Loading npm security reports…
Allowed — no malicious behavior detected
No malicious behavior detected. 50 low-signal pattern(s) reviewed.
@eifi1/ui-kit@0.36.0
⚠ Under reviewApp-agnostic shared design system: domain-free React components, theme and tokens.
Static Scan Results
scanned 23d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 50 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
Supply chainHighEntropyStringsMinifiedTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 928 file(s), 7.95 MB of source, external domains: github.com, kit.invalid, www.w3.org
Source & flagged code
43 flagged11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Package contains a possible secret pattern.
dist/auth/register-form-labels.jsView on unpkg · L11 src/billing/checkout-processing.ts#virtual:normalized:round1View file •stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/billing/checkout-processing.ts#virtual:normalized:round1View on unpkg Findings
1 High43 Medium6 Low
HighSemantic Analysis Limitedsrc/billing/checkout-processing.ts#virtual:normalized:round1
MediumSecret Patterndist/auth/register-form-labels.js
MediumNetwork
MediumSecret Patterndist/auth/sign-in-form-labels.js
MediumSecret Patterndist/account/email-change-setting-labels.js
MediumSecret Patterndist/account/account-settings-labels.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
Affected versions and remediation
This report applies to @eifi1/ui-kit@0.36.0.
See all versions of @eifi1/ui-kit for other recorded verdicts.
- Review the evidence and your use of @eifi1/ui-kit@0.36.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
5patternName = generic_password
severity = medium
line = 5
MediumSecret Pattern
Hardcoded password in dist/auth/sign-in-form-labels.js
dist/auth/sign-in-form-labels.jsView on unpkg · L5 dist/account/email-change-setting-labels.jsView file 7patternName = generic_password
severity = medium
line = 7
MediumSecret Pattern
Hardcoded password in dist/account/email-change-setting-labels.js
dist/account/email-change-setting-labels.jsView on unpkg · L7 dist/account/account-settings-labels.jsView file 36patternName = generic_password
severity = medium
line = 36
MediumSecret Pattern
Hardcoded password in dist/account/account-settings-labels.js
dist/account/account-settings-labels.jsView on unpkg · L36 166patternName = generic_password
severity = medium
line = 166
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L166 412patternName = generic_password
severity = medium
line = 412
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L412 715patternName = generic_password
severity = medium
line = 715
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L715 832patternName = generic_password
severity = medium
line = 832
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L832 875patternName = generic_password
severity = medium
line = 875
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L875 981patternName = generic_password
severity = medium
line = 981
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L981 167patternName = generic_password
severity = medium
line = 167
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L167 417patternName = generic_password
severity = medium
line = 417
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L417 723patternName = generic_password
severity = medium
line = 723
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L723 841patternName = generic_password
severity = medium
line = 841
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L841 887patternName = generic_password
severity = medium
line = 887
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L887 997patternName = generic_password
severity = medium
line = 997
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L997 168patternName = generic_password
severity = medium
line = 168
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L168 416patternName = generic_password
severity = medium
line = 416
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L416 725patternName = generic_password
severity = medium
line = 725
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L725 846patternName = generic_password
severity = medium
line = 846
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L846 890patternName = generic_password
severity = medium
line = 890
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L890 997patternName = generic_password
severity = medium
line = 997
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L997 167patternName = generic_password
severity = medium
line = 167
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L167 721patternName = generic_password
severity = medium
line = 721
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L721 994patternName = generic_password
severity = medium
line = 994
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L994 167patternName = generic_password
severity = medium
line = 167
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L167 414patternName = generic_password
severity = medium
line = 414
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L414 718patternName = generic_password
severity = medium
line = 718
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L718 833patternName = generic_password
severity = medium
line = 833
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L833 876patternName = generic_password
severity = medium
line = 876
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L876 982patternName = generic_password
severity = medium
line = 982
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L982 172patternName = generic_password
severity = medium
line = 172
423patternName = generic_password
severity = medium
line = 423
732patternName = generic_password
severity = medium
line = 732
845patternName = generic_password
severity = medium
line = 845
890patternName = generic_password
severity = medium
line = 890
1002patternName = generic_password
severity = medium
line = 1002
11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Hardcoded password in src/auth/sign-in-form-labels.ts
src/auth/sign-in-form-labels.tsView on unpkg · L11 18patternName = generic_password
severity = medium
line = 18
MediumSecret Pattern
Hardcoded password in src/auth/register-form-labels.ts
src/auth/register-form-labels.tsView on unpkg · L18 src/account/account-settings-labels.tsView file 179patternName = generic_password
severity = medium
line = 179
MediumSecret Pattern
Hardcoded password in src/account/account-settings-labels.ts
src/account/account-settings-labels.tsView on unpkg · L179 src/account/email-change-setting-labels.tsView file 13patternName = generic_password
severity = medium
line = 13
MediumSecret Pattern
Hardcoded password in src/account/email-change-setting-labels.ts
src/account/email-change-setting-labels.tsView on unpkg · L13 204patternName = generic_password
severity = medium
line = 204
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patternsrc/auth/sign-in-form-labels.ts
MediumSecret Patternsrc/auth/register-form-labels.ts
MediumSecret Patternsrc/account/account-settings-labels.ts
MediumSecret Patternsrc/account/email-change-setting-labels.ts
MediumSecret Patternsrc/i18n/german.ts
LowNon Install Lifecycle Scripts
prepareprepublishOnly
Behavioral surface
FilesystemNetworkHighEntropyStringsMinifiedTelemetryUrlStringsManifest: clean