registry / @thoughtspot/visual-embed-sdk / 1.51.1
@thoughtspot/visual-embed-sdk@1.51.1
ThoughtSpot Embed SDK
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
GitDependency
Source & flagged code
2 flaggedcjs/package.jsonView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
cjs/package.jsonView on unpkgpackage.jsonView file
•devDependencies changed=typedoc-plugin-toc-group
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgFindings
1 Critical1 High2 Medium6 Low
CriticalManifest Confusionpackage.json
HighSemantic Analysis Limitedcjs/package.json
MediumNetwork
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @thoughtspot/visual-embed-sdk@1.51.1.
See all versions of @thoughtspot/visual-embed-sdk for other recorded verdicts.
- Review the evidence and your use of @thoughtspot/visual-embed-sdk@1.51.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.