registry / bootstrap-italia / 2.18.2

bootstrap-italia@2.18.2

Bootstrap Italia è un tema Bootstrap 5 per la creazione di applicazioni web nel pieno rispetto delle linee guida di design per i siti internet e i servizi digitali della PA

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEval

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 136 file(s), 1.91 MB of source, external domains: a.com, datatracker.ietf.org, example.com, git.io, github.com, img.youtube.com, popper.js.org, tools.ietf.org, vjs.zencdn.net, www.w3.org, www.youtube-nocookie.com, www.youtube.com

Source & flagged code

4 flagged

dist/js/bootstrap-italia.bundle.min.jsView file

9patternName = generic_password severity = medium line = 9 matchedText = this._au...,t){

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/js/bootstrap-italia.bundle.min.jsView on unpkg · L9

dist/plugins/vendor/accessible-autocomplete.jsView file

Lines 1-10javascript

1import { createCommonjsModule } from '../../_virtual/_commonjsHelpers.js';

3var accessibleAutocomplete =

Source & flagged code

4 flagged · loading source

dist/js/bootstrap-italia.bundle.min.jsView file

9patternName = generic_password severity = medium line = 9 matchedText = this._au...,t){

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/js/bootstrap-italia.bundle.min.jsView on unpkg · L9

dist/plugins/vendor/accessible-autocomplete.jsView file

3var accessibleAutocomplete = createCommonjsModule(function (module, exports$1) { L4: !function(e,t){module.exports=t();}(globalThis,(()=>(()=>{var e={8952:(e,t,n)=>{var r=n(4328),o=n(36),i=TypeError;e.exports=function(e){if(r(e))return e;throw new i(o(e)+" is not a... L5: });

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/plugins/vendor/accessible-autocomplete.jsView on unpkg · L3

dist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eotView file

•path = dist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eot kind = high_entropy_blob sizeBytes = 18045 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eotView on unpkg

dist/js/bootstrap-italia.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = this._au...,e){

Medium

Secret Pattern

Hardcoded password in dist/js/bootstrap-italia.min.js

dist/js/bootstrap-italia.min.jsView on unpkg · L3

Findings

2 High5 Medium5 Low

HighObfuscated

HighShips High Entropy Blobdist/fonts/Roboto_Mono/roboto-mono-v13-latin-ext_latin-regular.eot

MediumSecret Patterndist/js/bootstrap-italia.bundle.min.js

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/js/bootstrap-italia.min.js

LowScripts Present

LowEvaldist/plugins/vendor/accessible-autocomplete.js

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

72%Warn

Verdict confidence

Firewall policyMatched warn-list

Package metadata

npm

AuthorPresidenza del Consiglio dei Ministri

Maintainersteamdigitale-sa, astagi, fra

Version2.18.2

PublishedJul 15, 2026

LicenseBSD-3-Clause

Dependencies10

Integrityverified

Package size3.64 MB

Files747

Keywordscsssassmobile-firstresponsivefront-endframeworkweb

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/js/bootstrap-italia.bundle.min.jsmodule → dist/bootstrap-italia.esm.jstypes → ./types/index.d.ts

RuntimeNo engine / OS / CPU constraints

Artifact9.86 MB · 747 files1 signature(s)

Install lifecycleNo install hooks · other: build, dev-code, dev-docs, documentation-build +8

Behavioral surface

ChildProcessEnvironmentVarsEvalHighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStringsManifest: clean

dist/js/bootstrap-italia.min.jsView file

Lines 1-20javascript

1!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("animejs/lib/anime.es.js"),require("video.js"),require("@popperjs/core"),require("@splidejs/splide")):"function"==typeof define&&define.amd?define(["animejs/lib/anime.es.js","video.js","@popperjs/core","@splidejs/splide"],e):(t="undefined"!=typeof globalThis?globalThis:t||self).bootstrap=e(t.anime,t.videojs,t.Popper,t.Splide)}(this,function(t,e,i,n){"use strict";function s(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const n=Object.getOw ...

2//!!! $autocomplete.empty()

3this._autocompleteElement.innerHTML="",t?this._items.forEach(e=>{let i=new RegExp("("+t+")","gi"),n=e.text.replace(i,"<mark>$1</mark>"),s=e.label?"<em>"+e.label+"</em>":"",o=e.icon?e.icon:"",r

4/*! Shifty 2.20.4 - https://github.com/jeremyckahn/shifty */

5var i;i=function(){return(()=>{var t={720:(t,e,i)=>{i.r(e),i.d(e,{Scene:()=>he,Tweenable:()=>Et,interpolate:()=>oe,processTweens:()=>pt,setBezierFunction:()=>W,shouldScheduleUpdate:()=>_t,

6/*!

7 * All equations are adapted from Thomas Fuchs'

8 * [Scripty2](https://github.com/madrobby/scripty2/blob/master/src/effects/transitions/penner.js).

9 *

12 * [subject to terms](http://www.robertpenner.com/easing_terms_of_use.html).

13 */

14/*!

15 * TERMS OF USE - EASING EQUATIONS

16 * Open source under the BSD License.

18 */

19var o=function(t){return t},r=function(t){return Math.pow(t,2)},a=function(t){return-(Math.pow(t-1,2)-1)},l=function(t){return(t/=.5)<1?.5*

Long lines were clipped for display.