CodeVetter · local evidence export

Hardcoded database password in TypeScript

codevetter-public-benchmark/ts-hardcoded-credentials

detected · high confidence

Verification

Code reviewcompleted

Qualified static finding recorded.

Executable testnot verified

No exact-current runtime evidence is included.

Audiencenot run

No audience validation occurred.

highbenchmark ground truth

The production database password is committed in plaintext inside the source file, exposing credentials to anyone with repository access.

source.ts:8