@flui-cloud/vops: Suspicious npm security report (Warn)

Loading npm security reports…

Source & flagged code

4 flagged

lib/ui/alpine.jsView file

Lines 1-6javascript

1(()=>{var ee=!1,re=!1,W=[],ne=-1,ie=!1;function Ve(t){Dn(t)}function Ue(){ie=!0}function qe(){ie=!1,We()}function Dn(t){W.includes(t)||W.push(t),We()}function Ke(t){let e=W.indexOf(t);e!==-1&&e>ne&&W.splice(e,1)}function We(){if(!re&&!ee){if(ie)return;ee=!0,queueMicrotask(In)}}function In(){ee=!1,re=!0;for(let t=0;t<W.length;t++)W[t](),ne=t;W.length=0,ne=-1,re=!1}var C,R,j,se,oe=!0;function Ge(t){oe=!1,t(),oe=!0}function Je(t){C=t.reactive,j=t.release,R=e=>t.effect(e,{scheduler:r=>{oe?Ve(r):r()}}),se=t.raw}function ae(t){R=t}function Ye(t){let e=()=>{};return[n=>{let i=R(n);return t._x_effects ...

3${r?'Expression: "'+r+`"

5`:""}`,e),setTimeout(()=>{throw t},0)}var it=!0;function Mt(t){let e=it;it=!1;let r=t();return it=e,r}function T(t,e,r={}){let n;return _(t,e)(i=>n=i,r),n}function _(...t){return ur(...t)}var ur=()=>{};function fr(t){ur=t}var dr;function pr(t){dr=t}function mr(t,e){let r={};H(r,t);let n=[r,...F(t)],i=typeof e=="function"?zn(n,e):Vn(n,e,t);return ar.bind(null,t,e,i)}function zn(t,e){return(r=()=>{},{scope:n={},params:i=[],context:o}={})=>{if(!it){ft(r,e,P([n,...t]),i);return}let s=e.apply(P([n,...t]),i);ft(r,s)}}var _e={};function Hn(t,e){if(_e[t])return _e[t];let r=Object.getPrototypeOf(async ...

High

Eval

Package source references dynamic code evaluation.

lib/ui/alpine.jsView on unpkg · L4

Long lines were clipped for display.

lib/ui/index.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys

lib/ui/app.jsView file

Lines 346-386javascript

346}

347

348function dashboardBenchCard() {

349 return {

350 // Alpine-facing wrappers — markup never calls bc* module functions directly.

351 bhCardTiles(r, reading) { return bcTiles(r, reading?.bands); },

lib/host-ops/vops-ops-rotation.service.jsView file

Lines 35-75javascript

35 var result = {};

36 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length

Source & flagged code

4 flagged · loading source

lib/ui/alpine.jsView file

4L5: `:""}`,e),setTimeout(()=>{throw t},0)}var it=!0;function Mt(t){let e=it;it=!1;let r=t();return it=e,r}function T(t,e,r={}){let n;return _(t,e)(i=>n=i,r),n}function _(...t){return u...

High

Eval

Package source references dynamic code evaluation.

lib/ui/alpine.jsView on unpkg · L4

lib/ui/index.jsView file

36exports.renderUi = renderUi; L37: const fs = __importStar(require("node:fs")); L38: const path = __importStar(require("node:path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/ui/index.jsView on unpkg · L36

lib/ui/app.jsView file

366if (!out) return; L367: if (navigator.clipboard?.write && window.ClipboardItem) { L368: try { L369: await navigator.clipboard.write([new ClipboardItem({ 'image/png': out.blob })]); L370: this.notify('Image copied'); ... L842: firewalls: 'Firewall per server — provider-native or vops nftables, one simple view.', L843: vnets: 'Private networks, subnets and routes.', L844: sshkeys: 'Local SSH keys — private keys never leave this machine.' }; ... L890: try { L891: const r = await fetch('/world.geo.json'); L892: if (r.ok) this.geo = await r.json(); L893: } catch { /* map is decorative — ignore fetch errors */ }

@flui-cloud/vops: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

4 flagged

lib/ui/alpine.jsView file

Lines 1-6javascript

3${r?'Expression: "'+r+`"

High

Eval

Package source references dynamic code evaluation.

lib/ui/alpine.jsView on unpkg · L4

Long lines were clipped for display.

lib/ui/index.jsView file

Lines 16-56javascript

16 o["default"] = v;

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys

lib/ui/app.jsView file

Lines 346-386javascript

346}

347

348function dashboardBenchCard() {

349 return {

350 // Alpine-facing wrappers — markup never calls bc* module functions directly.

351 bhCardTiles(r, reading) { return bcTiles(r, reading?.bands); },

lib/host-ops/vops-ops-rotation.service.jsView file

Lines 35-75javascript

35 var result = {};

36 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length

@flui-cloud/vops@0.1.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code