registry / @1interface/shared-core / 0.3.3

@1interface/shared-core@0.3.3

Static Scan Results

scanned 23d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Network

Supply chain

HighEntropyStringsMinifiedTrivialUrlStrings

Manifest

NoLicense

scanned 6 file(s), 62.3 KB of source, external domains: example.com

Source & flagged code

2 flagged

package.jsonView file

Lines 52-74json

52 "@rollup/plugin-terser": "^1.0.0",

53 "@testing-library/jest-dom": "^6.9.1",

54 "@testing-library/react": "^16.3.2",

55 "@types/node": "^24.12.4",

56 "@types/react": "^19.2.15",

57 "@types/react-dom": "^19.2.3",

58 "@vitejs/plugin-react": "5.1.1",

59 "@vitest/ui": "4.1.0",

60 "jsdom": "^27.4.0",

61 "terser": "5.46.1",

62 "typescript": "~5.9.3",

63 "vite": "7.3.2",

64 "vite-plugin-dts": "^4.5.4",

65 "vitest": "4.1.0"

66 },

67 "scripts": {

68 "build": "vite build",

69 "dev": "vite build --watch",

70 "test": "vitest",

71 "test:ui": "vitest --ui",

72 "postinstall": "rm -rf node_modules/react node_modules/react-dom 2>/dev/null || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L72

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L72

73 }

74}

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = rm -rf node_modules/react node_modules/react-dom 2>/dev/null || true

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code