registry / @jigowatts/jigowatts-ui / 2.3.1

@jigowatts/jigowatts-ui@2.3.1

開発に関する詳細なガイドラインと注意事項については、 [DEVELOPMENT.md](./DEVELOPMENT.md) を参照してください。エージェント向けのルールは [.cursorrules](./.cursorrules) に記載されています。

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEval

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 212 file(s), 3.33 MB of source, external domains: dequeuniversity.com, example.com, fb.me, github.com, html.spec.whatwg.org, jsperf.com, leafletjs.com, mths.be, react.dev, reactjs.org, testing-library.com, testing-playground.com, www.openstreetmap.org, www.w3.org

Source & flagged code

4 flagged

dist/index-sarAILcU.jsView file

Lines 305-345javascript

305function R(e) {

306 return e.hasAttribute("contenteditable") && (e.getAttribute("contenteditable") == "true" || e.getAttribute("contenteditable") == "");

307}

308function de(e) {

309 const t = un(e);

310 return t && (t.closest('[contenteditable=""]') || t.closest('[contenteditable="true"]'));

311}

312function un(e) {

313 return e.nodeType === 1 ? e : e.parentElement;

314}

315var gt = /* @__PURE__ */ function(e) {

316 return e.button = "button", e.color = "color", e.file = "file", e.image = "image", e.reset = "reset", e.submit = "submit", e.checkbox = "checkbox", e.radio = "radio", e;

317}(gt || {});

318function vt(e) {

319 return a(e, "button") || a(e, "input") && e.type in gt;

320}

321function z(e) {

322 return mt(e) && !e.readOnly || R(e);

323}

324var yt = /* @__PURE__ */ function(e) {

325 return e.text = "text", e.date = "date", e["datetime-local"] = "datetime-local", e.email = "email", e.month = "month", e.number = "number", e.password = "password", e.search = "search", e.tel = "tel", e.time = "time", e.url = "url", e.week

326}(yt || {});

327function mt(e) {

328 return a(e, "textarea") || a(e, "input") && e.type in yt;

329}

330function k(e) {

331 return Et(e) && mt(e);

332}

333function cn(e) {

334 return Et(e) && vt(e);

335}

336function Et(e) {

337 return e.nodeType === 1;

338}

339function dn(e) {

340 const t = e.ownerDocument.getSelection();

341 if (t != null && t.focusNode && k(e)) {

342 const i = de(t.focusNode);

343 if (i) {

344 if (!t.isCollapsed) {

345 var n;

Lines 438-478javascript

438function vn(e) {

439 const t = e.replace(/\D/g, "");

440 if (t.length < 2)

441 return e;

442 const n

dist/index-DI17hZPH.jsView file

961d.push("a" + (++v).toString(36)); L962: return new Function("fn", "return function (" + d.join(", ") + ") { return fn.apply(this, arguments); };"); L963: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index-DI17hZPH.jsView on unpkg · L961

dist/index-BoenezD8.cjsView file

Lines 1-8javascript

1"use strict";const H=require("./react.esm-DGuy6Rn3.cjs");function a(e,t,n){return e.namespaceURI&&e.namespaceURI!=="http://www.w3.org/1999/xhtml"||(t=Array.isArray(t)?t:[t],!t.includes(e.tagName.

Source & flagged code

4 flagged · loading source

dist/index-sarAILcU.jsView file

325patternName = generic_password severity = medium line = 325 matchedText = return e..., e;

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index-sarAILcU.jsView on unpkg · L325

458patternName = generic_password severity = medium line = 458 matchedText = return e..., e;

Medium

Secret Pattern

Hardcoded password in dist/index-sarAILcU.js

dist/index-sarAILcU.jsView on unpkg · L458

dist/index-DI17hZPH.jsView file

961d.push("a" + (++v).toString(36)); L962: return new Function("fn", "return function (" + d.join(", ") + ") { return fn.apply(this, arguments); };"); L963: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index-DI17hZPH.jsView on unpkg · L961

dist/index-BoenezD8.cjsView file

1patternName = generic_password severity = medium line = 1 matchedText = "use str...r"?`

Medium

Secret Pattern

Hardcoded password in dist/index-BoenezD8.cjs

dist/index-BoenezD8.cjsView on unpkg · L1

Findings

5 Medium6 Low

MediumSecret Patterndist/index-sarAILcU.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/index-sarAILcU.js

MediumSecret Patterndist/index-BoenezD8.cjs

LowScripts Present

LowEvaldist/index-DI17hZPH.js

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

4 flagged

dist/index-sarAILcU.jsView file

Lines 305-345javascript

305function R(e) {

306 return e.hasAttribute("contenteditable") && (e.getAttribute("contenteditable") == "true" || e.getAttribute("contenteditable") == "");

307}

308function de(e) {

309 const t = un(e);

310 return t && (t.closest('[contenteditable=""]') || t.closest('[contenteditable="true"]'));

311}

312function un(e) {

313 return e.nodeType === 1 ? e : e.parentElement;

314}

315var gt = /* @__PURE__ */ function(e) {

316 return e.button = "button", e.color = "color", e.file = "file", e.image = "image", e.reset = "reset", e.submit = "submit", e.checkbox = "checkbox", e.radio = "radio", e;

317}(gt || {});

318function vt(e) {

319 return a(e, "button") || a(e, "input") && e.type in gt;

320}

321function z(e) {

322 return mt(e) && !e.readOnly || R(e);

323}

324var yt = /* @__PURE__ */ function(e) {

326}(yt || {});

327function mt(e) {

328 return a(e, "textarea") || a(e, "input") && e.type in yt;

329}

330function k(e) {

331 return Et(e) && mt(e);

332}

333function cn(e) {

334 return Et(e) && vt(e);

335}

336function Et(e) {

337 return e.nodeType === 1;

338}

339function dn(e) {

340 const t = e.ownerDocument.getSelection();

341 if (t != null && t.focusNode && k(e)) {

342 const i = de(t.focusNode);

343 if (i) {

344 if (!t.isCollapsed) {

345 var n;

Lines 438-478javascript

438function vn(e) {

439 const t = e.replace(/\D/g, "");

440 if (t.length < 2)

441 return e;

442 const n

dist/index-DI17hZPH.jsView file

961d.push("a" + (++v).toString(36)); L962: return new Function("fn", "return function (" + d.join(", ") + ") { return fn.apply(this, arguments); };"); L963: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index-DI17hZPH.jsView on unpkg · L961

dist/index-BoenezD8.cjsView file

Lines 1-8javascript

1"use strict";const H=require("./react.esm-DGuy6Rn3.cjs");function a(e,t,n){return e.namespaceURI&&e.namespaceURI!=="http://www.w3.org/1999/xhtml"||(t=Array.isArray(t)?t:[t],!t.includes(e.tagName.