registry / @jigowatts/jigowatts-ui / 2.3.1

@jigowatts/jigowatts-ui@2.3.1

開発に関する詳細なガイドラインと注意事項については、 [DEVELOPMENT.md](./DEVELOPMENT.md) を参照してください。エージェント向けのルールは [.cursorrules](./.cursorrules) に記載されています。

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEval

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 212 file(s), 3.33 MB of source, external domains: dequeuniversity.com, example.com, fb.me, github.com, html.spec.whatwg.org, jsperf.com, leafletjs.com, mths.be, react.dev, reactjs.org, testing-library.com, testing-playground.com, www.openstreetmap.org, www.w3.org

Source & flagged code

4 flagged

dist/index-sarAILcU.jsView file

Lines 305-345javascript

305function R(e) {

306 return e.hasAttribute("contenteditable") && (e.getAttribute("contenteditable") == "true" || e.getAttribute("contenteditable") == ""

Source & flagged code

4 flagged · loading source

dist/index-sarAILcU.jsView file

325patternName = generic_password severity = medium line = 325 matchedText = return e..., e;

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index-sarAILcU.jsView on unpkg · L325

458patternName = generic_password severity = medium line = 458 matchedText = return e..., e;

Medium

Secret Pattern

Hardcoded password in dist/index-sarAILcU.js

dist/index-sarAILcU.jsView on unpkg · L458

dist/index-DI17hZPH.jsView file

961d.push("a" + (++v).toString(36)); L962: return new Function("fn", "return function (" + d.join(", ") + ") { return fn.apply(this, arguments); };"); L963: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index-DI17hZPH.jsView on unpkg · L961

dist/index-BoenezD8.cjsView file

1patternName = generic_password severity = medium line = 1 matchedText = "use str...r"?`

Medium

Secret Pattern

Hardcoded password in dist/index-BoenezD8.cjs

dist/index-BoenezD8.cjsView on unpkg · L1

Findings

5 Medium6 Low

MediumSecret Patterndist/index-sarAILcU.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/index-sarAILcU.js

MediumSecret Patterndist/index-BoenezD8.cjs

LowScripts Present

LowEvaldist/index-DI17hZPH.js

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Lines 438-478javascript

438function vn(e) {

439 const t = e.replace(/\D/g, "");

440 if (t.length < 2)

441 return e;

442 const n = Te(t[0], 10), i = Te(t[1], 10);

443 if (n >= 3 || n === 2 && i >= 4) {

444 let r;

445 return n >= 3 ? r = 1 : r = 2, je(t, r);

446 }

447 return e.length === 2 ? e : je(t, 2);

448}

449function je(e, t) {

450 const n = e.slice(0, t), i = Math.min(Te(n, 10), 23), r = e.slice(t), o = Te(r, 10), s = Math.min(o, 59);

451 return `${i.toString().padStart(2, "0")}:${s.toString().padStart(2, "0")}`;

452}

453function kt(e, t) {

454 const n = e.cloneNode();

455 return n.value = t, n.value === t;

456}

457var Tt = /* @__PURE__ */ function(e) {

458 return e.email = "email", e.password = "password", e.search = "search", e.telephone = "telephone", e.text = "text", e.url = "url", e;

Medium

Secret Pattern

Hardcoded password in dist/index-sarAILcU.js

dist/index-sarAILcU.jsView on unpkg · L458

459}(Tt || {});

460function yn(e) {

461 var t;

462 const n = (t = e.getAttribute("maxlength")) !== null && t !== void 0 ? t : "";

463 return /^\d+$/.test(n) && Number(n) >= 0 ? Number(n) : void 0;

464}

465function mn(e) {

466 return a(e, "textarea") || a(e, "input") && e.type in Tt;

467}

468function Ct(e, t, n, i) {

469 if (me(e) && t + n >= 0 && t + n <= e.nodeValue.length)

470 return {

471 node: e,

472 offset: t + n

473 };

474 const r = He(e, t, n);

475 if (r) {

476 if (me(r))

477 return {

478 node: r,

dist/index-BoenezD8.cjsView file

Lines 1-8javascript

1"use strict";const H=require("./react.esm-DGuy6Rn3.cjs");function a(e,t,n){return e.namespaceURI&&e.namespaceURI!=="http://www.w3.org/1999/xhtml"||(t=Array.isArray(t)?t:[t],!t.includes(e.tagName.toLowerCase()))?!1:n?Object.entries(n).every(([i,r])=>e[i]===r):!0}function E(e){var t;if(qt(e)&&e.defaultView)return e.defaultView;if(!((t=e.ownerDocument)===null||t===void 0)&&t.defaultView)return e.ownerDocument.defaultView;throw new Error(`Could not determine window of node. Node was ${Yt(e)}`)}function qt(e){return e.nodeType===9}function Yt(e){return typeof e=="function"?`function ${e.name}`:e=== ...

Medium

Secret Pattern

Hardcoded password in dist/index-BoenezD8.cjs

dist/index-BoenezD8.cjsView on unpkg · L1

2`:e.key;return()=>J(n,t,r,i)}};const Fn=["button","color","file","image","reset","submit"],Bn=["email","month","password","search","tel","text","url","week"];U.keyup=(e,t,n)=>{var i;return(i=ze[e.key])===null||i===void 0?void 0:i.call(ze,e,t,n)};const ze={" ":(e,t,n)=>{if(vt(t))return()=>n.dispatchUIEvent(t,"click")}};U.paste=(e,t,n)=>{if(z(t))return()=>{var i;const r=(i=e.clipboardData)===null||i===void 0?void 0:i.getData("text");r&&J(n,t,r,"insertFromPaste")}};const Pt={auxclick:{EventType:"PointerEvent",defaultInit:{bubbles:!0,cancelable:!0,composed:!0}},beforeinput:{EventType:"InputEvent", ...

3`))}function gi(e){return e.reverse().map((t,n)=>["".padEnd(n),t.tagName,t.id&&`#${t.id}`,t.hasAttribute("data-testid")&&`(testId=${t.getAttribute("data-testid")})`,vi(t),e.length>1&&n

4`)}function vi(e){var t;let n;if(e.hasAttribute("aria-label"))n=e.getAttribute("aria-label");else if(e.hasAttribute("aria-labelledby")){var i,r;n=(r=e.ownerDocument.getElementById(e.getAttribute("aria-labelledby")))===null||r===void 0

5 See ${i==="pointer"?"https://testing-library.com/docs/user-event/pointer#pressing-a-button-or-touching-the-screen":"https://testing-library.com/docs/user-event/keyboard"}

6 for more information about how userEvent parses your input.`}function Ai(e,t){const n=[];do{const{type:r,descriptor:o,consumedLength:s,releasePrevious:u,releaseSelf:c=!0,repeat:d}=Bt(t,"keyboard");var i;const l=(i=e.find(f=>{if(r==="["){var p;return((p=f.code)===null||p===void 0?void 0:p.toLowerCase())===o.toLowerCase()}else if(r==="{"){var h;return((h=f.key)===null||h===void 0?void 0:h.toLowerCase())===o.toLowerCase()}return f.key===o}))!==null&&i!==void 0?i:{key:"Unknown",code:"Unknown",[r==="["?"code":"key"]:o};n.push({keyDef:l,releasePrevious:u,releaseSelf:c,repeat:d}),t=t.slice(s)}whi ...

7//# sourceMappingURL=index-BoenezD8.cjs.map

Long lines were clipped for display.