grpc-microservices
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecurityEXAMPLES.md
MEDIUMSecurityMEDIUM
EXAMPLES.md
No clear malicious behavior or supply-chain malware is present. The code is a legitimate gRPC example collection, but it includes serious production-security weaknesses: plaintext unauthenticated service examples, hardcoded database credentials, disabled database TLS, incomplete JWT algorithm validation, unbounded resource usage, and a chat-stream deadlock. It should not be treated as production-ready without remediation.
Confidence: 98%Severity: 72%
Audit Metadata