Static Scan Results
scanned 1h ago · by rust-scannerStatic analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
EnvironmentVars
Trivial
Source & flagged code
1 flagged · loading sourcedist/index.jsView file
1package = @layout-lib/react; repositoryIdentity = layout-lib; dependency = @layout-lib/core
L1: "use client";
L2: "use client";import{useEffect as i,useState as s}from"react";var p=()=>{try{return process.env.NODE_ENV!=="production"}catch{return!1}};function O({enabled:e=p(),container:r,...n}=...
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/index.jsView on unpkg · L1Findings
1 High2 Medium1 Low
HighCopied Package Dependency Bridgedist/index.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present