registry  /  @rangojs/router  /  0.2.0

@rangojs/router@0.2.0

Django-inspired RSC router with composable URL patterns

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 408 file(s), 3.74 MB of source, external domains: api.cloudflare.com, build.invalid, github.com, rsc-dummy-host-1.com

Source & flagged code

2 flagged · loading source
dist/bin/rango.jsView file
1739package = @rangojs/router; repositoryIdentity = vite-rsc; dependency = @vitejs/plugin-rsc L1739: try { L1740: const rscMod = await import("@vitejs/plugin-rsc"); L1741: rsc = rscMod.default;
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/bin/rango.jsView on unpkg · L1739
533sourceFile: filePath, L534: detail: `import("${inc.moduleSpecifier}") resolved to no file` L535: });
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/bin/rango.jsView on unpkg · L533

Findings

1 High4 Medium5 Low
HighCopied Package Dependency Bridgedist/bin/rango.js
MediumDynamic Requiredist/bin/rango.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings