registry / @airlib/form / 1.2.2

@airlib/form@1.2.2

Reactive and declarative, framework-agnostic form engine powered by Zod schemas. Validation, dirty tracking, cross-field matching, and submission lifecycle built on AIR Stack.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 13 file(s), 36.1 KB of source

Source & flagged code

2 flagged

dist/constant.jsView file

Lines 1-33javascript

1//#region src/constant.ts

2const FORM_SYMBOL = Symbol("airlib:form");

3const FORM_FIELD_SYMBOL = Symbol("airlib:form-field");

4const FORM_INVALID_INPUT = Symbol("airlib:form-invalid-input");

5const FORM_STATUS = {

6 IDLE: "idle",

7 PENDING: "pending",

8 SUCCESS: "success",

9 ERROR: "error"

10};

11const FORM_INPUT = {

12 text: "text",

13 email: "email",

14 url: "url",

15 tel: "tel",

16 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/constant.jsView on unpkg · L16

17 search: "search",

18 hidden: "hidden",

19 number: "number",

20 range: "range",

21 date: "date",

22 datetimeLocal: "datetime-local",

23 time: "time",

24 month: "month",

25 week: "week",

26 checkbox: "checkbox",

27 radio: "radio",

28 color: "color",

29 toggle: "toggle"

30};

32//#endregion

33export { FORM_FIELD_SYMBOL, FORM_INPUT, FORM_INVALID_INPUT, FORM_STATUS, FORM_SYMBOL };

dist/constant.d.tsView file

Lines 1-32typescript

1//#region src/constant.d.ts

2declare const FORM_SYMBOL: unique symbol;

3declare const FORM_FIELD_SYMBOL: unique symbol;

4declare const FORM_INVALID_INPUT: unique symbol;

Source & flagged code

2 flagged · loading source

dist/constant.jsView file

16patternName = generic_password severity = medium line = 16 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/constant.jsView on unpkg · L16

dist/constant.d.tsView file

16patternName = generic_password severity = medium line = 16 matchedText = readonly...rd";

Medium

Secret Pattern

Hardcoded password in dist/constant.d.ts

dist/constant.d.tsView on unpkg · L16

Findings

2 Medium1 Low

MediumSecret Patterndist/constant.js

MediumSecret Patterndist/constant.d.ts

LowScripts Present

Source & flagged code

2 flagged

dist/constant.jsView file

Lines 1-33javascript

1//#region src/constant.ts

2const FORM_SYMBOL = Symbol("airlib:form");

3const FORM_FIELD_SYMBOL = Symbol("airlib:form-field");

4const FORM_INVALID_INPUT = Symbol("airlib:form-invalid-input");

5const FORM_STATUS = {

6 IDLE: "idle",

7 PENDING: "pending",

8 SUCCESS: "success",

9 ERROR: "error"

10};

11const FORM_INPUT = {

12 text: "text",

13 email: "email",

14 url: "url",

15 tel: "tel",

16 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/constant.jsView on unpkg · L16

17 search: "search",

18 hidden: "hidden",

19 number: "number",

20 range: "range",

21 date: "date",

22 datetimeLocal: "datetime-local",

23 time: "time",

24 month: "month",

25 week: "week",

26 checkbox: "checkbox",

27 radio: "radio",

28 color: "color",

29 toggle: "toggle"

30};

32//#endregion

33export { FORM_FIELD_SYMBOL, FORM_INPUT, FORM_INVALID_INPUT, FORM_STATUS, FORM_SYMBOL };

dist/constant.d.tsView file

Lines 1-32typescript

1//#region src/constant.d.ts

2declare const FORM_SYMBOL: unique symbol;

3declare const FORM_FIELD_SYMBOL: unique symbol;

4declare const FORM_INVALID_INPUT: unique symbol;