registry / @woovi/ui / 7.0.6

@woovi/ui@7.0.6

Woovi UI component library

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 556 KB of source, external domains: woovi.com, www.google.com, www.microsoft.com, www.mozilla.org, www.w3.org

Source & flagged code

1 flagged

package.jsonView file

Lines 129-169json

129 "@mui/x-data-grid-pro": "^8.0.0",

130 "react": "^18.3.1",

131 "react-dom": "^18.3.1",

132 "react-rnd": "10.4.1",

133 "react-router": "^7.13.1",

134 "react-virtual": "2.2.5",

135 "react-window": "1.8.10"

136 },

137 "private": false,

138 "publishConfig": {

139 "access": "public",

140 "registry": "https://registry.npmjs.org/"

141 },

142 "repository": {

143 "url": "https://github.com/entria/woovi-ui",

144 "type": "git"

145 },

146 "sideEffects": false,

147 "type": "module",

148 "types": "./dist/index.d.ts",

149 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L149

150 "changelo:major": "pnpm n ./scripts/release/changelog.ts --major",

151 "changelo:minor": "pnpm n ./scripts/release/changelog.ts --minor",

152 "changelo:patch": "pnpm n ./scripts/release/changelog.ts --patch",

153 "check:updates": "bunx npm-check-updates --interactive --format group",

154 "docs:build": "storybook build",

155 "docs:dev": "storybook dev -p 6006",

156 "i18n": "pnpm i18n:scan && pnpm i18n:translate",

157 "i18n:scan": "pnpm n scripts/i18next-parser/i18next-parser.js",

158 "i18n:translate": "pnpm zx scripts/i18next-parser/translateI18n.mjs ./locales/pt-BR.json -no-auto",

159 "lib:dev": "NODE_OPTIONS='--max-old-space-size=8192' DEBUG=rsbuild rslib build --watch",

160 "lib:prod": "NODE_OPTIONS='--max-old-space-size=8192' rslib build",

161 "lint:biome": "bunx biome check --write ./src && bunx biome format --write ./src",

162 "lint:eslint": "eslint .",

163 "lint": "turbo run lint:eslint",

164 "mergePullRequestRelease": "woovi-merge-pr-release",

165 "n": "node --experimental-strip-types",

166 "release:major": "woovi-changelog --major",

167 "release:minor": "woovi-changelog --minor",

168 "release:patch": "woovi-changelog --patch",

169 "typecheck:tsc": "tsc -p ./tsconfig.json --noEmit --emitDeclarationOnly false",

Source & flagged code

1 flagged · loading source

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.0/xlsx-0.20.0.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

2 Medium3 Low

MediumEnvironment Vars

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings