registry / @wireservers-ui/react-natives / 2.0.7

@wireservers-ui/react-natives@2.0.7

A comprehensive React Native component library built with NativeWind and Tailwind Variants

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 425 file(s), 545 KB of source

Source & flagged code

3 flagged

bin/init.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/* eslint-env node */

3/* global require, process, console */

5"use strict";

7const fs = require("fs");

8const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/init.jsView on unpkg · L6

9const { execSync } = require("child_process");

High

Child Process

Package source references child process execution.

bin/init.jsView on unpkg · L8

11const cwd = process.cwd();

12const force = process.argv.includes("--force");

14const green = (s) => `\x1b[32m${s}\x1b[0m`;

15const yellow = (s) => `\x1b[33m${s}\x1b[0m`;

16const cyan = (s) => `\x1b[36m${s}\x1b[0m`;

17const bold = (s) => `\x1b[1m${s}\x1b[0m`;

18const dim = (s) => `\x1b[2m${s}\x1b[0m`;

20function write(filename, content) {

21 const filepath = path.join(cwd, filename);

22 if (fs.existsSync(filepath) && !force) {

23 console.log(

24 yellow(" skip ") +

25 filename +

26 dim(" (already exists — use --force to overwrite)"),

27 );

28 return;

Lines 409-449javascript

409 const existing = pkg.scripts.postinstall || "";

410 if (existing.includes(".metro-patch.js")) {

411 console.log(green(" ok ") + " package.json postinstall");

Source & flagged code

3 flagged · loading source

bin/init.jsView file

8const path = require("path"); L9: const { execSync } = require("child_process"); L10:

High

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code