registry  /  @gindow/element-go  /  1.0.9

@gindow/element-go@1.0.9

基于 Element Plus 的桌面端扩展组件库

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
Network
Supply chain
HighEntropyStringsMinified
ManifestNo manifest risk signals triggered.
scanned 24 file(s), 253 KB of source

Source & flagged code

2 flagged · loading source
dist/@gindow/element-go.mjsView file
139patternName = generic_password severity = medium line = 139 matchedText = password...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/@gindow/element-go.mjsView on unpkg · L139
src/locale/en-US.tsView file
20patternName = generic_password severity = medium line = 20 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in src/locale/en-US.ts

src/locale/en-US.tsView on unpkg · L20

Findings

3 Medium2 Low
MediumSecret Patterndist/@gindow/element-go.mjs
MediumNetwork
MediumSecret Patternsrc/locale/en-US.ts
LowScripts Present
LowHigh Entropy Strings