registry / @viviedu/applet-sdk / 0.58.0

@viviedu/applet-sdk@0.58.0

SDK for building Vivi Applets

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 137 KB of source

Source & flagged code

2 flagged

README.mdView file

Lines 67-89markdown

68We have autogenerated documentation here: <https://viviedu.github.io/vivi-applet-sdk/docs>.

71## Examples

73We have a few self-contained examples that implement a simple but complete chat application.

75- [React (using hooks)](https://github.com/viviedu/vivi-applet-sdk/tree/master/examples/chat-react-modern)

76- [React (using class components)](https://github.com/viviedu/vivi-applet-sdk/tree/master/examples/chat-react-classic)

79## Development

81If you're working on the SDK directly, it'll be necessary to be logged in to NPM so that the private `@vivinews/vivi-eslint-config` package can be installed.

83An easy way to do this is to create a `.npmrc` file in the root of the repo and paste the "shared install token" (from 1Password).

85Example:

86```

87//registry.npmjs.org/:_authToken=npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Critical

Critical Secret

Package contains a critical-looking secret pattern.

README.mdView on unpkg · L87

Critical

Secret Pattern

npm access token in README.md

README.mdView on unpkg · L87

88```

Source & flagged code

2 flagged · loading source

README.mdView file

87patternName = npm_token severity = critical line = 87 matchedText = //regist...xxxx

Critical

Critical Secret

Package contains a critical-looking secret pattern.

README.mdView on unpkg · L87

87patternName = npm_token severity = critical line = 87 matchedText = //regist...xxxx

Critical

Secret Pattern

npm access token in README.md

README.mdView on unpkg · L87

Findings

2 Critical1 Low

CriticalCritical SecretREADME.md

CriticalSecret PatternREADME.md

LowScripts Present

Source & flagged code

2 flagged

README.mdView file

Lines 67-89markdown

68We have autogenerated documentation here: <https://viviedu.github.io/vivi-applet-sdk/docs>.

71## Examples

73We have a few self-contained examples that implement a simple but complete chat application.

75- [React (using hooks)](https://github.com/viviedu/vivi-applet-sdk/tree/master/examples/chat-react-modern)

76- [React (using class components)](https://github.com/viviedu/vivi-applet-sdk/tree/master/examples/chat-react-classic)

79## Development

81If you're working on the SDK directly, it'll be necessary to be logged in to NPM so that the private `@vivinews/vivi-eslint-config` package can be installed.

83An easy way to do this is to create a `.npmrc` file in the root of the repo and paste the "shared install token" (from 1Password).

85Example:

86```

87//registry.npmjs.org/:_authToken=npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Critical

Critical Secret

Package contains a critical-looking secret pattern.

README.mdView on unpkg · L87

Critical

Secret Pattern

npm access token in README.md

README.mdView on unpkg · L87

88```