registry  /  @coffer-org/web  /  1.2.4

@coffer-org/web@1.2.4

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
Manifest
NoLicense
scanned 134 file(s), 3.16 MB of source, external domains: json-schema.org, leafletjs.com, prosemirror.net, react.dev, tile.openstreetmap.org, www.w3.org
Oversized source lightweight scan
dist/assets/index-Cn4XUIR5.js2.48 MB file, sampled 256 KB
NetworkChildProcessDynamicRequireObfuscatedHighEntropyStringsMinifiedUrlStringsreact.devwww.w3.org

Source & flagged code

3 flagged · loading source
dist/assets/livescript-BXxG0Yva.jsView file
1var e=function(e,t){var n=t.next||`start`;if(n){t.next=t.next;var r=a[n];if(r.splice){for(var i=0;i<r.length;++i){var o=r[i];if(o.regex&&e.match(o.regex))return t.next=o.next||t.ne...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/livescript-BXxG0Yva.jsView on unpkg · L1
dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file
•path = dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg
dist/assets/index-Cn4XUIR5.jsView file
•path = dist/assets/index-Cn4XUIR5.js kind = oversized_source_file sizeBytes = 2600719 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/index-Cn4XUIR5.jsView on unpkg

Findings

2 High4 Medium5 Low
HighShips High Entropy Blobdist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2
HighOversized Source Filedist/assets/index-Cn4XUIR5.js
MediumDynamic Requiredist/assets/livescript-BXxG0Yva.js
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License