Loading npm security reports…
Allowed — no malicious behavior detected
No malicious behavior detected. 50 low-signal pattern(s) reviewed.
@eifi1/ui-kit@0.38.1
⚠ Under reviewApp-agnostic shared design system: domain-free React components, theme and tokens.
Static Scan Results
scanned 22d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 50 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
Supply chainHighEntropyStringsMinifiedTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 950 file(s), 8.09 MB of source, external domains: github.com, kit.invalid, www.w3.org
Source & flagged code
43 flagged11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Package contains a possible secret pattern.
dist/auth/register-form-labels.jsView on unpkg · L11 src/billing/checkout-processing.ts#virtual:normalized:round1View file •stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/billing/checkout-processing.ts#virtual:normalized:round1View on unpkg Findings
1 High43 Medium6 Low
HighSemantic Analysis Limitedsrc/billing/checkout-processing.ts#virtual:normalized:round1
MediumSecret Patterndist/auth/register-form-labels.js
MediumNetwork
MediumSecret Patterndist/auth/sign-in-form-labels.js
MediumSecret Patterndist/account/email-change-setting-labels.js
MediumSecret Patterndist/account/account-settings-labels.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
MediumSecret Patterndist/i18n/locales/zh.js
Affected versions and remediation
This report applies to @eifi1/ui-kit@0.38.1.
See all versions of @eifi1/ui-kit for other recorded verdicts.
- Review the evidence and your use of @eifi1/ui-kit@0.38.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
5patternName = generic_password
severity = medium
line = 5
MediumSecret Pattern
Hardcoded password in dist/auth/sign-in-form-labels.js
dist/auth/sign-in-form-labels.jsView on unpkg · L5 dist/account/email-change-setting-labels.jsView file 7patternName = generic_password
severity = medium
line = 7
MediumSecret Pattern
Hardcoded password in dist/account/email-change-setting-labels.js
dist/account/email-change-setting-labels.jsView on unpkg · L7 dist/account/account-settings-labels.jsView file 36patternName = generic_password
severity = medium
line = 36
MediumSecret Pattern
Hardcoded password in dist/account/account-settings-labels.js
dist/account/account-settings-labels.jsView on unpkg · L36 232patternName = generic_password
severity = medium
line = 232
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L232 478patternName = generic_password
severity = medium
line = 478
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L478 781patternName = generic_password
severity = medium
line = 781
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L781 898patternName = generic_password
severity = medium
line = 898
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L898 941patternName = generic_password
severity = medium
line = 941
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/zh.js
dist/i18n/locales/zh.jsView on unpkg · L941 1047patternName = generic_password
severity = medium
line = 1047
233patternName = generic_password
severity = medium
line = 233
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L233 483patternName = generic_password
severity = medium
line = 483
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L483 789patternName = generic_password
severity = medium
line = 789
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L789 907patternName = generic_password
severity = medium
line = 907
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L907 953patternName = generic_password
severity = medium
line = 953
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/fr.js
dist/i18n/locales/fr.jsView on unpkg · L953 1063patternName = generic_password
severity = medium
line = 1063
234patternName = generic_password
severity = medium
line = 234
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L234 482patternName = generic_password
severity = medium
line = 482
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L482 791patternName = generic_password
severity = medium
line = 791
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L791 912patternName = generic_password
severity = medium
line = 912
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L912 956patternName = generic_password
severity = medium
line = 956
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/hu.js
dist/i18n/locales/hu.jsView on unpkg · L956 1063patternName = generic_password
severity = medium
line = 1063
233patternName = generic_password
severity = medium
line = 233
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L233 787patternName = generic_password
severity = medium
line = 787
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/it.js
dist/i18n/locales/it.jsView on unpkg · L787 1060patternName = generic_password
severity = medium
line = 1060
233patternName = generic_password
severity = medium
line = 233
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L233 480patternName = generic_password
severity = medium
line = 480
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L480 784patternName = generic_password
severity = medium
line = 784
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L784 899patternName = generic_password
severity = medium
line = 899
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L899 942patternName = generic_password
severity = medium
line = 942
MediumSecret Pattern
Hardcoded password in dist/i18n/locales/es.js
dist/i18n/locales/es.jsView on unpkg · L942 1048patternName = generic_password
severity = medium
line = 1048
238patternName = generic_password
severity = medium
line = 238
489patternName = generic_password
severity = medium
line = 489
798patternName = generic_password
severity = medium
line = 798
911patternName = generic_password
severity = medium
line = 911
956patternName = generic_password
severity = medium
line = 956
1068patternName = generic_password
severity = medium
line = 1068
11patternName = generic_password
severity = medium
line = 11
MediumSecret Pattern
Hardcoded password in src/auth/sign-in-form-labels.ts
src/auth/sign-in-form-labels.tsView on unpkg · L11 18patternName = generic_password
severity = medium
line = 18
MediumSecret Pattern
Hardcoded password in src/auth/register-form-labels.ts
src/auth/register-form-labels.tsView on unpkg · L18 src/account/account-settings-labels.tsView file 179patternName = generic_password
severity = medium
line = 179
MediumSecret Pattern
Hardcoded password in src/account/account-settings-labels.ts
src/account/account-settings-labels.tsView on unpkg · L179 src/account/email-change-setting-labels.tsView file 13patternName = generic_password
severity = medium
line = 13
MediumSecret Pattern
Hardcoded password in src/account/email-change-setting-labels.ts
src/account/email-change-setting-labels.tsView on unpkg · L13 270patternName = generic_password
severity = medium
line = 270
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/fr.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/hu.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/it.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/locales/es.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patterndist/i18n/german.js
MediumSecret Patternsrc/auth/sign-in-form-labels.ts
MediumSecret Patternsrc/auth/register-form-labels.ts
MediumSecret Patternsrc/account/account-settings-labels.ts
MediumSecret Patternsrc/account/email-change-setting-labels.ts
MediumSecret Patternsrc/i18n/german.ts
LowNon Install Lifecycle Scripts
prepareprepublishOnly
Behavioral surface
FilesystemNetworkHighEntropyStringsMinifiedTelemetryUrlStringsManifest: clean