Rank#-186
- Created
- 9 years ago
- Last commit
- 2 days ago
- Latest release
- playwright-vscode-ext-v1.7.17 days ago
Security Findings
9Hardcoded secrets/API keys3×
SuspiciousScannerSecret Keyword: ****
Secret Keyword: strin...****
Secret Keyword: numbe...****
dist/web/index.js
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: strin...****
Secret Keyword: numbe...****
dist/index.js
Sensitive file access
SuspiciousScannerAccess to sensitive file: homedir(),e.SFDX_STATE_FOLDER)}static get SF_DIR(){return Xme.join(nHe.homedir(),e.SF_STATE_FOLDER)}static get DIR(){ret...
Unpinned dependencies
SuspiciousLineage1 unpinned: @salesforce/effect-octokit
Install-lifecycle script shipped
SuspiciousScannerpackage.json preinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node ../../scripts/require-root-install.js
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/categoryApprove.yml] curl https://cursor.com/install