registry / @golstats/gsc-full-calendar / 1.1.5

@golstats/gsc-full-calendar@1.1.5

Este es un componente Vue.js que muestra un calendario de torneos deportivos. El componente se encarga de mostrar información sobre los partidos y las rondas de un torneo, permitiendo a los usuarios ver los partidos programados por fecha o por jornada, as

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. Runtime network access is package-aligned calendar data and static image loading for the Vue component.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing/rendering the Vue component with props such as token, tournament, season, or videos enabled

Impact

Displays calendar/tournament/game data; sends caller-provided token as Authorization to GolStats endpoints

Mechanism

browser fetch/XMLHttpRequest to GolStats API and asset endpoints

Rationale

Static inspection shows a packaged Vue calendar UI with GolStats API/image calls and no install-time execution, code execution primitives, persistence, exfiltration, or AI-agent control-surface mutation. The suspicious scanner findings align with bundled axios/browser networking and a user-supplied auth token prop.

Evidence

package.jsonREADME.mddist/gsc-full-calendar.jsdist/gsc-full-calendar.umd.cjsdist/style.css

Network endpoints8

apis.golstats.comdev-apis.golstats.comgolstatsimages.blob.core.windows.netkefloixzy1.execute-api.us-west-2.amazonaws.comu6845vutog.execute-api.us-east-2.amazonaws.com

@golstats/gsc-full-calendar@1.1.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code