registry / signup-service / 0.1.2

signup-service@0.1.2

signup

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Crypto

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 2 file(s), 48.4 KB of source

Source & flagged code

4 flagged

lib/index.jsView file

Lines 425-465javascript

425exports.useService = useRepository;

426exports.useSignupService = useRepository;

427exports.useSignupRepository = useRepository;

428exports.useSignup = useRepository;

429exports.useUserRepository = useRepository;

430exports.useUserRegistrationService = useRepository;

431exports.useUserRegistrationRepository = useRepository;

432exports.useUserRegistration = useRepository;

433var SqlRepository = (function () {

434 function SqlRepository(db, user, authen, conf, id, contact, username, status, password, maxPasswordAge, maxPasswordAgeField, track, mp) {

435 this.db = db;

436 this.user = user;

437 this.authen = authen;

438 this.conf = conf;

439 this.maxPasswordAge = maxPasswordAge;

440 this.maxPasswordAgeField = maxPasswordAgeField;

441 this.track = track;

442 this.id = id ? id : "id";

443 this.username = username ? username : "username";

444 this.contact = contact ? contact : "email";

445 this.password = password ? password : "password";

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/index.jsView on unpkg · L445

446 this.status = status ? status : "status";

447 this.map = mp;

448 this.checkUsername = this.checkUsername.bind(this);

449 this.checkContact = this.checkContact.bind(this);

450 this.save = this.save.bind(this);

451 this.verify = this.verify.bind(this);

452 this.activate = this.activate.bind(this);

453 }

454 SqlRepository.prototype.checkUsername = function (username) {

455 var query = "select " + this.username + " from " + this.user + " where " + this.username + " = " + this.db.param(1);

456 return this.db.query(query, [username]).then(function (users) { return (users && users.length > 0 ? true : false); });

457 };

458 SqlRepository.prototype.checkContact = function (contact) {

459 var query = "select " + this.contact + " from " + this.user + " where " + this.contact + " = " + this.db.param(1);

460 return this.db.query(query, [contact]).then(function (users) { return (users && users.length > 0 ? true : false); });

461 };

462 SqlRepository.prototype.save = function (id, info) {

463 var _a;

464 var user = {};

465 if (this.map) {

README.mdView file

Lines 105-145markdown

105const validator = new Validator();

106

107const signup = new SignupService(

108 status,

109 repository,

110 generateId,

111 passwordComparator,

112 passcodeComparator,

113 passcodeRepository,

114 sender,

115 300,

116 validator.validate

117);

src/index.tsView file

Lines 491-531typescript

491// tslint:disable-next-line:max-classes-per-file

492export class SqlRepository<ID, T extends User> {

493 constructor(

494 public db: DB,

495 public user:

Source & flagged code

4 flagged · loading source

lib/index.jsView file

445patternName = generic_password severity = medium line = 445 matchedText = this.pas...rd";

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/index.jsView on unpkg · L445

README.mdView file

125patternName = generic_password severity = medium line = 125 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L125

293patternName = generic_password severity = medium line = 293 matchedText = password...ash"

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L293

src/index.tsView file

511patternName = generic_password severity = medium line = 511 matchedText = this.pas...rd";

Medium

Secret Pattern

Hardcoded password in src/index.ts

src/index.tsView on unpkg · L511

Findings

4 Medium2 Low

MediumSecret Patternlib/index.js

MediumSecret PatternREADME.md

MediumSecret Patternsrc/index.ts

LowScripts Present

LowNo License

Source & flagged code

4 flagged

lib/index.jsView file

Lines 425-465javascript

425exports.useService = useRepository;

426exports.useSignupService = useRepository;

427exports.useSignupRepository = useRepository;

428exports.useSignup = useRepository;

429exports.useUserRepository = useRepository;

430exports.useUserRegistrationService = useRepository;

431exports.useUserRegistrationRepository = useRepository;

432exports.useUserRegistration = useRepository;

433var SqlRepository = (function () {

434 function SqlRepository(db, user, authen, conf, id, contact, username, status, password, maxPasswordAge, maxPasswordAgeField, track, mp) {

435 this.db = db;

436 this.user = user;

437 this.authen = authen;

438 this.conf = conf;

439 this.maxPasswordAge = maxPasswordAge;

440 this.maxPasswordAgeField = maxPasswordAgeField;

441 this.track = track;

442 this.id = id ? id : "id";

443 this.username = username ? username : "username";

444 this.contact = contact ? contact : "email";

445 this.password = password ? password : "password";

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/index.jsView on unpkg · L445

446 this.status = status ? status : "status";

447 this.map = mp;

448 this.checkUsername = this.checkUsername.bind(this);

449 this.checkContact = this.checkContact.bind(this);

450 this.save = this.save.bind(this);

451 this.verify = this.verify.bind(this);

452 this.activate = this.activate.bind(this);

453 }

454 SqlRepository.prototype.checkUsername = function (username) {

455 var query = "select " + this.username + " from " + this.user + " where " + this.username + " = " + this.db.param(1);

456 return this.db.query(query, [username]).then(function (users) { return (users && users.length > 0 ? true : false); });

457 };

458 SqlRepository.prototype.checkContact = function (contact) {

459 var query = "select " + this.contact + " from " + this.user + " where " + this.contact + " = " + this.db.param(1);

460 return this.db.query(query, [contact]).then(function (users) { return (users && users.length > 0 ? true : false); });

461 };

462 SqlRepository.prototype.save = function (id, info) {

463 var _a;

464 var user = {};

465 if (this.map) {

README.mdView file

Lines 105-145markdown

105const validator = new Validator();

106

107const signup = new SignupService(

108 status,

109 repository,

110 generateId,

111 passwordComparator,

112 passcodeComparator,

113 passcodeRepository,

114 sender,

115 300,

116 validator.validate

117);

src/index.tsView file

Lines 491-531typescript

491// tslint:disable-next-line:max-classes-per-file

492export class SqlRepository<ID, T extends User> {

493 constructor(

494 public db: DB,

495 public user: