<< Back to security report

──z80dev/lemon/agent-games — njsscan Scan

Repositoryz80dev/lemon →

Commit4fb91bd →

VerdictPASS

Score80

DateSep 4, 2026

──Findings

Severity	Rule	Message	File:Line
MEDIUM	node_insecure_random_generator	crypto.pseudoRandomBytes()/Math.random() is a cryptographically weak random number generator.	z80dev/lemon/agent-games-20f201a2/apps/lemon_sim_ui/priv/static/assets/app-237d4acb5c50a4e47f95f2064e0c37ae.js:0 →
MEDIUM	node_insecure_random_generator	crypto.pseudoRandomBytes()/Math.random() is a cryptographically weak random number generator.	z80dev/lemon/agent-games-20f201a2/apps/lemon_sim_ui/priv/static/assets/app.js:0 →
MEDIUM	node_insecure_random_generator	crypto.pseudoRandomBytes()/Math.random() is a cryptographically weak random number generator.	z80dev/lemon/agent-games-20f201a2/apps/lemon_web/priv/static/assets/vendor/phoenix_live_view.esm.js:0 →
MEDIUM	node_timing_attack	String comparisons using '===', '!==', '!=' and '==' is vulnerable to timing attacks. A timing attack allows the attacker to learn potentially sensitive information by, for example, measuring how long it takes for the application to respond to a request. More info: https://nodejs.org/en/learn/getting-started/security-best-practices#information-exposure-through-timing-attacks-cwe-208	z80dev/lemon/agent-games-20f201a2/apps/lemon_web/priv/static/assets/vendor/phoenix_live_view.esm.js:0 →