registry  /  @vtj/base  /  0.13.1

@vtj/base@0.13.1

VTJ 是一款基于 Vue3 + Typescript 的低代码页面可视化设计器。内置低代码引擎、渲染器和代码生成器，面向前端开发者，开箱即用。 无缝嵌入本地开发工程，不改变前端开发流程和编码习惯。

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystem
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 1.04 MB of source, external domains: developer.chrome.com, ecma-international.org, ejohn.org, en.wikipedia.org, github.com, lodash.com, mathiasbynens.be, mdn.io, mths.be, wonko.com, www.html5rocks.com

Source & flagged code

5 flagged · loading source
dist/index.cjsView file
12563patternName = private_key_rsa severity = critical line = 12563 matchedText = * -----B...----
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/index.cjsView on unpkg · L12563
12563patternName = private_key_rsa severity = critical line = 12563 matchedText = * -----B...----
Critical
Secret Pattern

RSA private key in dist/index.cjs

dist/index.cjsView on unpkg · L12563
14240patternName = private_key_rsa severity = critical line = 14240 matchedText = var key ...\n";
Critical
Secret Pattern

RSA private key in dist/index.cjs

dist/index.cjsView on unpkg · L14240
dist/index.mjsView file
12561patternName = private_key_rsa severity = critical line = 12561 matchedText = * -----B...----
Critical
Secret Pattern

RSA private key in dist/index.mjs

dist/index.mjsView on unpkg · L12561
14238patternName = private_key_rsa severity = critical line = 14238 matchedText = var key ...\n";
Critical
Secret Pattern

RSA private key in dist/index.mjs

dist/index.mjsView on unpkg · L14238

Findings

5 Critical1 Medium4 Low
CriticalCritical Secretdist/index.cjs
CriticalSecret Patterndist/index.cjs
CriticalSecret Patterndist/index.cjs
CriticalSecret Patterndist/index.mjs
CriticalSecret Patterndist/index.mjs
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings