Recommended action
Block this updateStatic evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@owox/[email protected]"],"fail_on":"high"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@owox/[email protected]"],"fail_on":"high"}'Why flagged
What the scanner saw
Credential file access: matched ".AWS"
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk high · score 936 · status changed
Related candidates
Linked campaigns and clusters
max-voloshyn
6 members · evidence strength 75Evidence
Static findings
33 static · 0 from release diff · showing high-signal first.
Showing 30 of 31 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-access.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-blended-query-builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-create-view.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-data-mart-schema.parser.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-data-mart-schema.provider.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-datamart.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-query.builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/interfaces/athena-reader-state.interface.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-report-headers-generator.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-report-reader.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-schema-merger.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-sql-dry-run.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-sql-run.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/services/connector/connector-storage-config.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/services/credential-type-resolver.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/factories/data-storage-public-credentials.factory.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/enums/data-storage-type.enum.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/field-aggregation.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-destination-types/looker-studio-connector/services/looker-studio-type-mapper.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-access.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-blended-query-builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-create-view.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-data-mart-schema.parser.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-data-mart-schema.provider.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-datamart.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-query.builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-report-headers-generator.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-report-reader.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-schema-merger.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-sql-dry-run.executor.js | matched ".AWS" | 30 |
Show all 33 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-access.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-blended-query-builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-create-view.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-data-mart-schema.parser.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-data-mart-schema.provider.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-datamart.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-query.builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/interfaces/athena-reader-state.interface.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-report-headers-generator.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-report-reader.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-schema-merger.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-sql-dry-run.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/athena/services/athena-sql-run.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/services/connector/connector-storage-config.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/services/credential-type-resolver.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/factories/data-storage-public-credentials.factory.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/enums/data-storage-type.enum.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/field-aggregation.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-destination-types/looker-studio-connector/services/looker-studio-type-mapper.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-access.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-blended-query-builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-create-view.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-data-mart-schema.parser.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-data-mart-schema.provider.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-datamart.validator.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-query.builder.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-report-headers-generator.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-report-reader.service.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-schema-merger.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-sql-dry-run.executor.js | matched ".AWS" | 30 |
| high | Credential file access | package/dist/src/data-marts/data-storage-types/redshift/services/redshift-sql-run.executor.js | matched ".AWS" | 30 |
| low | Obfuscation | package/dist/src/data-marts/data-destination-types/google-sheets/adapters/google-sheets-api.adapter.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dist/src/common/template/constants/table-truncation-notice.constants.js | matched "\\u2063" | 3 |
Manifest
Package metadata
Scripts30
buildnest buildbuild:cleanshx rm -rf distbuild:connectorsnpm run build -w @owox/connectors --prefix ../..build:depnpm run build:internal-helpers && npm run build:connectors && npm run build:idp-protocolbuild:idp-protocolnpm run build -w @owox/idp-protocol --prefix ../..build:internal-helpersnpm run build -w @owox/internal-helpers --prefix ../..devnpm run start:devdump:applyts-node commands/apply-dump-command.tsdump:createts-node commands/create-dump-command.tsformatprettier --write "**/*.{ts,json}" --ignore-path ../../.prettierignoreformat:checkprettier --check "**/*.{ts,json}" --ignore-path ../../.prettierignorelinteslint . --config ./eslint.config.mjslint:fixeslint . --fix --config ./eslint.config.mjslint:mdmarkdownlint-cli2 --config ../../.markdownlint-cli2.mjslint:md:fixmarkdownlint-cli2 --config ../../.markdownlint-cli2.mjs --fixmigrations:create-templatets-node commands/create-migration-template-command.tsprebuildnpm run build:clean && npm run build:depprepacknpm run buildprepublishOnlynpm run lintservenpm run start:prodstartnest startstart:debugnest start --debug --watch --env-file ../../.envstart:devnest start --watch --env-file ../../.envstart:prodnode dist/src/maintestjesttest:covjest --coveragetest:debugnode --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBandtest:e2ejest --config ./test/jest-e2e.jsontest:integrationjest --config ./test/jest-integration.jsontest:watchjest --watch
Dependencies45
@aws-sdk/client-athena^3.983.0@aws-sdk/client-redshift-data^3.983.0@aws-sdk/client-s3^3.983.0@databricks/sql^1.12.0@google-cloud/bigquery^8.1.0@google-cloud/pubsub^4.0.7@nestjs/common^11.0.1@nestjs/config^4.0.2@nestjs/core^11.1.2@nestjs/event-emitter^3.0.0@nestjs/platform-express^11.1.3@nestjs/schedule^6.0.0@nestjs/swagger^11.2.0@nestjs/typeorm^11.0.0@owox/connectors0.26.0-next-20260522131549@owox/idp-protocol0.26.0-next-20260522131549@owox/internal-helpers0.26.0-next-20260522131549better-sqlite3^12.2.0class-transformer^0.5.1class-validator^0.14.2compression^1.8.1cross-spawn^7.0.6env-paths^3.0.0googleapis^150.0.1handlebars^4.7.9jsonwebtoken^9.0.0juice^11.0.3luxon^3.6.1mysql2^3.14.1nestjs-cls^6.0.1- …and 15 more.