registry / @wix/create-app / 0.0.232
@wix/create-app@0.0.232
Create Wix apps
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Oversized source lightweight scan
build/index.js2.38 MB file, sampled 256 KB
FilesystemEnvironmentVarsHighEntropyStringsUrlStringscode.visualstudio.comcursor.comdev.wix.comdiscord.ggdocs.anthropic.comreactjs.orgwww.wix.com
Source & flagged code
3 flaggedbuild/generator-LCJUKG2D.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
Low
Eval
Package source references a known benign dynamic code generation pattern.
build/generator-LCJUKG2D.jsView on unpkg · L242build/yoga.wasmView file
•path = build/yoga.wasm
kind = wasm_module
sizeBytes = 88658
magicHex = [redacted]
Medium
build/index.jsView file
•path = build/index.js
kind = oversized_source_file
sizeBytes = 2497076
magicHex = [redacted]
Findings
1 High4 Medium6 Low
HighOversized Source Filebuild/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalbuild/generator-LCJUKG2D.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @wix/create-app@0.0.232.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.232 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.