registry  /  @sjcrh/proteinpaint-client  /  2.197.0

@sjcrh/proteinpaint-client@2.197.0

a genomics visualization tool for exploring a cohort's genotype and phenotype data

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsEvalNetworkShell
Supply chain
HighEntropyStringsTelemetryUrlStrings
Manifest
NoLicense
scanned 387 file(s), 12.0 MB of source, external domains: api.gdc.cancer.gov, cdnjs.cloudflare.com, docs.google.com, doi.org, drive.google.com, en.wikipedia.org, feross.org, fontawesome.com, gatk.broadinstitute.org, gdc.cancer.gov, genome.ucsc.edu, github.com, global.stjude.org, groups.google.com, iiif.io, iquilezles.org, jsonlint.com, library.stanford.edu, mths.be, openseadragon.github.io, opensource.org, plus.google.com, portal.gdc.cancer.gov, proteinpaint.stjude.org, pubmed.ncbi.nlm.nih.gov, schemas.microsoft.com, smart.embl.de, storage.googleapis.com, tc39.es, tile.openstreetmap.org, touchlab.mit.edu, viewer.imaging.datacommons.cancer.gov, webpjs.appspot.com, www.dropbox.com, www.ebi.ac.uk, www.ellak.gr, www.gtexportal.org, www.magenta.gr, www.ncbi.nlm.nih.gov, www.opengis.net, www.stjude.org, www.w3.org

Source & flagged code

1 flagged · loading source
dist/chunk-4M22UIJQ.jsView file
1438try { L1439: cohort.dbexpression.tidy = new Function(...cohort.dbexpression.tidy); L1440: } catch (e) {
High
Eval

Package source references dynamic code evaluation.

dist/chunk-4M22UIJQ.jsView on unpkg · L1438

Findings

1 High2 Medium5 Low
HighEvaldist/chunk-4M22UIJQ.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License