registry  /  @taprootio/espalier  /  2.2.0

@taprootio/espalier@2.2.0

Espalier — a themeable, accessible, framework-agnostic, enterprise-grade design system built on web standards and love.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetwork
Supply chain
HighEntropyStringsMinifiedTelemetryUrlStrings
Manifest
NoLicense
scanned 137 file(s), 627 KB of source, external domains: fonts.googleapis.com, www.w3.org

Source & flagged code

1 flagged · loading source
package.jsonView file
•scripts.postinstall = node ./notice.cjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Findings

1 High1 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumNetwork
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License