registry / admin-ui-starter-kit / 0.6.2

admin-ui-starter-kit@0.6.2

Opinionated React component kit for admin panels and SaaS dashboards, built on top of shadcn/ui + Tailwind CSS v4. Callback-driven, framework-agnostic, i18n-ready.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 639 file(s), 6.91 MB of source, external domains: api.dicebear.com, base-ui.com, bit.ly, carto.com, example.com, github.com, i.pravatar.cc, images.unsplash.com, leafletjs.com, local.invalid, photon.komoot.io, prosemirror.net, radix-ui.com, react.dev, redux-toolkit.js.org, redux.js.org, status.example.com, vitejs.dev, www.google.com, www.openstreetmap.org, www.typescriptlang.org, www.w3.org

Source & flagged code

8 flagged

dist/showcase/assets/api-key-list-wxmuRN1m.jsView file

Lines 1-52javascript

1import{n as e,r as t}from"./chunk-QTnfLwEv.js";import{t as n}from"./react-sKtkuLrH.js";import{n as r,t as i}from"./section-Dd6X6IKg.js";import{t as a}from"./example-Rrx9vj75.js";import{d as o}from"./index-o71HAmc3.js";import{t as s}from"./props-table-C6gPyO49.js";import{t as c}from"./PreviewLayout-CBTybzKu.js";import{t as l}from"./api-key-list-CL6je8dF.js";var u=e({DefaultVisibleSecretsCallbacksForAddDelete:()=>m,EmptyState:()=>g,LocalizedStrings:()=>_,MaskedSecretsStripeStyle:()=>h}),d=t(n(),1),f=o(),p=[{id:`1`,name:`Production`,value:`AUDO230454*242SDIFPPL`},{id:`2`,name:`Development`,value: ...

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

Critical

Secret Pattern

Stripe live secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

High

Secret Pattern

Stripe test secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

2import { ApiKeyList, type ApiKeyListItem } from '@/components/composed/admin';

3import { Col } from '../../PreviewLayout';

5const initial: ApiKeyListItem[] = [

6 { id: '1', name: 'Production', value: 'AUDO230454*242SDIFPPL' },

7 { id: '2', name: 'Development', value: 'DUILO30454*242SDIFUIP' },

8 { id: '3', name: 'Staging', value: 'IPPODAS230454*242SDI' },

9];

11export function DefaultVisibleSecretsCallbacksForAddDelete() {

12 const [keys, setKeys] = useState(initial);

13 return (

14 <>

15 <Col className="max-w-xl">

16 <ApiKeyList

17 items={keys}

18 onAdd={() => {

19 const id = String(keys.length + 1);

20 setKeys((k) => [...k, { id, name: \`Key \${id}\`, value: \`KEY_\${id}_\${Math.random().toString(36).slice(2, 10).toUpperCase()}\` }]);

21 }}

22 onDelete={(id) => setKeys((k) => k.filter((i) => i.id !== id))}

23 />

24 </Col>

25 </>

26 );

27}

29export function MaskedSecretsStripeStyle() {

30 const [maskedKeys] = useState<ApiKeyListItem[]>([

31 { id: 'live', name: 'Live', value: 'sk_live_3xy4cm9bnrUseEkJ4zDh2A4D', displayValue: 'sk_live_·············2A4D' },

Critical

Secret Pattern

Stripe live secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L31

32 { id: 'test', name: 'Test', value: 'sk_test_5j2lpQzKvFnH8PcQ7B3M', displayValue: 'sk_test_·············7B3M' },

High

Secret Pattern

Stripe test secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L32

33 ]);

34 return (

35 <>

36 <Col className="max-w-xl">

37 <ApiKeyList items={maskedKeys} title="Stripe API keys" />

38 </Col>

39 </>

40 );

41}

43export function EmptyState() {

44 return (

45 <>

46 <Col className="max-w-xl">

47 <ApiKeyList items={[]} onAdd={() => {}} />

48 </Col>

49 </>

50 );

51}

Long lines were clipped for display.

dist/files/inter-latin-ext-wght-normal.woff2View file

•path = dist/files/inter-latin-ext-wght-normal.woff2 kind = high_entropy_blob sizeBytes = 85068 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/files/inter-latin-ext-wght-normal.woff2View on unpkg

.agents/skills/component-library-rules/references/components/composed__api-key-list.mdView file

Lines 51-92markdown

51export function DefaultVisibleSecretsCallbacksForAddDelete() {

52 const [keys, setKeys] = useState(initial);

53 return (

54 <>

55 <Col className="max-w-xl">

56 <ApiKeyList

57 items={keys}

58 onAdd={() => {

59 const id = String(keys.length + 1);

60 setKeys((k) => [...k, { id, name: `Key ${id}`, value: `KEY_${id}_${Math.random().toString(36).slice(2, 10).toUpperCase()}` }]);

Source & flagged code

8 flagged · loading source

dist/showcase/assets/api-key-list-wxmuRN1m.jsView file

1patternName = stripe_live_secret severity = critical line = 1 matchedText = import{n...ct';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

1patternName = stripe_live_secret severity = critical line = 1 matchedText = import{n...ct';

Critical

Secret Pattern

Stripe live secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

31patternName = stripe_live_secret severity = critical line = 31 matchedText = { id: 'l...' },

Critical

Secret Pattern

Stripe live secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L31

1patternName = stripe_test_secret severity = high line = 1 matchedText = import{n...ct';

High

Secret Pattern

Stripe test secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

32patternName = stripe_test_secret severity = high line = 32 matchedText = { id: 't...' },

High

Secret Pattern

Stripe test secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L32

dist/files/inter-latin-ext-wght-normal.woff2View file

•path = dist/files/inter-latin-ext-wght-normal.woff2 kind = high_entropy_blob sizeBytes = 85068 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/files/inter-latin-ext-wght-normal.woff2View on unpkg

.agents/skills/component-library-rules/references/components/composed__api-key-list.mdView file

71patternName = stripe_live_secret severity = critical line = 71 matchedText = { id: 'l...' },

Critical

Secret Pattern

Stripe live secret key in .agents/skills/component-library-rules/references/components/composed__api-key-list.md

.agents/skills/component-library-rules/references/components/composed__api-key-list.mdView on unpkg · L71

72patternName = stripe_test_secret severity = high line = 72 matchedText = { id: 't...' },

High

Secret Pattern

Stripe test secret key in .agents/skills/component-library-rules/references/components/composed__api-key-list.md

.agents/skills/component-library-rules/references/components/composed__api-key-list.mdView on unpkg · L72

Findings

4 Critical4 High3 Medium7 Low

CriticalCritical Secretdist/showcase/assets/api-key-list-wxmuRN1m.js

CriticalSecret Patterndist/showcase/assets/api-key-list-wxmuRN1m.js

CriticalSecret Pattern.agents/skills/component-library-rules/references/components/composed__api-key-list.md

HighShips High Entropy Blobdist/files/inter-latin-ext-wght-normal.woff2

HighSecret Patterndist/showcase/assets/api-key-list-wxmuRN1m.js

HighSecret Pattern.agents/skills/component-library-rules/references/components/composed__api-key-list.md

MediumNetwork

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

72%Warn

Verdict confidence

Firewall policyMatched warn-list

Package metadata

npm

AuthorNicolas Vlachos

Maintainersnicolasvl

Version0.7.0

PublishedJul 1, 2026

LicenseMIT

Dependencies38

Integrityverified

Package size4.59 MB

Files2,776

Keywordsreactcomponent-libraryshadcntailwinduiframework-agnosticdesign-systemadmin

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.cjsmodule → ./dist/index.jstypes → ./dist/index.d.tsexports mapbin → admin-ui-starter-kit-audit, admin-ui-starter-kit-install-skill, admin-ui-starter-kit-publish-theme +1

RuntimeNo engine / OS / CPU constraints

Artifact19.0 MB · 2,776 files1 signature(s)

Install lifecycleprepublishOnly

Behavioral surface

ChildProcessFilesystemNetworkHighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStringsManifest: clean

Source & flagged code

8 flagged

dist/showcase/assets/api-key-list-wxmuRN1m.jsView file

Lines 1-52javascript

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

Critical

Secret Pattern

Stripe live secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

High

Secret Pattern

Stripe test secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L1

2import { ApiKeyList, type ApiKeyListItem } from '@/components/composed/admin';

3import { Col } from '../../PreviewLayout';

5const initial: ApiKeyListItem[] = [

6 { id: '1', name: 'Production', value: 'AUDO230454*242SDIFPPL' },

7 { id: '2', name: 'Development', value: 'DUILO30454*242SDIFUIP' },

8 { id: '3', name: 'Staging', value: 'IPPODAS230454*242SDI' },

9];

11export function DefaultVisibleSecretsCallbacksForAddDelete() {

12 const [keys, setKeys] = useState(initial);

13 return (

14 <>

15 <Col className="max-w-xl">

16 <ApiKeyList

17 items={keys}

18 onAdd={() => {

19 const id = String(keys.length + 1);

20 setKeys((k) => [...k, { id, name: \`Key \${id}\`, value: \`KEY_\${id}_\${Math.random().toString(36).slice(2, 10).toUpperCase()}\` }]);

21 }}

22 onDelete={(id) => setKeys((k) => k.filter((i) => i.id !== id))}

23 />

24 </Col>

25 </>

26 );

27}

29export function MaskedSecretsStripeStyle() {

30 const [maskedKeys] = useState<ApiKeyListItem[]>([

31 { id: 'live', name: 'Live', value: 'sk_live_3xy4cm9bnrUseEkJ4zDh2A4D', displayValue: 'sk_live_·············2A4D' },

Critical

Secret Pattern

Stripe live secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L31

32 { id: 'test', name: 'Test', value: 'sk_test_5j2lpQzKvFnH8PcQ7B3M', displayValue: 'sk_test_·············7B3M' },

High

Secret Pattern

Stripe test secret key in dist/showcase/assets/api-key-list-wxmuRN1m.js

dist/showcase/assets/api-key-list-wxmuRN1m.jsView on unpkg · L32

33 ]);

34 return (

35 <>

36 <Col className="max-w-xl">

37 <ApiKeyList items={maskedKeys} title="Stripe API keys" />

38 </Col>

39 </>

40 );

41}

43export function EmptyState() {

44 return (

45 <>

46 <Col className="max-w-xl">

47 <ApiKeyList items={[]} onAdd={() => {}} />

48 </Col>

49 </>

50 );

51}

Long lines were clipped for display.

dist/files/inter-latin-ext-wght-normal.woff2View file

•path = dist/files/inter-latin-ext-wght-normal.woff2 kind = high_entropy_blob sizeBytes = 85068 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/files/inter-latin-ext-wght-normal.woff2View on unpkg

.agents/skills/component-library-rules/references/components/composed__api-key-list.mdView file

Lines 51-92markdown

51export function DefaultVisibleSecretsCallbacksForAddDelete() {

52 const [keys, setKeys] = useState(initial);

53 return (

54 <>

55 <Col className="max-w-xl">

56 <ApiKeyList

57 items={keys}

58 onAdd={() => {

59 const id = String(keys.length + 1);

60 setKeys((k) => [...k, { id, name: `Key ${id}`, value: `KEY_${id}_${Math.random().toString(36).slice(2, 10).toUpperCase()}` }]);