registry / @iankibetsh/sh-tailwind / 0.1.7

@iankibetsh/sh-tailwind@0.1.7

Vue 3 + Tailwind CSS v4 component library for Laravel backends, built on @iankibetsh/sh-core. Forms, tables, tabs, dialogs, drawers and action components.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 18 file(s), 315 KB of source, external domains: cdn.kcak11.com, www.countryflags.io, www.w3.org

Source & flagged code

2 flagged

dist/sh-tailwind.es.jsView file

Lines 243-283javascript

243 r.value = !1;

244 let n = se.indexOf(o);

245 n >= 0 && se.splice(n, 1), ae(), document.removeEventListener("keydown", s), a?.focus?.(), t?.(e);

246 }

247 function u() {

248 e?.() || l("backdrop");

249 }

250 return T(() => {

251 r.value && l("unmount");

252 }), {

253 isOpen: r,

254 zIndex: i,

255 show: c,

256 close: l,

257 onBackdrop: u

258 };

259}

260//#endregion

261//#region src/utils/strings.js

262var le = (e) => String(e ?? "").replace(/[_-]+/g, " ").replace(/([a-z\d])([A-Z])/g, "$1 $2").trim().split(/\s+/).map((e) =>

263 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/sh-tailwind.es.jsView on unpkg · L263

264 pin: "pin",

265 password_confirmation: "password",

266 message: "textarea",

267 description: "textarea",

268 comments: "textarea",

269 notes: "textarea",

270 email: "email",

271 phone: "phone",

272 phone_number: "phone",

273 age: "number",

274 date: "date"

275};

276function de(e) {

277 if (e.type) return e.type;

278 if (e.component) return "custom";

279 if (e.options) return e.multiple || e.allowCustom ? "suggest" : "select";

280 let t = e.name ?? "";

281 return ue[t] ? ue[t] : /_email$/.test(t) ? "email" : /_phone$/.test(t) ? "phone" : /(_at|_date|_on)$/.test(t) ? "date" : "text";

282}

283function Q(e, t = {}) {

src/utils/normalizeField.jsView file

Lines 1-25javascript

1import { startCase } from './strings.js'

3// Exact-name inference carried over from shframework's ShAutoForm

4const NAME_TYPE_MAP = {

5 password: 'password',

Medium

Secret Pattern

Hardcoded password in src/utils/normalizeField.js

src/utils/normalizeField.jsView on unpkg · L5

6 pin: 'pin',

Source & flagged code

2 flagged · loading source

dist/sh-tailwind.es.jsView file

263patternName = generic_password severity = medium line = 263 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/sh-tailwind.es.jsView on unpkg · L263

src/utils/normalizeField.jsView file

5patternName = generic_password severity = medium line = 5 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/utils/normalizeField.js

src/utils/normalizeField.jsView on unpkg · L5

Findings

2 Medium4 Low

MediumSecret Patterndist/sh-tailwind.es.js

MediumSecret Patternsrc/utils/normalizeField.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/sh-tailwind.es.jsView file

Lines 243-283javascript

243 r.value = !1;

244 let n = se.indexOf(o);

245 n >= 0 && se.splice(n, 1), ae(), document.removeEventListener("keydown", s), a?.focus?.(), t?.(e);

246 }

247 function u() {

248 e?.() || l("backdrop");

249 }

250 return T(() => {

251 r.value && l("unmount");

252 }), {

253 isOpen: r,

254 zIndex: i,

255 show: c,

256 close: l,

257 onBackdrop: u

258 };

259}

260//#endregion

261//#region src/utils/strings.js

262var le = (e) => String(e ?? "").replace(/[_-]+/g, " ").replace(/([a-z\d])([A-Z])/g, "$1 $2").trim().split(/\s+/).map((e) =>

263 password: "password",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/sh-tailwind.es.jsView on unpkg · L263

264 pin: "pin",

265 password_confirmation: "password",

266 message: "textarea",

267 description: "textarea",

268 comments: "textarea",

269 notes: "textarea",

270 email: "email",

271 phone: "phone",

272 phone_number: "phone",

273 age: "number",

274 date: "date"

275};

276function de(e) {

277 if (e.type) return e.type;

278 if (e.component) return "custom";

279 if (e.options) return e.multiple || e.allowCustom ? "suggest" : "select";

280 let t = e.name ?? "";

281 return ue[t] ? ue[t] : /_email$/.test(t) ? "email" : /_phone$/.test(t) ? "phone" : /(_at|_date|_on)$/.test(t) ? "date" : "text";

282}

283function Q(e, t = {}) {

src/utils/normalizeField.jsView file

Lines 1-25javascript

1import { startCase } from './strings.js'

3// Exact-name inference carried over from shframework's ShAutoForm

4const NAME_TYPE_MAP = {

5 password: 'password',

Medium

Secret Pattern

Hardcoded password in src/utils/normalizeField.js

src/utils/normalizeField.jsView on unpkg · L5

6 pin: 'pin',