registry / @togo-framework/ui-admin / 0.1.0

@togo-framework/ui-admin@0.1.0

togo UI kit — admin shell components: user/mail management, profile view, provider backend switcher. Depends on @togo-framework/ui-core.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 52.1 KB of source

Source & flagged code

4 flagged

dist/index.jsView file

Lines 1-35javascript

1// src/components/admin/UserManagementTable.tsx

2import { Users } from "lucide-react";

4// src/components/admin/strings.ts

5var EN = {

6 cancel: "Cancel",

7 create: "Create",

8 done: "Done",

9 saveChanges: "Save changes",

10 optional: "optional",

11 addUser: "Add user",

12 addUserDesc: "Create a new account",

13 editUser: "Edit user",

14 email: "Email",

15 password: "Password",

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L15

16 roles: "Roles",

17 permissions: "Permissions",

18 rolesPlaceholder: "admin, member\u2026",

19 emailRequired: "Email is required",

20 edit: "Edit",

21 impersonate: "Impersonate",

22 resetPassword: "Reset password",

23 sendMagicLink: "Send magic link",

24 delete: "Delete",

25 actions: "Actions",

26 newPassword: "New password",

27 setPassword: "Set password",

28 sendResetLink: "Send reset link",

29 resetBlankHint: "Leave blank to email a reset link",

30 passwordResetLink: "Password reset link",

31 magicSignInLink: "Magic sign-in link",

32 emailedToUser: "The link was emailed to the user.",

33 shareSingleUse: "Share this single-use link:",

34 noLinkReturned: "No link was returned.",

35 copy: "Copy",

Lines 49-89javascript

49 port: "Port",

50 username: "Username",

51 fromAddress: "From address",

52 useTls: "Use TLS/SSL",

53 sendTestTo: "Send test email to",

54 sendTest: "Send test",

55 enterRecipient: "Enter a recipient"

Lines 840-904javascript

840import * as React from "react";

841import { ShieldCheck, Monitor, LogOut, User, KeyRound as KeyRound2, Camera, Check } from "lucide-react";

842import { cn as cn5, Avatar as Avatar2, AvatarFallback as AvatarFallback2, AvatarImage, Card as Card3, CardContent as CardContent3, Button as Button4, Input as Input4, Label as Label3, Switch as Switch2, Separator, StatusBadge } from

Source & flagged code

4 flagged · loading source

dist/index.jsView file

69patternName = generic_password severity = medium line = 69 matchedText = password...31",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L69

15patternName = generic_password severity = medium line = 15 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L15

860patternName = generic_password severity = medium line = 860 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L860

884patternName = generic_password severity = medium line = 884 matchedText = password...31",

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L884

Findings

4 Medium3 Low

MediumSecret Patterndist/index.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

4 flagged

dist/index.jsView file

Lines 1-35javascript

1// src/components/admin/UserManagementTable.tsx

2import { Users } from "lucide-react";

4// src/components/admin/strings.ts

5var EN = {

6 cancel: "Cancel",

7 create: "Create",

8 done: "Done",

9 saveChanges: "Save changes",

10 optional: "optional",

11 addUser: "Add user",

12 addUserDesc: "Create a new account",

13 editUser: "Edit user",

14 email: "Email",

15 password: "Password",

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L15

16 roles: "Roles",

17 permissions: "Permissions",

18 rolesPlaceholder: "admin, member\u2026",

19 emailRequired: "Email is required",

20 edit: "Edit",

21 impersonate: "Impersonate",

22 resetPassword: "Reset password",

23 sendMagicLink: "Send magic link",

24 delete: "Delete",

25 actions: "Actions",

26 newPassword: "New password",

27 setPassword: "Set password",

28 sendResetLink: "Send reset link",

29 resetBlankHint: "Leave blank to email a reset link",

30 passwordResetLink: "Password reset link",

31 magicSignInLink: "Magic sign-in link",

32 emailedToUser: "The link was emailed to the user.",

33 shareSingleUse: "Share this single-use link:",

34 noLinkReturned: "No link was returned.",

35 copy: "Copy",

Lines 49-89javascript

49 port: "Port",

50 username: "Username",

51 fromAddress: "From address",

52 useTls: "Use TLS/SSL",

53 sendTestTo: "Send test email to",

54 sendTest: "Send test",

55 enterRecipient: "Enter a recipient"

Lines 840-904javascript

840import * as React from "react";

841import { ShieldCheck, Monitor, LogOut, User, KeyRound as KeyRound2, Camera, Check } from "lucide-react";