Loading npm security reports…
React hooks and components for building widgets in the widget-js ecosystem. This library provides a comprehensive set of tools to interact with the widget system, manage window states, and handle system events.
Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package contains a critical-looking secret pattern.
dist/index.es.jsView on unpkg · L39135Supabase service role key (JWT) in dist/index.es.js
dist/index.es.jsView on unpkg · L39135Package source references child process execution.
dist/index.es.jsView on unpkg · L20950Supabase service role key (JWT) in dist/index.umd.js
dist/index.umd.jsView on unpkg · L297A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.umd.jsView on unpkg · L65Package contains a critical-looking secret pattern.
dist/index.es.jsView on unpkg · L39135Supabase service role key (JWT) in dist/index.es.js
dist/index.es.jsView on unpkg · L39135Package source references child process execution.
dist/index.es.jsView on unpkg · L20950Supabase service role key (JWT) in dist/index.umd.js
dist/index.umd.jsView on unpkg · L297A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.umd.jsView on unpkg · L65