registry / @golstats/gsc-full-calendar / 1.1.4

@golstats/gsc-full-calendar@1.1.4

Este es un componente Vue.js que muestra un calendario de torneos deportivos. El componente se encarga de mostrar información sobre los partidos y las rondas de un torneo, permitiendo a los usuarios ver los partidos programados por fecha o por jornada, as

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a Vue sports calendar component whose runtime fetches Golstats tournament/game data and image assets when used in an app.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing/rendering the Vue component and selecting/loading tournament calendar data.

Impact

Fetches calendar data and images from Golstats-controlled services; no install-time execution or unauthorized system mutation observed.

Mechanism

User-facing API calls via axios with caller-provided token.

Rationale

Static inspection shows a bundled Vue component with expected Golstats API/image requests and an embedded default JWT-like value, but no install/import-time malware behavior or unconsented filesystem/agent mutation. The scanner signals map to bundled axios, documented Authorization use, and product-aligned endpoints rather than a concrete attack.

Evidence

package.jsonREADME.mddist/gsc-full-calendar.jsdist/gsc-full-calendar.umd.cjsdist/style.css

Network endpoints5

kefloixzy1.execute-api.us-west-2.amazonaws.com/prod/v2/gs3/tournamentsqyyibs1w0d.execute-api.us-west-2.amazonaws.com/prod/calendar/gamesBySeasonqyyibs1w0d.execute-api.us-west-2.amazonaws.com/prod/calendar/gamesBySeason/lives

@golstats/gsc-full-calendar@1.1.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code