registry / @schukai/monster / 4.148.7

@schukai/monster@4.148.7

Monster is a simple library for creating fast, robust and lightweight websites.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 49 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

CopyleftLicense

scanned 384 file(s), 6.31 MB of source, external domains: 2ality.com, www.w3.org

Source & flagged code

43 flagged

source/components/form/register-wizard.mjsView file

Lines 100-140javascript

100 * @property {Object} register Register submit config

101 * @property {Object} consents Consent topics config

102 * @property {Object} actions Callback actions

103 */

104 get defaults() {

105 return Object.assign({}, super.defaults, {

106 templates: {

107 main: getTemplate(),

108 },

109 labels: getTranslations(),

110 features: {

111 autoCheckAvailability: false,

112 requireAvailability: true,

113 confirmPassword: false,

114 showAvailabilityMessage: true,

115 showBirthDate: false,

116 showNationality: false,

117 },

118 autocomplete: {

119 email: "email",

120 password: "new-password",

Medium

Secret Pattern

Package contains a possible secret pattern.

source/components/form/register-wizard.mjsView on unpkg · L120

121 passwordConfirm: "new-password",

122 firstName: "given-name",

123 lastName: "family-name",

124 birthDate: "bday",

125 nationality: "country-name",

126 street: "address-line1",

127 zip: "postal-code",

128 city: "address-level2",

129 country: "country",

130 },

131 requirements: {

132 email: true,

133 password: true,

134 passwordConfirm: false,

135 firstName: true,

136 lastName: true,

137 birthDate: false,

138 nationality: false,

139 address: {

140 street: true,

Lines 1955-1995javascript

1955 const locale = getLocaleOfDocument();

1956 switch (locale.language) {

1957 case "de":

1958 return {

1959 stepEmail: "E-Mail",

1960 stepPassword:

Lines 2023-2063javascript

2023 messageRegisterNotConfigured: "Registrierung ist nicht konfiguriert.",

2024 };

2025 case "es":

2026 return {

2027 stepEmail: "Correo",

2028 stepPassword: "Contrasena",

2029 stepProfile: "Perfil"

Lines 2225-2265javascript

2225 messageRegisterNotConfigured: "रजिस्ट्रेशन कॉन्फ़िगर नहीं है।",

2226 };

2227 case "bn":

2228 return {

2229 stepEmail: "ইমেল",

2230 stepPassword: "পাসওয়ার্ড",

2231 stepProfile: "প্রোফাইল"

Lines 2627-2667javascript

2627 messageRegisterNotConfigured: "नोंदणी सेट नाही.",

2628 };

2629 case "fr":

2630 return {

2631 stepEmail: "Email",

2632 stepPassword: "Mot de passe",

2633 stepProfile: "Profil"

Lines 2694-2734javascript

2694 messageRegisterNotConfigured: "Inscription non configuree.",

2695 };

2696 case "it":

2697 return {

2698 stepEmail: "Email",

2699 stepPassword: "Password",

2700 stepProfile: "Profilo"

Lines 2761-2801javascript

2761 messageRegisterNotConfigured: "Registrazione non configurata.",

2762 };

2763 case "nl":

2764 return {

2765 stepEmail: "Email",

2766 stepPassword: "Wachtwoord",

2767 stepProfile: "Profiel"

2848patternName = generic_password severity = medium line = 2848 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2848

2982patternName = generic_password severity = medium line = 2982 matchedText = password...de",

Medium

Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2982

3116patternName = generic_password severity = medium line = 3116 matchedText = password...na",

Medium

Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L3116

3250patternName = generic_password severity = medium line = 3250 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L3250

source/components/form/select.mjsView file

Lines 1332-1372javascript

1332 let sort = mappingOptions?.["sort"];

1333

1334 let flag = false;

1335 if (labelTemplate === "") {

1336

test/web/tests.jsView file

•path = test/web/tests.js kind = payload_in_excluded_dir sizeBytes = 13021571 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/web/tests.jsView on unpkg

•path = test/web/tests.js kind = oversized_source_file sizeBytes = 13021571 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

test/web/tests.jsView on unpkg

source/components/form/login.mjsView file

377patternName = generic_password severity = medium line = 377 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L377

613patternName = generic_password severity = medium line = 613 matchedText = password...rt",

Medium

Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L613

646patternName = generic_password severity = medium line = 646 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L646

923patternName = generic_password severity = medium line = 923 matchedText = password...se",

Medium

Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjs

source/components/form/credential-button.mjsView file

149patternName = generic_password severity = medium line = 149 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L149

156patternName = generic_password severity = medium line = 156 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L156

442patternName = generic_password severity = medium line = 442 matchedText = password...rt",

Medium

Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L442

456patternName = generic_password severity = medium line = 456 matchedText = password...ña",

Medium

Source & flagged code

43 flagged · loading source

source/components/form/register-wizard.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code