Loading npm security reports…
Javascript client for the Eluvio Content Fabric
Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package source references dynamic require/import behavior.
testScripts/parentClasses/ScriptVariant.jsView on unpkg · L4Package ships non-JavaScript build or shell helper files.
utilities/chain_disable.shView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
utilities/tests/integration/vars.offering.copy.and.text.watermark.shView on unpkgPackage contains source files above the static scanner size ceiling.
dist/ElvFrameClient-min.jsView on unpkgTarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgPackage declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
testScripts/parentClasses/ScriptVariant.jsView on unpkg · L4Package ships non-JavaScript build or shell helper files.
utilities/chain_disable.shView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
utilities/tests/integration/vars.offering.copy.and.text.watermark.shView on unpkgPackage contains source files above the static scanner size ceiling.
dist/ElvFrameClient-min.jsView on unpkgTarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg · L9Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkg · L9