registry  /  @youtyan/code-viewer  /  0.8.1

@youtyan/code-viewer@0.8.1

Local browser-based code and git diff viewer

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 4 file(s), 5.28 MB of source, external domains: 127.0.0.1, github.com, www.w3.org
Oversized source lightweight scan
web/mermaid.js5.75 MB file, sampled 256 KB
NetworkChildProcessHighEntropyStringsTelemetryUrlStringsgithub.comwww.w3.org
web/shiki.js9.27 MB file, sampled 256 KB
HighEntropyStrings

Source & flagged code

3 flagged · loading source
web/app.jsView file
10167patternName = generic_password severity = medium line = 10167 matchedText = password...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

web/app.jsView on unpkg · L10167
web/vendor/diff2html/diff2html-ui.min.jsView file
1!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var n=t();for(var a in n)("ob...
Low
Eval

Package source references a known benign dynamic code generation pattern.

web/vendor/diff2html/diff2html-ui.min.jsView on unpkg · L1
web/mermaid.jsView file
•path = web/mermaid.js kind = oversized_source_file sizeBytes = 6029629 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

web/mermaid.jsView on unpkg

Findings

1 High4 Medium7 Low
HighOversized Source Fileweb/mermaid.js
MediumSecret Patternweb/app.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalweb/vendor/diff2html/diff2html-ui.min.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings