registry / astro-swiper-zosei / 0.14.3

astro-swiper-zosei@0.14.3

Astro component for swiper, dedicated to slider / carousel / photo swiper / slide, including thumbnails

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 10.5 KB of source

Source & flagged code

2 flagged

package.jsonView file

Lines 58-86json

58 "touch",

59 "responsive",

60 "thumbnail"

61 ],

62 "dependencies": {

63 "swiper": "^14.1.0"

64 },

65 "peerDependencies": {

66 "astro": ">=5.0.0",

67 "swiper": ">=11.0.0"

68 },

69 "peerDependenciesMeta": {

70 "astro": {

71 "optional": true

72 },

73 "swiper": {

74 "optional": true

75 }

76 },

77 "scripts": {

78 "postinstall": "node ./scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L78

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L78

79 "preversion": "pnpm run build && pnpm run test",

80 "format": "biome format --write && prettier -w \"**/*.astro\"",

81 "lint": "biome lint",

82 "test": "pnpm run --filter docs test",

83 "build": "pnpm run --filter docs build",

84 "dev": "pnpm run --filter docs dev"

85 }

86}

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.json

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code