ebb-ai — carbon-aware deferral

AdvisoryAudited by Static analysis on May 20, 2026.

Overview

Detected: suspicious.env_credential_access

Findings (1)

critical

suspicious.env_credential_access

Location: dist/index.js:4298
Finding: Environment variable access combined with network send.
Evidence: const key = apiKey ?? process.env.EBB_ELECTRICITY_MAPS_API_KEY;