registry / @uniformdev/mesh-sdk-react / 20.69.0

@uniformdev/mesh-sdk-react@20.69.0

Uniform Mesh Framework SDK for React

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcess

Supply chain

UrlStrings

Manifest

NoLicense

scanned 3 file(s), 778 KB of source, external domains: docs.uniform.app, linear.app, www.w3.org

Source & flagged code

1 flagged

package.jsonView file

Lines 15-55json

15 "require": "./dist/index.js"

16 },

17 "./tailwind": {

18 "import": {

19 "node": "./dist/tailwind/plugin.mjs"

20 },

21 "require": "./dist/tailwind/plugin.js"

22 }

23 },

24 "typesVersions": {

25 "*": {

26 "*": [

27 "./dist/index.d.ts"

28 ],

29 "tailwind": [

30 "./dist/tailwind/plugin.d.ts"

31 ]

32 }

33 },

34 "sideEffects": false,

35 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L35

36 "build": "run-s build:icons build:esm",

37 "build:esm": "tsup",

38 "build:icons": "svgr -d ./src/assets ./src/assets --typescript --icon",

39 "dev": "tsup --watch",

40 "clean": "rimraf dist",

41 "test": "vitest run",

42 "format": "prettier --write \"src/**/*.{js,ts,tsx}\"",

43 "apidocs-extract": "api-extractor run --local"

44 },

45 "dependencies": {

46 "@hello-pangea/dnd": "18.0.1",

47 "@hookform/resolvers": "^5.2.2",

48 "@lexical/clipboard": "0.39.0",

49 "@lexical/react": "0.39.0",

50 "@lexical/selection": "0.39.0",

51 "@lexical/utils": "0.39.0",

52 "@react-icons/all-files": "https://github.com/react-icons/react-icons/releases/download/v5.5.0/react-icons-all-files-5.5.0.tgz",

53 "@uniformdev/canvas": "20.69.0",

54 "@uniformdev/design-system": "20.69.0",

55 "@uniformdev/mesh-sdk": "20.69.0",

Source & flagged code

1 flagged · loading source

package.jsonView file

•Remote tarball dependency specs: @react-icons/all-files@https://github.com/react-icons/react-icons/releases/download/v5.5.0/react-icons-all-files-5.5.0.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

1 Medium3 Low

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowUrl Strings

LowNo License

Source & flagged code

1 flagged

package.jsonView file

Lines 15-55json

15 "require": "./dist/index.js"

16 },

17 "./tailwind": {

18 "import": {

19 "node": "./dist/tailwind/plugin.mjs"

20 },

21 "require": "./dist/tailwind/plugin.js"

22 }

23 },

24 "typesVersions": {

25 "*": {

26 "*": [

27 "./dist/index.d.ts"

28 ],

29 "tailwind": [

30 "./dist/tailwind/plugin.d.ts"

31 ]

32 }

33 },

34 "sideEffects": false,

35 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L35

36 "build": "run-s build:icons build:esm",

37 "build:esm": "tsup",

38 "build:icons": "svgr -d ./src/assets ./src/assets --typescript --icon",

39 "dev": "tsup --watch",

40 "clean": "rimraf dist",

41 "test": "vitest run",

42 "format": "prettier --write \"src/**/*.{js,ts,tsx}\"",

43 "apidocs-extract": "api-extractor run --local"

44 },

45 "dependencies": {

46 "@hello-pangea/dnd": "18.0.1",

47 "@hookform/resolvers": "^5.2.2",

48 "@lexical/clipboard": "0.39.0",

49 "@lexical/react": "0.39.0",

50 "@lexical/selection": "0.39.0",

51 "@lexical/utils": "0.39.0",

52 "@react-icons/all-files": "https://github.com/react-icons/react-icons/releases/download/v5.5.0/react-icons-all-files-5.5.0.tgz",

53 "@uniformdev/canvas": "20.69.0",

54 "@uniformdev/design-system": "20.69.0",

55 "@uniformdev/mesh-sdk": "20.69.0",