registry / @uipath/apollo-wind / 2.47.1

@uipath/apollo-wind@2.47.1

UiPath wind design system - A Tailwind CSS based React component library

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEvalNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 307 file(s), 2.22 MB of source, external domains: www.w3.org

Source & flagged code

2 flagged

dist/components/forms/data-fetcher.jsView file

Lines 62-102javascript

62 if (cached) return cached;

63 try {

64 const response = await DataFetcher.adapter.fetch({

65 url,

66 method,

67 params,

68 body: 'POST' === method ? params : void 0

69 });

70 if (!response.ok) throw new Error(`HTTP error! status: ${response.status}`);

71 let data = response.data;

72 if ('transform' in source && source.transform) data = DataFetcher.applyTransform(source.transform, data, formValues);

73 DataFetcher.setCache(cacheKey, data);

74 return data;

75 } catch (error) {

76 console.error('Data fetch error:', error);

77 throw error;

78 }

79 }

80 static fetchComputed(source, formValues) {

81 const dependencyValues = source.dependency.map((dep)=>get(formValues, dep));

82 try {

83 const computeFn = new Function(...source.dependency, `return ${source.compute}`);

84 return computeFn(...dependencyValues);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/components/forms/data-fetcher.jsView on unpkg · L82

85 } catch (error) {

86 console.error('Computed value error:', error);

87 return;

88 }

89 }

90 static resolveParams(params, formValues) {

91 const resolved = {};

92 for (const [key, value] of Object.entries(params))if ('string' == typeof value && value.startsWith('$')) {

93 const fieldPath = value.slice(1);

94 resolved[key] = get(formValues, fieldPath);

95 } else resolved[key] = value;

96 return resolved;

97 }

98 static applyTransform(transform, data, formValues) {

99 try {

100 const transformFn = new Function('data', 'formValues', `return ${transform}`);

101 return transformFn(data, formValues);

102 } catch (error) {

dist/styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/styles.cssView on unpkg

Source & flagged code

2 flagged · loading source

dist/components/forms/data-fetcher.jsView file

82try { L83: const computeFn = new Function(...source.dependency, `return ${source.compute}`); L84: return computeFn(...dependencyValues);

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code