Loading npm security reports…
Allowed — no malicious behavior detected
No malicious behavior detected. 50 low-signal pattern(s) reviewed.
@eifi1/ui-kit@0.38.0
⚠ Under reviewApp-agnostic shared design system: domain-free React components, theme and tokens.
Static Scan Results
scanned 22d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 50 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
Supply chainHighEntropyStringsMinifiedTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 948 file(s), 8.08 MB of source, external domains: github.com, kit.invalid, www.w3.org
Source & flagged code
43 flagged11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Package contains a possible secret pattern.
dist/auth/register-form-labels.jsView on unpkg · L11 src/billing/checkout-processing.ts#virtual:normalized:round1View file •stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/billing/checkout-processing.ts#virtual:normalized:round1View on unpkg Findings
1 High43 Medium6 Low
HighSemantic Analysis Limitedsrc/billing/checkout-processing.ts#virtual:normalized:round1
MediumSecret Patterndist/auth/register-form-labels.js
MediumNetwork
MediumSecret Patterndist/auth/sign-in-form-labels.js
MediumSecret Patterndist/account/email-change-setting-labels.js
MediumSecret Patterndist/account/account-settings-labels.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
Affected versions and remediation
This report applies to @eifi1/ui-kit@0.38.0.
See all versions of @eifi1/ui-kit for other recorded verdicts.
- Review the evidence and your use of @eifi1/ui-kit@0.38.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
5patternName = generic_password
severity = medium
line = 5
MediumSecret Pattern
Hardcoded password in dist/auth/sign-in-form-labels.js
dist/auth/sign-in-form-labels.jsView on unpkg · L5 dist/account/email-change-setting-labels.jsView file 7patternName = generic_password
severity = medium
line = 7
MediumSecret Pattern
Hardcoded password in dist/account/email-change-setting-labels.js
dist/account/email-change-setting-labels.jsView on unpkg · L7 dist/account/account-settings-labels.jsView file 36patternName = generic_password
severity = medium
line = 36
MediumSecret Pattern
Hardcoded password in dist/account/account-settings-labels.js
dist/account/account-settings-labels.jsView on unpkg · L36 228patternName = generic_password
severity = medium
line = 228
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L228 474patternName = generic_password
severity = medium
line = 474
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L474 777patternName = generic_password
severity = medium
line = 777
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L777 894patternName = generic_password
severity = medium
line = 894
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L894 937patternName = generic_password
severity = medium
line = 937
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L937 1043patternName = generic_password
severity = medium
line = 1043
229patternName = generic_password
severity = medium
line = 229
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L229 479patternName = generic_password
severity = medium
line = 479
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L479 785patternName = generic_password
severity = medium
line = 785
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L785 903patternName = generic_password
severity = medium
line = 903
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L903 949patternName = generic_password
severity = medium
line = 949
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L949 1059patternName = generic_password
severity = medium
line = 1059
230patternName = generic_password
severity = medium
line = 230
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L230 478patternName = generic_password
severity = medium
line = 478
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L478 787patternName = generic_password
severity = medium
line = 787
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L787 908patternName = generic_password
severity = medium
line = 908
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L908 952patternName = generic_password
severity = medium
line = 952
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L952 1059patternName = generic_password
severity = medium
line = 1059
229patternName = generic_password
severity = medium
line = 229
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L229 783patternName = generic_password
severity = medium
line = 783
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L783 1056patternName = generic_password
severity = medium
line = 1056
229patternName = generic_password
severity = medium
line = 229
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L229 476patternName = generic_password
severity = medium
line = 476
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L476 780patternName = generic_password
severity = medium
line = 780
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L780 895patternName = generic_password
severity = medium
line = 895
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L895 938patternName = generic_password
severity = medium
line = 938
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L938 1044patternName = generic_password
severity = medium
line = 1044
234patternName = generic_password
severity = medium
line = 234
485patternName = generic_password
severity = medium
line = 485
794patternName = generic_password
severity = medium
line = 794
907patternName = generic_password
severity = medium
line = 907
952patternName = generic_password
severity = medium
line = 952
1064patternName = generic_password
severity = medium
line = 1064
11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Hardcoded password in src/auth/sign-in-form-labels.ts
src/auth/sign-in-form-labels.tsView on unpkg · L11 18patternName = generic_password
severity = medium
line = 18
MediumSecret Pattern
Hardcoded password in src/auth/register-form-labels.ts
src/auth/register-form-labels.tsView on unpkg · L18 src/account/account-settings-labels.tsView file 179patternName = generic_password
severity = medium
line = 179
MediumSecret Pattern
Hardcoded password in src/account/account-settings-labels.ts
src/account/account-settings-labels.tsView on unpkg · L179 src/account/email-change-setting-labels.tsView file 13patternName = generic_password
severity = medium
line = 13
MediumSecret Pattern
Hardcoded password in src/account/email-change-setting-labels.ts
src/account/email-change-setting-labels.tsView on unpkg · L13 266patternName = generic_password
severity = medium
line = 266
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patternsrc/auth/sign-in-form-labels.ts
MediumSecret Patternsrc/auth/register-form-labels.ts
MediumSecret Patternsrc/account/account-settings-labels.ts
MediumSecret Patternsrc/account/email-change-setting-labels.ts
MediumSecret Patternsrc/i18n/german.ts
LowNon Install Lifecycle Scripts
prepareprepublishOnly
Behavioral surface
FilesystemNetworkHighEntropyStringsMinifiedTelemetryUrlStringsManifest: clean