registry  /  @react-perfscope/react  /  1.0.0

@react-perfscope/react@1.0.0

React render collector for react-perfscope.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 27.3 KB of source

Source & flagged code

1 flagged · loading source
dist/index.cjsView file
381package = @react-perfscope/react; repositoryIdentity = react-perfscope; dependency = @react-perfscope/core L381: // src/leak-collector.ts L382: var import_core = require("@react-perfscope/core"); L383: var SAMPLE_INTERVAL_MS = 250;
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.cjsView on unpkg · L381

Findings

1 High1 Medium1 Low
HighCopied Package Dependency Bridgedist/index.cjs
MediumStructural Risk Force Deep Review
LowScripts Present