supascan 0.0.9 → 0.0.10

package/dist/supascan.js

@@ -14062,11 +14062,22 @@ class SupabaseService {
     }
     const hasData = data && data.length > 0;
     if (hasData) {
-      log.debug(ctx, `Table ${table} is readable with data (EXPOSED)`);
-      return ok({ status: "readable", accessible: true, hasData: true });
+      const { count } = await ctx.client.schema(schema).from(table).select("*", { count: "estimated", head: true });
+      log.debug(ctx, `Table ${table} is readable with ~${count ?? "unknown"} rows (EXPOSED)`);
+      return ok({
+        status: "readable",
+        accessible: true,
+        hasData: true,
+        rowCount: count ?? undefined
+      });
     }
     log.debug(ctx, `Table ${table} returned 0 rows (empty or RLS blocked)`);
-    return ok({ status: "empty", accessible: true, hasData: false });
+    return ok({
+      status: "empty",
+      accessible: true,
+      hasData: false,
+      rowCount: 0
+    });
   }
   static async testTablesRead(ctx, schema, tables) {
     log.debug(ctx, `Testing read access for ${tables.length} tables`);
@@ -14881,12 +14892,12 @@ function TableRow({
   switch (access?.status) {
     case "readable":
       statusClass = "bg-green-100 text-green-800 border-green-200";
-      statusText = "Data exposed";
+      statusText = `~${access.rowCount ?? "?"} rows exposed`;
       statusIcon = "[+]";
       break;
     case "empty":
       statusClass = "bg-yellow-100 text-yellow-800 border-yellow-200";
-      statusText = "Empty or RLS protected";
+      statusText = "0 rows - empty or RLS";
       statusIcon = "[-]";
       break;
     case "denied":
@@ -15719,7 +15730,7 @@ function displayAnalysisResult(result) {
         switch (access?.status) {
           case "readable":
             indicator = import_picocolors2.default.green("[+]");
-            description = import_picocolors2.default.dim("(data exposed)");
+            description = import_picocolors2.default.dim(`(~${access.rowCount ?? "?"} rows exposed)`);
             break;
           case "empty":
             indicator = import_picocolors2.default.yellow("[-]");
@@ -16184,7 +16195,7 @@ var experimentalWarning2 = onlyOnce2(() => {
   }
 });
 // package.json
-var version = "0.0.9";
+var version = "0.0.10";
 
 // version.ts
 var VERSION = version;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "supascan",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "description": "Security analysis tool for Supabase databases",
   "license": "MIT",
   "author": "Abhishek Govindarasu",