registry  /  @xsolla/xui-input-pin  /  0.184.0

@xsolla/xui-input-pin@0.184.0

A cross-platform React PIN/OTP input component with individual cells for each digit. Features auto-advance between cells, paste support, and completion callbacks. <!-- BEGIN:xui-mcp-instructions:input-pin --> A specialised input for entering a short numer

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
SourceNo risky source behavior triggered.
Supply chain
HighEntropyStrings
ManifestNo manifest risk signals triggered.
scanned 4 file(s), 89.4 KB of source

Source & flagged code

2 flagged · loading source
native/index.jsView file
295patternName = generic_password severity = medium line = 295 matchedText = password...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

native/index.jsView on unpkg · L295
native/index.mjsView file
276patternName = generic_password severity = medium line = 276 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in native/index.mjs

native/index.mjsView on unpkg · L276

Findings

2 Medium2 Low
MediumSecret Patternnative/index.js
MediumSecret Patternnative/index.mjs
LowScripts Present
LowHigh Entropy Strings