{"id":"profullstack.com/r3q","name":"r3q","commands":["r3q"],"examples":[{"run":"mkdir -p ~/api","does":"Create a folder to hold your .http request files"},{"run":"r3q ~/api","does":"Open the REST client TUI on that collection (press n for a new request)"}],"description":"Terminal REST client that stores requests as files you can commit.","homepage":"https://github.com/profullstack/r3q","repository":"https://github.com/profullstack/r3q","license":"MIT","agentic":false,"latest_version":"0.2.0","vendor":"Profullstack","install":"curl -fsSL https://raw.githubusercontent.com/profullstack/r3q/main/install.sh | sh","publisher":"profullstack","w3bs":"w3bs install profullstack.com/r3q","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":46,"summary":{"critical":0,"high":3,"medium":10,"low":7,"info":0},"malware":0,"truncated":false,"version":"0.2.0","sources":{"installer":"https://raw.githubusercontent.com/profullstack/r3q/main/install.sh","installerSha256":"a46497633fb80991d1e9de268d72409ef0cc658b71ba9c1e51032cdd7eab52db","repository":"github.com/profullstack/r3q"},"notes":[],"scannedAt":"2026-11-01T22:56:18.223Z","findings":[{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"high","category":"secret","cwe":"CWE-798","file":"source/scripts/showcase.ts","line":45,"malware":false},{"ruleId":"js-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/src/http/convert.ts","line":599,"malware":false},{"ruleId":"js-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/src/http/protocols.ts","line":319,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/http/convert.ts","line":1064,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/http/parse.ts","line":377,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/http/parse.ts","line":381,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/http/query.ts","line":77,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/http/query.ts","line":212,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/src/http/query.ts","line":221,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"medium","category":"code","cwe":"CWE-95","file":"source/src/http/runner.ts","line":195,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"medium","category":"code","cwe":"CWE-95","file":"source/src/http/scripts.ts","line":237,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"medium","category":"code","cwe":"CWE-95","file":"source/src/http/scripts.ts","line":296,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"medium","category":"code","cwe":"CWE-95","file":"source/src/http/variables.ts","line":213,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/http/auth.ts","line":438,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/http/auth.ts","line":443,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/http/protocols.ts","line":652,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/auth.test.ts","line":153,"malware":false},{"ruleId":"js-hardcoded-crypto-key","title":"hardcoded key material","severity":"low","category":"code","cwe":"CWE-321","file":"source/test/auth.test.ts","line":165,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/auth.test.ts","line":228,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/test/protocols.test.ts","line":328,"malware":false}]}}