registry / @golstats/gsc-full-calendar / 1.1.6

@golstats/gsc-full-calendar@1.1.6

Este es un componente Vue.js que muestra un calendario de torneos deportivos. El componente se encarga de mostrar información sobre los partidos y las rondas de un torneo, permitiendo a los usuarios ver los partidos programados por fecha o por jornada, as

AI Security Review

scanned 8d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The browser component fetches tournament/calendar data and static image/config assets only when mounted or its UI actions run.

Static reason

One or more suspicious static signals were detected.

Trigger

Import and mount `GSCFullCalendar`; optional calendar privilege actions require consumer-provided props/token.

Impact

No install-time execution, persistence, credential harvesting, destructive action, or remote payload execution found.

Mechanism

Vue calendar rendering with package-aligned HTTP requests

Rationale

Direct inspection shows a browser-focused Golstats calendar component with package-aligned data requests. The scanner's secret signal is an expired default JWT, and no concrete malicious chain was found.

Evidence

package.jsonREADME.mddist/gsc-full-calendar.jsdist/gsc-full-calendar.umd.cjs

Network endpoints5

kefloixzy1.execute-api.us-west-2.amazonaws.com/prod/v2/gs3/tournamentsu6845vutog.execute-api.us-east-2.amazonaws.com/prod/api/v1/privileges/gamesqyyibs1w0d.execute-api.us-west-2.amazonaws.com/prod/calendar/gamesBySeasondtcf4s9tapfr0.cloudfront.net

@golstats/gsc-full-calendar@1.1.6

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code