registry / @goldlabelapps/notify / 3.8.6
@goldlabelapps/notify@3.8.6
⚠ Under reviewUnified pings, device fingerprinting, emails, push notifications, and real-time messaging SDK for Goldlabel applications.
Static Scan Results
scanned 18d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
EnvironmentVarsNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
4 flaggeddist/constants.jsView file
13patternName = google_api_key
severity = high
line = 13
High
13patternName = google_api_key
severity = high
line = 13
High
dist/push/useNotifyPush.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/push/useNotifyPush.js#virtual:normalized:round1Findings
4 High2 Medium4 Low
HighHigh Secretdist/constants.js
HighSemantic Analysis Limiteddist/push/useNotifyPush.js#virtual:normalized:round1
HighSecret Patterndist/constants.js
HighSecret Patterndist/constants.d.ts
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @goldlabelapps/notify@3.8.6.
See all versions of @goldlabelapps/notify for other recorded verdicts.
- Review the evidence and your use of @goldlabelapps/notify@3.8.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.