registry / wherobots-sql-driver / 0.11.1

wherobots-sql-driver@0.11.1

TypeScript SDK for Wherobots DB

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 189 KB of source, external domains: api.cloud.wherobots.com

Source & flagged code

1 flagged

dist/src/connection.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || function (mod) {

19 if (mod && mod.__esModule) return mod;

20 var result = {};

21 if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);

22 __setModuleDefault(result, mod);

23 return result;

24};

25var __importDefault = (this && this.__importDefault) || function (mod) {

26 return (mod && mod.__esModule) ? mod : { "default": mod };

27};

28Object.defineProperty(exports, "__esModule", { value: true });

29exports.Connection = void 0;

30const cbor_1 = require("cbor");

31const uuid = __importStar(require("uuid"));

32const ws_1 = __importDefault(require("ws"));

33const logger_1 = __importStar(require("./logger"));

34const schemas_1 = require("./schemas");

35const api_utils_1 = require("./api-utils");

36const read_pkg_up_1 = __importDefault(require("read-pkg-up"));

37const { packageJson } = read_pkg_up_1.default.sync({ cwd: __dirname }) || {};

38const API_URL = process.env["WHEROBOTS_API_URL"] || "https://api.cloud.wherobots.com";

39const PROTOCOL_VERSION = "1.0.0";

40const OS_TYPE = `${process.platform};${process.arch}`;

41const NODE_VERSION = process.version;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/connection.jsView on unpkg · L36

42const USER_AGENT = `${packageJson?.name}/${packageJson?.version} os/${OS_TYPE} node/${NODE_VERSION}"`;

43const API_REQUEST_TIMEOUT = 10e3;

44class Connection {

45 static async connect(options, testHarness) {

46 const connection = new Connection(options, testHarness);

47 logger_1.default.info("Initializing SQL session. Please wait, this process may take a few moments...");

48 await connection.establishSession();

49 return connection;

50 }

51 static async connectDirect(wsUrl, options) {

52 const connection = new Connection(options);

53 await connection.connectToWebSocket(wsUrl);

54 return connection;

55 }

56 options;

Source & flagged code

1 flagged · loading source

dist/src/connection.jsView file

36const read_pkg_up_1 = __importDefault(require("read-pkg-up")); L37: const { packageJson } = read_pkg_up_1.default.sync({ cwd: __dirname }) || {}; L38: const API_URL = process.env["WHEROBOTS_API_URL"] || "https://api.cloud.wherobots.com"; L39: const PROTOCOL_VERSION = "1.0.0"; L40: const OS_TYPE = `${process.platform};${process.arch}`; L41: const NODE_VERSION = process.version; ... L95: // the body below when undefined (JSON.stringify omits undefined values). L96: const sessionParams = new URLSearchParams(); L97: if (this.options.region) { ... L264: if (typeof e.data === "string") { L265: toParse = JSON.parse(e.data); L266: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/connection.jsView on unpkg · L36

Findings

1 High3 Medium5 Low

HighSandbox Evasion Gated Capabilitydist/src/connection.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/src/connection.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || function (mod) {

19 if (mod && mod.__esModule) return mod;

20 var result = {};

21 if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);

22 __setModuleDefault(result, mod);

23 return result;

24};

25var __importDefault = (this && this.__importDefault) || function (mod) {

26 return (mod && mod.__esModule) ? mod : { "default": mod };

27};

28Object.defineProperty(exports, "__esModule", { value: true });

29exports.Connection = void 0;

30const cbor_1 = require("cbor");

31const uuid = __importStar(require("uuid"));

32const ws_1 = __importDefault(require("ws"));

33const logger_1 = __importStar(require("./logger"));

34const schemas_1 = require("./schemas");

35const api_utils_1 = require("./api-utils");

36const read_pkg_up_1 = __importDefault(require("read-pkg-up"));

37const { packageJson } = read_pkg_up_1.default.sync({ cwd: __dirname }) || {};

38const API_URL = process.env["WHEROBOTS_API_URL"] || "https://api.cloud.wherobots.com";

39const PROTOCOL_VERSION = "1.0.0";

40const OS_TYPE = `${process.platform};${process.arch}`;

41const NODE_VERSION = process.version;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/connection.jsView on unpkg · L36

42const USER_AGENT = `${packageJson?.name}/${packageJson?.version} os/${OS_TYPE} node/${NODE_VERSION}"`;

43const API_REQUEST_TIMEOUT = 10e3;

44class Connection {

45 static async connect(options, testHarness) {

46 const connection = new Connection(options, testHarness);

47 logger_1.default.info("Initializing SQL session. Please wait, this process may take a few moments...");

48 await connection.establishSession();

49 return connection;

50 }

51 static async connectDirect(wsUrl, options) {

52 const connection = new Connection(options);

53 await connection.connectToWebSocket(wsUrl);

54 return connection;

55 }

56 options;