registry / @testgorilla/tgo-ui / 8.17.3

@testgorilla/tgo-ui@8.17.3

Angular 19 UI component library providing reusable components for TestGorilla applications.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEvalFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 71 file(s), 5.14 MB of source, external domains: api.openai.com, fonts.googleapis.com, generativelanguage.googleapis.com, github.com, json-schema.org, raw.githubusercontent.com, spec.openapis.org, stackoverflow.com, tools.ietf.org, www.safaribooksonline.com, www.w3.org

Source & flagged code

2 flagged

fesm2022/testgorilla-tgo-ui-components-password-strength.mjsView file

Lines 65-105javascript

65 const passedCount = this.countPassed();

66 this.progressValue = Math.min(Math.max(passedCount * (100 / Object.keys(this.criteriaPassed).length), 1), 100);

67 this.validationCheck.emit(passedCount === Object.keys(this.criteriaPassed).length);

68 }

69 countPassed() {

70 let count = 0;

71 for (const key in this.criteriaPassed) {

72 if (Object.prototype.hasOwnProperty.call(this.criteriaPassed, key) && this.criteriaPassed[key]) {

73 count++;

74 }

75 }

76 return count;

77 }

78 get infoIcon() {

79 return this.applicationTheme === 'classic' ? 'Info' : 'Info-in-line';

80 }

81 get checkIcon() {

82 return this.applicationTheme === 'classic' ? 'Round-check' : 'Check-round-in-line';

83 }

84 static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.25", ngImport: i0, type: PasswordStrengthComponent, deps: [{ token: 'CANOPYUI_DEFAULT_APPLICATION_THEME', optional: true }], target: i0.ɵɵFactoryTarget.Component }); }

85 static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "20.3.25", type: PasswordStrengthComponent, isStandalone: false, selector: "ui-password-strength", inputs: { applicationTheme: "applicationTheme", password: "password" }, outputs: { validationCheck: "validationCheck" }, ngImport: i0, template: "<div class=\"criteria-container\">\n <div class=\"progress\">\n <ui-progress-bar\n [progress]=\"progressValue === 1 ? 0 : progressValue\"\n [applicationTheme]=\"applicationTheme\"\n ></ui-progress-bar>

86}

87i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.25", ngImport: i0, type: PasswordStrengthComponent, decorators: [{

88 type: Component,

89 args: [{ selector: 'ui-password-strength', standalone: false, template: "<div class=\"criteria-container\">\n <div class=\"progress\">\n <ui-progress-bar\n [progress]=\"progressValue === 1 ? 0 : progressValue\"\n [applicationTheme]=\"applicationTheme\"\n ></ui-progress-bar>\n </div>\n\n @for (criterion of criteria; track criterion) {\n <div\n class=\"criterion\"\n [ngClass]=\"{ passed: criteriaPassed[criterion.key], error: !criteriaPassed[criterion.key] && showError }\"\n >\n

90 }], ctorParameters: () => [{ type: undefined, decorators: [{

91 type: Optional

92 }, {

93 type: Inject,

94 args: ['CANOPYUI_DEFAULT_APPLICATION_THEME']

95 }] }], propDecorators: { applicationTheme: [{

96 type: Input

97 }], password: [{

98 type: Input

99 }], validationCheck: [{

100 type: Output

101 }] } });

102

103class PasswordStrengthComponentModule {

104 static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.25", ngImport: i0, type: PasswordStrengthComponentModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }

105 static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "20.3.25", ngImport: i0, type: PasswordStrengthComponentModule, declarations: [PasswordStrengthComponent], imports: [CommonModule, IconComponentModule, ProgressBarComponentModule, UiTranslatePipe], exports: [PasswordStrengthComponent] }); }

Long lines were clipped for display.

fesm2022/testgorilla-tgo-ui-components-core.mjsView file

10745this.regex = // eslint-disable-next-line no-eval L10746: eval(`/^${this.allowNegative ? '-?' : ''}${this.allowDecimal ? '((\\d+\\.?)|(\\.?))\\d*' : '\\d*'}$/g`); L10747: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

fesm2022/testgorilla-tgo-ui-components-core.mjsView on unpkg · L10745

Source & flagged code

2 flagged · loading source

fesm2022/testgorilla-tgo-ui-components-password-strength.mjsView file

85patternName = generic_password severity = medium line = 85 matchedText = static {...); }

Medium

Secret Pattern

Package contains a possible secret pattern.

fesm2022/testgorilla-tgo-ui-components-password-strength.mjsView on unpkg · L85

fesm2022/testgorilla-tgo-ui-components-core.mjsView file

10745this.regex = // eslint-disable-next-line no-eval L10746: eval(`/^${this.allowNegative ? '-?' : ''}${this.allowDecimal ? '((\\d+\\.?)|(\\.?))\\d*' : '\\d*'}$/g`); L10747: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

fesm2022/testgorilla-tgo-ui-components-core.mjsView on unpkg · L10745

Findings

1 Medium4 Low

MediumSecret Patternfesm2022/testgorilla-tgo-ui-components-password-strength.mjs

LowEvalfesm2022/testgorilla-tgo-ui-components-core.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

fesm2022/testgorilla-tgo-ui-components-password-strength.mjsView file

Lines 65-105javascript

65 const passedCount = this.countPassed();

66 this.progressValue = Math.min(Math.max(passedCount * (100 / Object.keys(this.criteriaPassed).length), 1), 100);

67 this.validationCheck.emit(passedCount === Object.keys(this.criteriaPassed).length);

68 }

69 countPassed() {

70 let count = 0;

71 for (const key in this.criteriaPassed) {

72 if (Object.prototype.hasOwnProperty.call(this.criteriaPassed, key) && this.criteriaPassed[key]) {

73 count++;

74 }

75 }

76 return count;

77 }

78 get infoIcon() {

79 return this.applicationTheme === 'classic' ? 'Info' : 'Info-in-line';

80 }

81 get checkIcon() {

82 return this.applicationTheme === 'classic' ? 'Round-check' : 'Check-round-in-line';

83 }

86}

87i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.25", ngImport: i0, type: PasswordStrengthComponent, decorators: [{

88 type: Component,

90 }], ctorParameters: () => [{ type: undefined, decorators: [{

91 type: Optional

92 }, {

93 type: Inject,

94 args: ['CANOPYUI_DEFAULT_APPLICATION_THEME']

95 }] }], propDecorators: { applicationTheme: [{

96 type: Input

97 }], password: [{

98 type: Input

99 }], validationCheck: [{

100 type: Output

101 }] } });

102

103class PasswordStrengthComponentModule {

Long lines were clipped for display.

fesm2022/testgorilla-tgo-ui-components-core.mjsView file

10745this.regex = // eslint-disable-next-line no-eval L10746: eval(`/^${this.allowNegative ? '-?' : ''}${this.allowDecimal ? '((\\d+\\.?)|(\\.?))\\d*' : '\\d*'}$/g`); L10747: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

fesm2022/testgorilla-tgo-ui-components-core.mjsView on unpkg · L10745