registry  /  @brizy/ui  /  0.9.110

@brizy/ui@0.9.110

React elements in Brizy style

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetwork
Supply chain
UrlStrings
Manifest
GitDependency
scanned 689 file(s), 981 KB of source, external domains: assets6.lottiefiles.com, connect.facebook.net, w.soundcloud.com, www.w3.org

Source & flagged code

2 flagged · loading source
dist/fonts/Nunito-Black.woff2View file
•path = dist/fonts/Nunito-Black.woff2 kind = high_entropy_blob sizeBytes = 44532 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/Nunito-Black.woff2View on unpkg
package.jsonView file
•Remote tarball dependency specs: antd@https://github.com/bagrinsergiu/ant-design/archive/refs/heads/4.7.0-fix-rc-select-v6.tar.gz
Medium
Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

1 High4 Medium2 Low
HighShips High Entropy Blobdist/fonts/Nunito-Black.woff2
MediumNetwork
MediumStructural Risk Force Deep Review
MediumGit Dependency
MediumRemote Tarball Dependencypackage.json
LowScripts Present
LowUrl Strings