registry / @orangelogic/design-system / 2.120.0

@orangelogic/design-system@2.120.0

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

Manifest

NoLicense

scanned 274 file(s), 11.6 MB of source, external domains: aka.ms, cortex.orangelogic.com, datatracker.ietf.org, design-system.orangelogic.com, developer.mozilla.org, docs.oasis-open.org, dom.spec.whatwg.org, downloads.orangelogic.com, dpdb.webvr.rocks, drafts.csswg.org, echarts.apache.org, en.wikipedia.org, example.com, fontawesome.io, git.io, github.com, gsap.com, html.spec.whatwg.org, learn.microsoft.com, local.orangelogic.com, markerjs.com, openoffice.org, purl.oclc.org, purl.org, react.dev, reactjs.org, schemas.microsoft.com, schemas.openxmlformats.org, sheetjs.com, sheetjs.openxmlformats.org, tools.ietf.org, vjs.zencdn.net, webvr.info, www.amcharts.com, www.google.com, www.iana.org, www.w3.org

Oversized source lightweight scan

library/chunks/document-viewer.B5VtBEEP.js2.38 MB file, sampled 256 KB

NetworkEvalHighEntropyStringsUrlStringsgithub.comwww.w3.org

library/chunks/pdfmake.Bs7cMDH0.js2.33 MB file, sampled 256 KB

FilesystemChildProcessEvalShellHighEntropyStrings

library/components/types.js6.56 MB file, sampled 256 KB

NetworkChildProcessEnvironmentVarsUrlStringsdownloads.orangelogic.com

Source & flagged code

4 flagged

library/chunks/i18n.DDj5y9px.jsView file

Lines 784-824javascript

784 orderedList: "Ordered list",

785 outdent: "Outdent",

786 overflow: "Overflow",

787 overflowBehavior: "Overflow behavior",

788 overlay: "Overlay",

789 padding: "Padding",

790 paddingBottom: "Padding Bottom",

791 paddingLeft: "Padding Left",

792 paddingRight: "Padding Right",

793 paddingTop: "Padding Top",

794 paddings: "Paddings",

795 page: "Page",

796 pageTitle: "Page title",

797 pagination: "Pagination",

798 palette: "Palette",

799 panelTitle: "Panel title",

800 pantoneMatchingSystemName: "Pantone matching system name",

801 paragraph: "Paragraph",

802 paragraphSpacing: "Paragraph spacing",

803 parameters: "Parameters",

804 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

library/chunks/i18n.DDj5y9px.jsView on unpkg · L804

805 passwordEmpty: "Password Empty",

806 paste: "Paste",

807 pasteAsPlainText: "Paste as text",

808 pause: "Pause",

809 pauseAll: "Pause All",

810 pauseTime: "Pause Time",

811 paused: "Paused",

812 pendingChangesSaveReminder: "Pending changes must be saved to export",

813 pin: "Pin",

814 pinFirstCard: "Pin first card",

815 pinFirstCardHelpText: "Makes the first card double size. Only applies if 2 or more rows",

816 pins: "Pins",

817 pitchWithUnit: (e) => e ? `Pitch (${e})` : "Pitch",

818 pixels: "Pixels",

819 placeholder: "Placeholder",

820 play: "Play",

821 pleaseEnterAValidUrl: "Please enter a valid URL.",

822 pleaseSelectAnAsset: "Please select an asset",

823 popOut: "Pop-out",

824 position: "Position",

library/components/e-chart.jsView file

24348function KH(r) { L24349: return X(r) ? typeof JSON < "u" && JSON.parse ? JSON.parse(r) : new Function("return (" + r + ");")() : r; L24350: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

library/components/e-chart.jsView on unpkg · L24348

library/chunks/exporting.B3VErmmW.jsView file

Lines 1-26javascript

1import { E as F, a7 as V, z as O, _ as f, e as S, a8 as H, a9 as z, aa as D, a as W, ab as N, f as U, ac as x, ad as I, ae as J, M as q, s as G, c as w, g as K, af as j, ag

library/chunks/pdfmake.Bs7cMDH0.jsView file

•path = library/chunks/pdfmake.Bs7cMDH0.js kind = oversized_source_file sizeBytes = 2442500 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

library/chunks/pdfmake.Bs7cMDH0.jsView on unpkg

Source & flagged code

4 flagged · loading source

library/chunks/i18n.DDj5y9px.jsView file

804patternName = generic_password severity = medium line = 804 matchedText = password...rd",

Medium

Secret Pattern

Package contains a possible secret pattern.

library/chunks/i18n.DDj5y9px.jsView on unpkg · L804

library/components/e-chart.jsView file

24348function KH(r) { L24349: return X(r) ? typeof JSON < "u" && JSON.parse ? JSON.parse(r) : new Function("return (" + r + ");")() : r; L24350: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

library/components/e-chart.jsView on unpkg · L24348

library/chunks/exporting.B3VErmmW.jsView file

6let h = yield Promise.all([ L7: import( L8: /* webpackChunkName: "pdfmake" */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

library/chunks/exporting.B3VErmmW.jsView on unpkg · L6

library/chunks/pdfmake.Bs7cMDH0.jsView file

•path = library/chunks/pdfmake.Bs7cMDH0.js kind = oversized_source_file sizeBytes = 2442500 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

library/chunks/pdfmake.Bs7cMDH0.jsView on unpkg

Findings

1 High5 Medium7 Low

HighOversized Source Filelibrary/chunks/pdfmake.Bs7cMDH0.js

MediumSecret Patternlibrary/chunks/i18n.DDj5y9px.js

MediumDynamic Requirelibrary/chunks/exporting.B3VErmmW.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvallibrary/components/e-chart.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

library/chunks/i18n.DDj5y9px.jsView file

Lines 784-824javascript

784 orderedList: "Ordered list",

785 outdent: "Outdent",

786 overflow: "Overflow",

787 overflowBehavior: "Overflow behavior",

788 overlay: "Overlay",

789 padding: "Padding",

790 paddingBottom: "Padding Bottom",

791 paddingLeft: "Padding Left",

792 paddingRight: "Padding Right",

793 paddingTop: "Padding Top",

794 paddings: "Paddings",

795 page: "Page",

796 pageTitle: "Page title",

797 pagination: "Pagination",

798 palette: "Palette",

799 panelTitle: "Panel title",

800 pantoneMatchingSystemName: "Pantone matching system name",

801 paragraph: "Paragraph",

802 paragraphSpacing: "Paragraph spacing",

803 parameters: "Parameters",

804 password: "Password",

Medium

Secret Pattern

Package contains a possible secret pattern.

library/chunks/i18n.DDj5y9px.jsView on unpkg · L804

805 passwordEmpty: "Password Empty",

806 paste: "Paste",

807 pasteAsPlainText: "Paste as text",

808 pause: "Pause",

809 pauseAll: "Pause All",

810 pauseTime: "Pause Time",

811 paused: "Paused",

812 pendingChangesSaveReminder: "Pending changes must be saved to export",

813 pin: "Pin",

814 pinFirstCard: "Pin first card",

815 pinFirstCardHelpText: "Makes the first card double size. Only applies if 2 or more rows",

816 pins: "Pins",

817 pitchWithUnit: (e) => e ? `Pitch (${e})` : "Pitch",

818 pixels: "Pixels",

819 placeholder: "Placeholder",

820 play: "Play",

821 pleaseEnterAValidUrl: "Please enter a valid URL.",

822 pleaseSelectAnAsset: "Please select an asset",

823 popOut: "Pop-out",

824 position: "Position",

library/components/e-chart.jsView file

24348function KH(r) { L24349: return X(r) ? typeof JSON < "u" && JSON.parse ? JSON.parse(r) : new Function("return (" + r + ");")() : r; L24350: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

library/components/e-chart.jsView on unpkg · L24348

library/chunks/exporting.B3VErmmW.jsView file

Lines 1-26javascript

1import { E as F, a7 as V, z as O, _ as f, e as S, a8 as H, a9 as z, aa as D, a as W, ab as N, f as U, ac as x, ad as I, ae as J, M as q, s as G, c as w, g as K, af as j, ag

library/chunks/pdfmake.Bs7cMDH0.jsView file

•path = library/chunks/pdfmake.Bs7cMDH0.js kind = oversized_source_file sizeBytes = 2442500 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

library/chunks/pdfmake.Bs7cMDH0.jsView on unpkg