@infineon/design-system-vue@42.0.4
Vue wrapper for Infineon Design System Web Components
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest has no install lifecycle scripts, and the inspected entry point, plugin, and generated wrappers match the stated Vue wrapper purpose. The referenced design system dependency source was unavailable for inspection, but no attack behavior was found in this package's reviewed files.
Decision evidence
public snapshot- The manifest describes a Vue wrapper for Infineon Design System web components and declares only build, TypeScript, and development scripts; it has no lifecycle hook.
- The package entry point exports the plugin and generated component wrappers and imports the design system stylesheet.
- The Vue plugin's install method calls defineCustomElements from the design system loader.
- The generated file imports Stencil's Vue output target and Infineon component definitions, consistent with the package's stated purpose.
- The referenced @infineon/design-system dependency source was unresolved in the supplied dependency evidence, so its implementation was not inspected.
Source & flagged code
5 flaggedThe manifest describes a Vue wrapper for Infineon Design System web components and declares only build, TypeScript, and development scripts; it has no lifecycle hook.
package.jsonView on unpkg · L2The manifest describes a Vue wrapper for Infineon Design System web components and declares only build, TypeScript, and development scripts; it has no lifecycle hook.
package.jsonView on unpkg · L30Findings
Affected versions and remediation
This report applies to @infineon/design-system-vue@42.0.4.
See all versions of @infineon/design-system-vue for other recorded verdicts.
- Review the evidence and your use of @infineon/design-system-vue@42.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.