registry  /  @flexem/fc-gui  /  3.0.0-alpha.172

@flexem/fc-gui@3.0.0-alpha.172

* 支持angular8 * 编译并且监听调用：npm run build.watch. * 本地demo开启调用：npm start.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcess
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 304 file(s), 1.98 MB of source, external domains: js.foundation, lodash.com, momentjs.com, npms.io, stackoverflow.com, underscorejs.org, www.w3.org
Oversized source lightweight scan
bundles/@flexem/fc-gui.umd.js3.08 MB file, sampled 256 KB
ChildProcessHighEntropyStringsUrlStringsmomentjs.comstackoverflow.com

Source & flagged code

3 flagged · loading source
localization/localization.service.jsView file
52patternName = generic_password severity = medium line = 52 matchedText = password...rd',
Medium
Secret Pattern

Package contains a possible secret pattern.

localization/localization.service.jsView on unpkg · L52
bundles/@flexem/fc-gui.umd.jsView file
•path = bundles/@flexem/fc-gui.umd.js kind = oversized_source_file sizeBytes = 3232990 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

bundles/@flexem/fc-gui.umd.jsView on unpkg
bundles/@flexem/fc-gui.umd.min.jsView file
24patternName = generic_password severity = medium line = 24 matchedText = var i=fu...n i}
Medium
Secret Pattern

Hardcoded password in bundles/@flexem/fc-gui.umd.min.js

bundles/@flexem/fc-gui.umd.min.jsView on unpkg · L24

Findings

1 High3 Medium3 Low
HighOversized Source Filebundles/@flexem/fc-gui.umd.js
MediumSecret Patternlocalization/localization.service.js
MediumStructural Risk Force Deep Review
MediumSecret Patternbundles/@flexem/fc-gui.umd.min.js
LowHigh Entropy Strings
LowUrl Strings
LowNo License