registry / @zoryn/component / 1.1.15
@zoryn/component@1.1.15
Vue 3 + TypeScript 企业级组件库（pnpm monorepo）。对外主包 `@zoryn/component`，组件 `Z` 前缀，支持完整导入与按需导入。
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
WildcardDependency
Oversized source lightweight scan
dist/index.full.js3.62 MB file, sampled 256 KB
ChildProcessHighEntropyStringsUrlStringsecma-international.orgelement-plus.org
dist/index.full.mjs3.37 MB file, sampled 256 KB
FilesystemNetworkChildProcessHighEntropyStringsUrlStrings127.0.0.1ecma-international.orgelement-plus.org
Source & flagged code
1 flaggeddist/index.cssView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.cssView on unpkgFindings
1 High4 Medium3 Low
HighSemantic Analysis Limiteddist/index.css
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @zoryn/component@1.1.15.
See all versions of @zoryn/component for other recorded verdicts.
- Review the evidence and your use of @zoryn/component@1.1.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.