registry / @hcaptcha/react-native-hcaptcha / 4.1.0

@hcaptcha/react-native-hcaptcha@4.1.0

hCaptcha Library for React Native (both Android and iOS)

Static Scan Results

scanned 13h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 20 file(s), 64.8 KB of source, external domains: hcaptcha.com, js.hcaptcha.com, www.hcaptcha.com

Source & flagged code

3 flagged

__scripts__/generate-example.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execSync } = require('child_process');

4const { platform } = require('os');

High

Child Process

Package source references child process execution.

__scripts__/generate-example.jsView on unpkg · L2

5const fs = require('fs');

6const path = require('path');

8// Function to display help message

9function showHelp() {

10 console.log(`

11Usage: ${path.basename(process.argv[1])} [options]

13Options:

14 --expo Use expo-cli (default: false)

15 --template <value> Specify the project template

16 --name <name> Specify the project name (required)

17 --path <path> Specify the project path (default: ../<name>)

18 --pm <pm> Specify the package manager to use (default: yarn)

19 --skip-build Skip native builds (pod install, gradlew assemble)

20 --verbose Enable verbose logging

21 -h, --help Show this help message

22`);

Lines 113-176javascript

113

114 if (verbose) {

115 createCommand.push('--verbose');

116 }

117

118 return createCommand;

119}

120

121function checkHcaptchaLinked() {

122 return

Source & flagged code

3 flagged · loading source

__scripts__/generate-example.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code