registry  /  @eeacms/volto-arcgis-block  /  0.1.458

@eeacms/volto-arcgis-block@0.1.458

volto-arcgis-block: Volto add-on

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 52 file(s), 831 KB of source, external domains: cryo.land.copernicus.eu, geospatial.jrc.ec.europa.eu, gisco-services.ec.europa.eu, image.discomap.eea.europa.eu, js.arcgis.com, land.copernicus.eu, land.discomap.eea.europa.eu, sh.dataspace.copernicus.eu, www.arcgis.com, www.w3.org

Source & flagged code

2 flagged · loading source
.envView file
•patternName = blocked_file severity = critical matchedText = .env redactedSecretContext = secretLikeLines = 0 notes = no secret-like key/value lines found in sampled text
Critical
Critical Secret

Package contains a critical-looking secret pattern.

.envView on unpkg
MakefileView file
•path = Makefile kind = build_helper sizeBytes = 4903 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

MakefileView on unpkg

Findings

1 Critical3 Medium5 Low
CriticalCritical Secret.env
MediumNetwork
MediumShips Build HelperMakefile
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings