registry / @antv/g-plugin-yoga / 2.3.2
@antv/g-plugin-yoga@2.3.2
⚠ Under reviewA G plugin for Yoga layout engine
Static Scan Results
scanned 14d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 4 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
EvalFilesystem
HighEntropyStringsMinified
Source & flagged code
1 flagged · loading sourcedist/index.umd.min.jsView file
8*/
L9: !function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports,require("@antv/g-lite")):"function"==typeof define&&define.amd?define(["exports","@antv/g-lite"],n):n(...
L10: //# sourceMappingURL=index.umd.min.js.map
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/index.umd.min.jsView on unpkg · L8Findings
4 Low
LowScripts Present
LowEvaldist/index.umd.min.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @antv/g-plugin-yoga@2.3.2.
See all versions of @antv/g-plugin-yoga for other recorded verdicts.
- Review the evidence and your use of @antv/g-plugin-yoga@2.3.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.