registry  /  bootstrap-italia  /  2.18.2

bootstrap-italia@2.18.2

Bootstrap Italia è un tema Bootstrap 5 per la creazione di applicazioni web nel pieno rispetto delle linee guida di design per i siti internet e i servizi digitali della PA

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsEval
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 136 file(s), 1.91 MB of source, external domains: a.com, datatracker.ietf.org, example.com, git.io, github.com, img.youtube.com, popper.js.org, tools.ietf.org, vjs.zencdn.net, www.w3.org, www.youtube-nocookie.com, www.youtube.com

Source & flagged code

4 flagged · loading source
dist/js/bootstrap-italia.bundle.min.jsView file
9patternName = generic_password severity = medium line = 9 matchedText = this._au...,t){
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/js/bootstrap-italia.bundle.min.jsView on unpkg · L9
dist/plugins/vendor/accessible-autocomplete.jsView file
3var accessibleAutocomplete = createCommonjsModule(function (module, exports$1) { L4: !function(e,t){module.exports=t();}(globalThis,(()=>(()=>{var e={8952:(e,t,n)=>{var r=n(4328),o=n(36),i=TypeError;e.exports=function(e){if(r(e))return e;throw new i(o(e)+" is not a... L5: });
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/plugins/vendor/accessible-autocomplete.jsView on unpkg · L3
dist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eotView file
•path = dist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eot kind = high_entropy_blob sizeBytes = 18045 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eotView on unpkg
dist/js/bootstrap-italia.min.jsView file
3patternName = generic_password severity = medium line = 3 matchedText = this._au...,e){
Medium
Secret Pattern

Hardcoded password in dist/js/bootstrap-italia.min.js

dist/js/bootstrap-italia.min.jsView on unpkg · L3

Findings

2 High5 Medium5 Low
HighObfuscated
HighShips High Entropy Blobdist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eot
MediumSecret Patterndist/js/bootstrap-italia.bundle.min.js
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/js/bootstrap-italia.min.js
LowScripts Present
LowEvaldist/plugins/vendor/accessible-autocomplete.js
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings