registry / taon-typeorm / 21.0.43

taon-typeorm@21.0.43

Description for taon-typeorm. Hello world!

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 1,538 file(s), 13.2 MB of source, external domains: github.com, www.postgresql.org

Source & flagged code

4 flagged

lib-esm/lib/typeorm/commands/InitCommand.jsView file

Lines 138-178javascript

138 case "postgres":

139 dbSettings = `type: "postgres",

140 host: "localhost",

141 port: 5432,

142 username: "test",

143 password: "test",

144 database: "test",`;

145 break;

146 case "cockroachdb":

147 dbSettings = `type: "cockroachdb",

148 host: "localhost",

149 port: 26257,

150 username: "root",

151 password: "",

152 database: "defaultdb",`;

153 break;

154 case "mssql":

155 dbSettings = `type: "mssql",

156 host: "localhost",

157 username: "sa",

158 password: "Admin12345",

Medium

Secret Pattern

Package contains a possible secret pattern.

lib-esm/lib/typeorm/commands/InitCommand.jsView on unpkg · L158

159 database: "tempdb",`;

160 break;

161 case "oracle":

162 dbSettings = `type: "oracle",

163host: "localhost",

164username: "system",

165password: "oracle",

166port: 1521,

167sid: "xe.oracle.docker",`;

168 break;

169 case "mongodb":

170 dbSettings = `type: "mongodb",

171 database: "test",`;

172 break;

173 case "spanner":

174 dbSettings = `type: "spanner",

175 projectId: "test",

176 instanceId: "test",

177 databaseId: "test",`;

178 break;

lib-esm/lib/typeorm/connection/ConnectionOptionsReader.jsView file

Lines 104-144javascript

104 connectionOptions = await new ConnectionOptionsEnvReader().read();

105 }

106 else if (foundFileFormat === "js" ||

107 foundFileFormat === "mjs" ||

108 foundFileFormat

lib-prod/typeorm/commands/InitCommand.jsView file

Lines 138-178javascript

138 case "postgres":

139 dbSettings = `type: "postgres",

140 host: "localhost",

141 port: 5432,

142 username: "test",

143 password: "test",

144 database: "test",`;

145 break;

146 case

lib/typeorm/commands/InitCommand.jsView file

Lines 141-181javascript

141 case "postgres":

142 dbSettings = `type: "postgres",

143 host: "localhost",

144 port: 5432,

145 username: "test",

146 password: "test",

147 database: "test",`;

148 break;

149 case

Source & flagged code

4 flagged · loading source

lib-esm/lib/typeorm/commands/InitCommand.jsView file

158patternName = generic_password severity = medium line = 158 matchedText = password...45",

Medium

Secret Pattern

Package contains a possible secret pattern.

lib-esm/lib/typeorm/commands/InitCommand.jsView on unpkg · L158

lib-esm/lib/typeorm/connection/ConnectionOptionsReader.jsView file

124else if (foundFileFormat === "json") { L125: connectionOptions = require(configFile); L126: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib-esm/lib/typeorm/connection/ConnectionOptionsReader.jsView on unpkg · L124

lib-prod/typeorm/commands/InitCommand.jsView file

158patternName = generic_password severity = medium line = 158 matchedText = password...45",

Medium

Secret Pattern

Hardcoded password in lib-prod/typeorm/commands/InitCommand.js

lib-prod/typeorm/commands/InitCommand.jsView on unpkg · L158

lib/typeorm/commands/InitCommand.jsView file

161patternName = generic_password severity = medium line = 161 matchedText = password...45",

Medium

Secret Pattern

Hardcoded password in lib/typeorm/commands/InitCommand.js

lib/typeorm/commands/InitCommand.jsView on unpkg · L161

Findings

5 Medium5 Low

MediumSecret Patternlib-esm/lib/typeorm/commands/InitCommand.js

MediumDynamic Requirelib-esm/lib/typeorm/connection/ConnectionOptionsReader.js

MediumEnvironment Vars

MediumSecret Patternlib-prod/typeorm/commands/InitCommand.js

MediumSecret Patternlib/typeorm/commands/InitCommand.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

lib-esm/lib/typeorm/commands/InitCommand.jsView file

Lines 138-178javascript

138 case "postgres":

139 dbSettings = `type: "postgres",

140 host: "localhost",

141 port: 5432,

142 username: "test",

143 password: "test",

144 database: "test",`;

145 break;

146 case "cockroachdb":

147 dbSettings = `type: "cockroachdb",

148 host: "localhost",

149 port: 26257,

150 username: "root",

151 password: "",

152 database: "defaultdb",`;

153 break;

154 case "mssql":

155 dbSettings = `type: "mssql",

156 host: "localhost",

157 username: "sa",

158 password: "Admin12345",

Medium

Secret Pattern

Package contains a possible secret pattern.

lib-esm/lib/typeorm/commands/InitCommand.jsView on unpkg · L158

159 database: "tempdb",`;

160 break;

161 case "oracle":

162 dbSettings = `type: "oracle",

163host: "localhost",

164username: "system",

165password: "oracle",

166port: 1521,

167sid: "xe.oracle.docker",`;

168 break;

169 case "mongodb":

170 dbSettings = `type: "mongodb",

171 database: "test",`;

172 break;

173 case "spanner":

174 dbSettings = `type: "spanner",

175 projectId: "test",

176 instanceId: "test",

177 databaseId: "test",`;

178 break;

lib-esm/lib/typeorm/connection/ConnectionOptionsReader.jsView file

Lines 104-144javascript

104 connectionOptions = await new ConnectionOptionsEnvReader().read();

105 }

106 else if (foundFileFormat === "js" ||

107 foundFileFormat === "mjs" ||

108 foundFileFormat

lib-prod/typeorm/commands/InitCommand.jsView file

Lines 138-178javascript

138 case "postgres":

139 dbSettings = `type: "postgres",

140 host: "localhost",

141 port: 5432,

142 username: "test",

143 password: "test",

144 database: "test",`;

145 break;

146 case

lib/typeorm/commands/InitCommand.jsView file

Lines 141-181javascript

141 case "postgres":

142 dbSettings = `type: "postgres",

143 host: "localhost",

144 port: 5432,

145 username: "test",

146 password: "test",

147 database: "test",`;

148 break;

149 case