registry / astro-swiper-zosei / 0.15.0

astro-swiper-zosei@0.15.0

⚠ Under review

Astro component for swiper, dedicated to slider / carousel / photo swiper / slide, including thumbnails

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 22.3 KB of source, external domains: github.com, zosei.github.io

Source & flagged code

3 flagged

package.jsonView file

Lines 65-93json

65 "touch",

66 "responsive",

67 "thumbnail"

68 ],

69 "dependencies": {

70 "swiper": "^14.1.0"

71 },

72 "peerDependencies": {

73 "astro": ">=5.0.0",

74 "swiper": ">=11.0.0"

75 },

76 "peerDependenciesMeta": {

77 "astro": {

78 "optional": true

79 },

80 "swiper": {

81 "optional": true

82 }

83 },

84 "scripts": {

85 "postinstall": "node ./scripts/init.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L85

86 "preversion": "pnpm run build && pnpm run test",

87 "format": "biome format --write && prettier -w \"**/*.astro\"",

88 "lint": "biome lint",

89 "test": "pnpm run --filter docs test",

90 "build": "pnpm run --filter docs build",

91 "dev": "pnpm run --filter docs dev"

92 }

93}

src/components/AutoplayToggle.astroView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/components/AutoplayToggle.astroView on unpkg

scripts/init.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = astro-swiper-zosei@0.14.6 matchedIdentity = npm:YXN0cm8tc3dpcGVyLXpvc2Vp:0.14.6 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/init.cjsView on unpkg

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/init.cjs

High

astro-swiper-zosei@0.15.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code