registry / @redhat-cloud-services/frontend-components-config-utilities / 4.13.1

@redhat-cloud-services/frontend-components-config-utilities@4.13.1

Utilities for shared config used in Red Hat Cloud Services project.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 24 file(s), 88.4 KB of source, external domains: ci.cloud.redhat.com, github.com, squid.corp.redhat.com

Source & flagged code

2 flagged

federated-modules.jsView file

Lines 30-70javascript

30 var ownKeys = function(o) {

31 ownKeys = Object.getOwnPropertyNames || function (o) {

32 var ar = [];

33 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

34 return ar;

35 };

36 return ownKeys(o);

37 };

38 return function (mod) {

39 if (mod && mod.__esModule) return mod;

40 var result = {};

41 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

42 __setModuleDefault(result, mod);

43 return result;

44 };

45})();

46var __importDefault = (this && this.__importDefault) || function (mod) {

47 return (mod && mod.__esModule) ? mod : { "default": mod };

48};

49Object.defineProperty(exports, "__esModule", { value: true });

50exports.mergeSharedDeps = exports.applyImpliedDeps = exports.createSharedDeps = exports.omitHostConsumedShared = exports.bundleChromeSharedLocally = exports.createIncludes = void 0;

51var path_1 = require("path");

52var dynamic_plugin_sdk_webpack_1 = require("@openshift/dynamic-plugin-sdk-webpack");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

federated-modules.jsView on unpkg · L50

53var jsVarName_1 = __importDefault(require("./jsVarName"));

54var fec_logger_1 = __importStar(require("./fec-logger"));

55var resolve_shared_import_1 = require("./resolve-shared-import");

56var defaultPluginMetaDataJSON = {

57 version: '1.0.0',

58 extensions: [],

59};

60var createIncludes = function () { return ({

61 chromeProvided: {

62 react: { singleton: true, eager: false, import: false },

63 'react-dom': { singleton: true, eager: false, import: false },

64 'react/jsx-runtime': { singleton: true, eager: false, import: false },

65 'react/jsx-dev-runtime': { singleton: true, eager: false },

66 'react-intl': { singleton: true, eager: false, import: false },

67 'react-router-dom': { singleton: true, eager: false, import: false },

68 '@openshift/dynamic-plugin-sdk': { singleton: true, eager: false, import: false },

69 '@patternfly/quickstarts': { singleton: true, eager: false, import: false },

70 '@redhat-cloud-services/chrome': { singleton: true, import: false },

proxy.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @redhat-cloud-services/frontend-components-config-utilities@4.13.0 matchedIdentity = npm:[redacted]:4.13.0 similarity = 0.880 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

proxy.jsView on unpkg

Source & flagged code

2 flagged · loading source

federated-modules.jsView file

50exports.mergeSharedDeps = exports.applyImpliedDeps = exports.createSharedDeps = exports.omitHostConsumedShared = exports.bundleChromeSharedLocally = exports.createIncludes = void 0... L51: var path_1 = require("path"); L52: var dynamic_plugin_sdk_webpack_1 = require("@openshift/dynamic-plugin-sdk-webpack");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

federated-modules.jsView on unpkg · L50

proxy.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

proxy.jsView on unpkg

Findings

1 High3 Medium4 Low

HighPrevious Version Dangerous Deltaproxy.js

MediumDynamic Requirefederated-modules.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @redhat-cloud-services/frontend-components-config-utilities@4.13.1.

See all versions of @redhat-cloud-services/frontend-components-config-utilities for other recorded verdicts.

Review the evidence and your use of @redhat-cloud-services/frontend-components-config-utilities@4.13.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-22 14:01:32.652Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @redhat-cloud-services

Related packages

More from @redhat-cloud-services

Source & flagged code