registry  /  @webjsdev/core  /  0.7.33

@webjsdev/core@0.7.33

webjs core runtime - html/css tags, WebComponent base, isomorphic renderers

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsEvalNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 37 file(s), 1.31 MB of source, external domains: dequeuniversity.com, docs.webjs.dev, github.com

Source & flagged code

2 flagged · loading source
dist/webjs-core-testing.jsView file
10`,r:"\r",t:" ",f:"\f","\\":"\\",'"':'"'}}),Jv=A(function(e){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var t=bc();function r(a,n,i,o,s,u){var l=a.length,c="";fun... L11: `||c==="\r"||c==="\f";)D=!0,n++,c=a.charAt(n);return D}function v(){var D=b();if(n<l)throw Error('Rule expected but "'+a.charAt(n)+'" found.');return D}function b(){var D=y();if(!D... L12: Consider to rely on 'then' or 'done' mode instead.`);P&&(delete c[m],d[m]=O,l.emit("setasync",m,P))},D=function(){y=!0,c[m]&&(delete c[m],delete f[m],l.delete(m))},F=u;if(F||(F="th...
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/webjs-core-testing.jsView on unpkg · L10
dist/webjs-core-lazy-loader.jsView file
1var o=new Map,s=null,c=new Map;function a(t){let e=c.get(t);return e||(e=import(t).finally(()=>c.delete(t)),c.set(t,e),e)}function g(t){for(let[e,n]of Object.entries(t))o.set(e.toL... L2: //# sourceMappingURL=webjs-core-lazy-loader.js.map
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/webjs-core-lazy-loader.jsView on unpkg · L1

Findings

1 High4 Medium5 Low
HighObfuscated
MediumDynamic Requiredist/webjs-core-lazy-loader.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/webjs-core-testing.js
LowHigh Entropy Strings
LowUrl Strings