(

108 status,

109 repository,

110 generateId,

111 passwordComparator,

112 passcodeComparator,

113 passcodeRepository,

114 sender,

115 300,

116 validator.validate

117);

src/index.tsView file

Lines 488-528typescript

488// tslint:disable-next-line:max-classes-per-file

489export class SqlRepository<ID, T extends User> {

490 constructor(

491 public db: DB,

492 public user:

Source & flagged code

4 flagged · loading source

lib/index.jsView file

435patternName = generic_password severity = medium line = 435 matchedText = this.pas...rd";

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/index.jsView on unpkg · L435

README.mdView file

125patternName = generic_password severity = medium line = 125 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L125

293patternName = generic_password severity = medium line = 293 matchedText = password...ash"

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L293

src/index.tsView file

508patternName = generic_password severity = medium line = 508 matchedText = this.pas...rd";

Medium

Secret Pattern

Hardcoded password in src/index.ts

src/index.tsView on unpkg · L508

Findings

4 Medium2 Low

MediumSecret Patternlib/index.js

MediumSecret PatternREADME.md

MediumSecret Patternsrc/index.ts

LowScripts Present

LowNo License

Source & flagged code

4 flagged

lib/index.jsView file

Lines 415-455javascript

415exports.useService = useRepository;

416exports.useSignupService = useRepository;

417exports.useSignupRepository = useRepository;

418exports.useSignup = useRepository;

419exports.useUserRepository = useRepository;

420exports.useUserRegistrationService = useRepository;

421exports.useUserRegistrationRepository = useRepository;

422exports.useUserRegistration = useRepository;

423var SqlRepository = (function () {

424 function SqlRepository(db, user, authen, conf, id, contact, username, status, password, maxPasswordAge, maxPasswordAgeField, track, mp) {

425 this.db = db;

426 this.user = user;

427 this.authen = authen;

428 this.conf = conf;

429 this.maxPasswordAge = maxPasswordAge;

430 this.maxPasswordAgeField = maxPasswordAgeField;

431 this.track = track;

432 this.id = id ? id : "id";

433 this.username = username ? username : "username";

434 this.contact = contact ? contact : "email";

435 this.password = password ? password : "password";

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/index.jsView on unpkg · L435

436 this.status = status ? status : "status";

437 this.map = mp;

438 this.checkUsername = this.checkUsername.bind(this);

439 this.checkContact = this.checkContact.bind(this);

440 this.save = this.save.bind(this);

441 this.verify = this.verify.bind(this);

442 this.activate = this.activate.bind(this);

443 }

444 SqlRepository.prototype.checkUsername = function (username) {

445 var query = "select " + this.username + " from " + this.user + " where " + this.username + " = " + this.db.param(1);

446 return this.db.query(query, [username]).then(function (users) { return (users && users.length > 0 ? true : false); });

447 };

448 SqlRepository.prototype.checkContact = function (contact) {

449 var query = "select " + this.contact + " from " + this.user + " where " + this.contact + " = " + this.db.param(1);

450 return this.db.query(query, [contact]).then(function (users) { return (users && users.length > 0 ? true : false); });

451 };

452 SqlRepository.prototype.save = function (id, info) {

453 var _a;

454 var user = {};

455 if (this.map) {

README.mdView file

Lines 105-145markdown

105const validator = new Validator();

106

107const signup = new SignupService(

108 status,

109 repository,

110 generateId,

111 passwordComparator,

112 passcodeComparator,

113 passcodeRepository,

114 sender,

115 300,

116 validator.validate

117);

src/index.tsView file

Lines 488-528typescript

488// tslint:disable-next-line:max-classes-per-file

489export class SqlRepository<ID, T extends User> {

490 constructor(

491 public db: DB,

492 public user: