registry  /  @plumile/ui  /  0.1.192

@plumile/ui@0.1.192

Shared React UI primitives and theme for Kronex applications

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcess
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 643 file(s), 1.33 MB of source, external domains: www.w3.org
Oversized source lightweight scan
lib/esm/theme/sprinkles.css.js2.12 MB file, sampled 256 KB
No sampled risky behavior triggered.

Source & flagged code

5 flagged · loading source
lib/esm/i18n/locales/fr/ui.jsView file
14patternName = generic_password severity = medium line = 14 matchedText = password...sse"
Medium
Secret Pattern

Package contains a possible secret pattern.

lib/esm/i18n/locales/fr/ui.jsView on unpkg · L14
18patternName = generic_password severity = medium line = 18 matchedText = password...sse"
Medium
Secret Pattern

Hardcoded password in lib/esm/i18n/locales/fr/ui.js

lib/esm/i18n/locales/fr/ui.jsView on unpkg · L18
lib/esm/theme/sprinkles.css.jsView file
path = lib/esm/theme/sprinkles.css.js kind = oversized_source_file sizeBytes = 2224927 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/esm/theme/sprinkles.css.jsView on unpkg
lib/esm/i18n/locales/en/ui.jsView file
14patternName = generic_password severity = medium line = 14 matchedText = passwo...
Medium
Secret Pattern

Hardcoded password in lib/esm/i18n/locales/en/ui.js

lib/esm/i18n/locales/en/ui.jsView on unpkg · L14
18patternName = generic_password severity = medium line = 18 matchedText = password...ord"
Medium
Secret Pattern

Hardcoded password in lib/esm/i18n/locales/en/ui.js

lib/esm/i18n/locales/en/ui.jsView on unpkg · L18

Findings

1 High5 Medium3 Low
HighOversized Source Filelib/esm/theme/sprinkles.css.js
MediumSecret Patternlib/esm/i18n/locales/fr/ui.js
MediumStructural Risk Force Deep Review
MediumSecret Patternlib/esm/i18n/locales/fr/ui.js
MediumSecret Patternlib/esm/i18n/locales/en/ui.js
MediumSecret Patternlib/esm/i18n/locales/en/ui.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings