registry / @essdocs/commonui / 6.4.2-beta.2

@essdocs/commonui@6.4.2-beta.2

EssDocs Common React Library

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcess

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 591 KB of source, external domains: benknowscode.wordpress.com, corner.squareup.com, creativecommons.org, fb.me, github.com, maps.google.com, momentjs.com, purl.org, support.essdocs.com, web.resource.org, www.lemoda.net, www.sodipodi.com, www.w3.org

Source & flagged code

3 flagged

dist/esm/index.jsView file

Lines 6-28javascript

6*/J=$,function(){var e={}.hasOwnProperty;function t(){for(var e="",t=0;t<arguments.length;t++){var i=arguments[t];i&&(e=r(e,n(i)))}return e}function n(n){if("string"==typeof n||"number"==typeof n)return n;if("object"!=typeof n)return"";if(Array.isArray(n))return t.apply(null,n);if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]"))return n.toString();var i="";for(var a in n)e.call(n,a)&&n[a]&&(i=r(i,a));return i}function r(e,t){return t?e?e+" "+t:e+t:e}J.exports?(t.default=t,J.exports=t):window.classNames=t}();var X=K($.exports),Z=function(e){var n=e.class ...

7//! moment.js

8r.version="2.30.1",i(Jn),r.fn=ca,r.min=er,r.max=tr,r.now=nr,r.utc=m,r.unix=da,r.months=va,r.isDate=u,r.locale=gn,r.invalid=y,r.duration=Nr,r.isMoment=w,r.weekdays=ba,r.parseZone=ua,r.localeData=bn,r.isDuration=sr,r.monthsShort=ya,r.weekdaysMin=Aa,r.defineLocale=vn,r.updateLocale=yn,r.locales=xn,r.weekdaysShort=

9/*!

10 * Signature Pad v2.3.2

11 * https://github.com/szimek/signature_pad

12 *

14 * Released under the MIT license

15 *

16 * The main idea and some parts of the code (e.g. drawing variable width Bézier curve) are taken from:

17 * http://corner.squareup.com/2012/07/smoother-signatures.html

18 *

19 * Implementation of interpolation using cubic Bézier curves is taken from:

20 * http://benknowscode.wordpress.com/2012/09/14/path-interpolation-using-cubic-bezier-and-control-point-estimation-in-javascript

21 *

22 * Algorithm for approximated length of a Bézier curve is taken from:

23 * http://www.lemoda.net/maths/bezier-length/index.html

24 *

25 */

26function Zt(e,t,n){this.x=e,this.y=t,this.time=n||(new Date).getTime()}function en(e,t,n,r){this.startPoint=e,this.control1=t,this.control2=

27//# sourceMappingURL=index.js.map

Long lines were clipped for display.

dist/cjs/index.jsView file

Lines 6-28javascript

6*/P=L,function(){var e={}.hasOwnProperty;function t(){for(var e="",t=0;t<arguments.length;t++){var i=arguments[t];i&&(e=r(e,

Source & flagged code

3 flagged · loading source

dist/esm/index.jsView file

26patternName = google_api_key severity = high line = 26 matchedText = function...rt};

High

High Secret

Package contains a high-severity secret pattern.

dist/esm/index.jsView on unpkg · L26

26patternName = google_api_key severity = high line = 26 matchedText = function...rt};

High

Secret Pattern

Google API key in dist/esm/index.js

dist/esm/index.jsView on unpkg · L26

dist/cjs/index.jsView file

26patternName = google_api_key severity = high line = 26 matchedText = function...=Xe;

High

Secret Pattern

Google API key in dist/cjs/index.js

dist/cjs/index.jsView on unpkg · L26

Findings

3 High1 Medium4 Low

HighHigh Secretdist/esm/index.js

HighSecret Patterndist/esm/index.js

HighSecret Patterndist/cjs/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/esm/index.jsView file

Lines 6-28javascript

7//! moment.js

9/*!

10 * Signature Pad v2.3.2

11 * https://github.com/szimek/signature_pad

12 *

14 * Released under the MIT license

15 *

16 * The main idea and some parts of the code (e.g. drawing variable width Bézier curve) are taken from:

17 * http://corner.squareup.com/2012/07/smoother-signatures.html

18 *

19 * Implementation of interpolation using cubic Bézier curves is taken from:

20 * http://benknowscode.wordpress.com/2012/09/14/path-interpolation-using-cubic-bezier-and-control-point-estimation-in-javascript

21 *

22 * Algorithm for approximated length of a Bézier curve is taken from:

23 * http://www.lemoda.net/maths/bezier-length/index.html

24 *

25 */

26function Zt(e,t,n){this.x=e,this.y=t,this.time=n||(new Date).getTime()}function en(e,t,n,r){this.startPoint=e,this.control1=t,this.control2=

27//# sourceMappingURL=index.js.map

Long lines were clipped for display.

dist/cjs/index.jsView file

Lines 6-28javascript

6*/P=L,function(){var e={}.hasOwnProperty;function t(){for(var e="",t=0;t<arguments.length;t++){var i=arguments[t];i&&(e=r(e,