Loading npm security reports…
Allowed — no malicious behavior detected
No malicious behavior detected. 50 low-signal pattern(s) reviewed.
@eifi1/ui-kit@0.35.0
⚠ Under reviewApp-agnostic shared design system: domain-free React components, theme and tokens.
Static Scan Results
scanned 23d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 50 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
Supply chainHighEntropyStringsMinifiedTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 900 file(s), 7.68 MB of source, external domains: github.com, kit.invalid, www.w3.org
Source & flagged code
43 flagged11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Package contains a possible secret pattern.
dist/auth/register-form-labels.jsView on unpkg · L11 src/billing/checkout-processing.ts#virtual:normalized:round1View file •stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/billing/checkout-processing.ts#virtual:normalized:round1View on unpkg Findings
1 High43 Medium6 Low
HighSemantic Analysis Limitedsrc/billing/checkout-processing.ts#virtual:normalized:round1
MediumSecret Patterndist/auth/register-form-labels.js
MediumNetwork
MediumSecret Patterndist/auth/sign-in-form-labels.js
MediumSecret Patterndist/account/email-change-setting-labels.js
MediumSecret Patterndist/account/account-settings-labels.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
Affected versions and remediation
This report applies to @eifi1/ui-kit@0.35.0.
See all versions of @eifi1/ui-kit for other recorded verdicts.
- Review the evidence and your use of @eifi1/ui-kit@0.35.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
5patternName = generic_password
severity = medium
line = 5
MediumSecret Pattern
Hardcoded password in dist/auth/sign-in-form-labels.js
dist/auth/sign-in-form-labels.jsView on unpkg · L5 dist/account/email-change-setting-labels.jsView file 7patternName = generic_password
severity = medium
line = 7
MediumSecret Pattern
Hardcoded password in dist/account/email-change-setting-labels.js
dist/account/email-change-setting-labels.jsView on unpkg · L7 dist/account/account-settings-labels.jsView file 36patternName = generic_password
severity = medium
line = 36
MediumSecret Pattern
Hardcoded password in dist/account/account-settings-labels.js
dist/account/account-settings-labels.jsView on unpkg · L36 166patternName = generic_password
severity = medium
line = 166
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L166 410patternName = generic_password
severity = medium
line = 410
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L410 713patternName = generic_password
severity = medium
line = 713
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L713 830patternName = generic_password
severity = medium
line = 830
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L830 873patternName = generic_password
severity = medium
line = 873
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L873 979patternName = generic_password
severity = medium
line = 979
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L979 167patternName = generic_password
severity = medium
line = 167
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L167 415patternName = generic_password
severity = medium
line = 415
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L415 721patternName = generic_password
severity = medium
line = 721
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L721 839patternName = generic_password
severity = medium
line = 839
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L839 885patternName = generic_password
severity = medium
line = 885
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L885 995patternName = generic_password
severity = medium
line = 995
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L995 168patternName = generic_password
severity = medium
line = 168
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L168 414patternName = generic_password
severity = medium
line = 414
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L414 723patternName = generic_password
severity = medium
line = 723
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L723 844patternName = generic_password
severity = medium
line = 844
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L844 888patternName = generic_password
severity = medium
line = 888
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L888 995patternName = generic_password
severity = medium
line = 995
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L995 167patternName = generic_password
severity = medium
line = 167
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L167 719patternName = generic_password
severity = medium
line = 719
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L719 992patternName = generic_password
severity = medium
line = 992
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L992 167patternName = generic_password
severity = medium
line = 167
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L167 412patternName = generic_password
severity = medium
line = 412
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L412 716patternName = generic_password
severity = medium
line = 716
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L716 831patternName = generic_password
severity = medium
line = 831
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L831 874patternName = generic_password
severity = medium
line = 874
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L874 980patternName = generic_password
severity = medium
line = 980
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L980 172patternName = generic_password
severity = medium
line = 172
421patternName = generic_password
severity = medium
line = 421
730patternName = generic_password
severity = medium
line = 730
843patternName = generic_password
severity = medium
line = 843
888patternName = generic_password
severity = medium
line = 888
1000patternName = generic_password
severity = medium
line = 1000
11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Hardcoded password in src/auth/sign-in-form-labels.ts
src/auth/sign-in-form-labels.tsView on unpkg · L11 18patternName = generic_password
severity = medium
line = 18
MediumSecret Pattern
Hardcoded password in src/auth/register-form-labels.ts
src/auth/register-form-labels.tsView on unpkg · L18 src/account/account-settings-labels.tsView file 179patternName = generic_password
severity = medium
line = 179
MediumSecret Pattern
Hardcoded password in src/account/account-settings-labels.ts
src/account/account-settings-labels.tsView on unpkg · L179 src/account/email-change-setting-labels.tsView file 13patternName = generic_password
severity = medium
line = 13
MediumSecret Pattern
Hardcoded password in src/account/email-change-setting-labels.ts
src/account/email-change-setting-labels.tsView on unpkg · L13 204patternName = generic_password
severity = medium
line = 204
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patternsrc/auth/sign-in-form-labels.ts
MediumSecret Patternsrc/auth/register-form-labels.ts
MediumSecret Patternsrc/account/account-settings-labels.ts
MediumSecret Patternsrc/account/email-change-setting-labels.ts
MediumSecret Patternsrc/i18n/german.ts
LowNon Install Lifecycle Scripts
prepareprepublishOnly
Behavioral surface
FilesystemNetworkHighEntropyStringsMinifiedTelemetryUrlStringsManifest: clean