registry  /  @hachej/boring-workspace  /  0.1.61

@hachej/boring-workspace@0.1.61

Workspace UI, plugin, and bridge package for composing chat, files, catalogs, editors, and app-specific panes.

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 17 file(s), 1.08 MB of source, external domains: github.com, html.spec.whatwg.org, react.dev, testing-library.com, testing-playground.com, workspace.local, workspace.testing

Source & flagged code

1 flagged · loading source
dist/WorkspaceProvider-kf-pjz6V.jsView file
2847} L2848: const Po = () => import("./FileTree-zGmxifl_.js").then((e) => ({ default: e.FileTree })); L2849: function Mc() {
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/WorkspaceProvider-kf-pjz6V.jsView on unpkg · L2847

Findings

3 Medium4 Low
MediumDynamic Requiredist/WorkspaceProvider-kf-pjz6V.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings