registry / @alipay/ams-checkout / 2.0.24
@alipay/ams-checkout@2.0.24
Use _AMS CHECKOUT_ as an ES module.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessDynamicRequireEvalNetworkShell
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
NoLicense
Source & flagged code
2 flaggedams-checkout.jsView file
5*/
L6: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var n=t();for(var r in n)("ob...
Low
Eval
Package source references a known benign dynamic code generation pattern.
ams-checkout.jsView on unpkg · L5esm/util/logger.jsView file
200// @ts-expect-error amd
L201: window.require([moduleId], callback, function (err) {
L202: console.error('AMD load failed, falling back to script tag', err);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
esm/util/logger.jsView on unpkg · L200Findings
3 Medium8 Low
MediumDynamic Requireesm/util/logger.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalams-checkout.js
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @alipay/ams-checkout@2.0.24.
See all versions of @alipay/ams-checkout for other recorded verdicts.
- Review the evidence and your use of @alipay/ams-checkout@2.0.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.