trpc-patterns
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
SecuritySecurityreferences/middleware-patterns.md
MEDIUMSecurityMEDIUM
references/middleware-patterns.md
The fragment does not indicate malware or intentional supply-chain sabotage. It contains significant application security concerns: the integration deletion lacks an organization ownership predicate, the authorization variable names are inconsistent, and public caching may leak protected responses across users or tenants. Retry and business-validation logic also require idempotency and database constraints. The most important remediation is to authorize and delete the integration using both integration ID and the verified organization association, and to restrict caching to appropriately non-sensitive procedures with identity-aware keys.
Confidence: 96%Severity: 78%
Audit Metadata