registry / @antv/dumi-theme-antv / 0.8.6

@antv/dumi-theme-antv@0.8.6

AntV website theme based on dumi2.

Static Scan Results

scanned 25d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 130 file(s), 623 KB of source, external domains: ant.design, antv.gitee.io, antv.vision, api.petercat.ai, assets.antv.antgroup.com, codesandbox.io, d.umijs.org, developer.stackblitz.com, eggjs.org, example.com, g.alicdn.com, g.alipay.com, galacean.antgroup.com, github.com, gw.alipayobjects.com, kitchen.alipay.com, links.alipay.com, mdn.alipayobjects.com, my-json-server.typicode.com, prepub.weavefox.cn, render.alipay.com, seeconf.antfin.com, site-data-pre.alipay.com, sive.antv.antgroup.com, stackoverflow.com, umijs.org, ur.alipay.com, weavefox.alipay.com, weavefox.alipay.net, webgw.antgroup-inc.cn, weibo.com, www.sitemaps.org, www.w3.org, www.weavefox.cn, www.yuque.com, xtech.antfin.com, yuque.com, zhuanlan.zhihu.com

Source & flagged code

2 flagged

dist/slots/ManualContent/utils.jsView file

Lines 38-73javascript

38 *

39 * @param p

40 */

41export function getNavigateUrl(pathname, first, siderbarMenu) {

42 // 兜底如果 nav 指定有误则自动重定向到 indexDocRoute

43 if (pathname.includes('/docs/') || pathname.includes('/zh/')) {

44 return pathname.replace('/docs/', '/').replace('/zh/', '/');

45 }

46 if (siderbarMenu.every(function (item) {

47 var itemLowerCase = "".concat(item).toLowerCase();

48 return ![itemLowerCase, "".concat(itemLowerCase, "/")].includes(pathname.toLowerCase());

49 })) {

50 return first;

51 }

52 return pathname;

53}

54export function safeEval(source) {

55 try {

56 // 如果代码以 (() => 或 (function 开头，说明是IIFE，直接执行

57 var trimmedSource = source.trim();

58 if (trimmedSource.startsWith('(') && (trimmedSource.includes('=>') || trimmedSource.includes('function'))) {

59 return new Function("return ".concat(source))();

60 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/slots/ManualContent/utils.jsView on unpkg · L58

62 // 尝试作为表达式执行

63 try {

64 return new Function("return ".concat(source))();

65 } catch (e) {

66 // 如果作为表达式失败，尝试作为语句执行

67 return new Function(source)();

68 }

69 } catch (error) {

70 console.error('代码执行错误:', error);

71 throw error;

72 }

73}

dist/plugin/sitemapGenerator.jsView file

Lines 14-54javascript

14 if (!__hasOwnProp.call(to, key) && key !== except)

15 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code