registry / @vention/machine-apps-components / 1.12.8

@vention/machine-apps-components@1.12.8

Reusable components for machine applications.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 370 KB of source, external domains: bugs.chromium.org, developer.mozilla.org, digital-twin.vention.foo, github.com, pastebin.com, stackoverflow.com, tc39.es, url.spec.whatwg.org

Source & flagged code

1 flagged

index.esm.jsView file

Lines 4-44javascript

4import { initReactI18next, useTranslation } from 'react-i18next';

5import LanguageDetector from 'i18next-browser-languagedetector';

6import dayjs from 'dayjs';

7import utc from 'dayjs/plugin/utc';

8import timezone from 'dayjs/plugin/timezone';

9import 'dayjs/locale/en';

10import 'dayjs/locale/fr';

11import 'dayjs/locale/de';

12import 'dayjs/locale/es';

13import { Box, useTheme, Typography, Button, InputAdornment, IconButton, TableContainer, Paper, Table, TableHead, TableRow, TableCell, TableBody, List, ListItem, Dialog, DialogTitle, DialogContent, DialogActions, CircularProgress, Alert, LinearProgress } from '@mui/material';

14import { VentionSelect, VentionModalBase, VentionIcon, VentionTextInput, COLORS, VentionButton, VentionStatusIndicator, VentionSpinner, VentionAlert, VentionDropZone, VentionUploadFile, VentionIconButton } from '@vention/machine-ui';

15import { tss } from 'tss-react/mui';

16import { useLocation, useNavigate } from 'react-router-dom';

17import { useMqttSubscription } from '@vention/machine-logic-ui-sdk';

19var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};

21var check = function (it) {

22 return it && it.Math === Math && it;

23};

25// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028

26var globalThis_1 =

27 // eslint-disable-next-line es/no-global-this -- safe

28 check(typeof globalThis == 'object' && globalThis) ||

29 check(typeof window == 'object' && window) ||

30 // eslint-disable-next-line no-restricted-globals -- safe

31 check(typeof self == 'object' && self) ||

32 check(typeof commonjsGlobal == 'object' && commonjsGlobal) ||

33 check(typeof commonjsGlobal == 'object' && commonjsGlobal) ||

34 // eslint-disable-next-line no-new-func -- fallback

35 (function () { return this; })() || Function('return this')();

37var objectGetOwnPropertyDescriptor = {};

39var fails$s = function (exec) {

40 try {

41 return !!exec();

42 } catch (error) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.esm.jsView on unpkg · L24

43 return true;

44 }

Source & flagged code

1 flagged · loading source

index.esm.jsView file

24L25: // https://github.com/zloirock/core-js/issues/86#issuecomment-115759028 L26: var globalThis_1 = ... L40: try { L41: return !!exec(); L42: } catch (error) { ... L1083: var NullProtoObjectViaActiveX = function (activeXDocument) { L1084: activeXDocument.write(scriptTag('')); L1085: activeXDocument.close(); ... L2574: } else { L2575: const detected = Intl.DateTimeFormat().resolvedOptions().timeZone; L2576: dayjsWithTz.tz.setDefault(detected);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.esm.jsView on unpkg · L24

Findings

1 High2 Medium2 Low

HighSandbox Evasion Gated Capabilityindex.esm.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

index.esm.jsView file

Lines 4-44javascript

4import { initReactI18next, useTranslation } from 'react-i18next';

5import LanguageDetector from 'i18next-browser-languagedetector';

6import dayjs from 'dayjs';

7import utc from 'dayjs/plugin/utc';

8import timezone from 'dayjs/plugin/timezone';

9import 'dayjs/locale/en';

10import 'dayjs/locale/fr';

11import 'dayjs/locale/de';

12import 'dayjs/locale/es';

15import { tss } from 'tss-react/mui';

16import { useLocation, useNavigate } from 'react-router-dom';

17import { useMqttSubscription } from '@vention/machine-logic-ui-sdk';

19var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};

21var check = function (it) {

22 return it && it.Math === Math && it;

23};

25// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028

26var globalThis_1 =

27 // eslint-disable-next-line es/no-global-this -- safe

28 check(typeof globalThis == 'object' && globalThis) ||

29 check(typeof window == 'object' && window) ||

30 // eslint-disable-next-line no-restricted-globals -- safe

31 check(typeof self == 'object' && self) ||

32 check(typeof commonjsGlobal == 'object' && commonjsGlobal) ||

33 check(typeof commonjsGlobal == 'object' && commonjsGlobal) ||

34 // eslint-disable-next-line no-new-func -- fallback

35 (function () { return this; })() || Function('return this')();

37var objectGetOwnPropertyDescriptor = {};

39var fails$s = function (exec) {

40 try {

41 return !!exec();

42 } catch (error) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

index.esm.jsView on unpkg · L24

43 return true;

44 }