registry  /  christy-richtext  /  1.1.12

christy-richtext@1.1.12

A Vue 3 rich text editor component built on Tiptap — with Word import/export, image cloud upload, PDF export and AI writing assistance

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 5 file(s), 1.94 MB of source, external domains: christy-richtext.christylove.com.tw, example.com, github.com, goo.gl, prosemirror.net, purl.oclc.org, rolldown.rs, schemas.microsoft.com, schemas.openxmlformats.org, schemas.zwobble.org, stuk.github.io, sweetalert2.github.io, www.w3.org
Oversized source lightweight scan
dist-lib/christy-richtext.umd.cjs2.99 MB file, sampled 256 KB
ChildProcessHighEntropyStringsMinifiedUrlStringsexample.comprosemirror.net
dist-lib/html-to-docx.esm-shZY0p2v.js2.45 MB file, sampled 256 KB
ChildProcessDynamicRequireHighEntropyStringsUrlStringsgithub.comschemas.openxmlformats.orgwww.w3.org

Source & flagged code

4 flagged · loading source
package.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
scripts/postinstall.cjsView file
1const fs = require('fs') L2: const path = require('path')
Medium
Dynamic Require

Package source references dynamic require/import behavior.

scripts/postinstall.cjsView on unpkg · L1
dist-lib/christy-richtext.umd.cjsView file
•path = dist-lib/christy-richtext.umd.cjs kind = oversized_source_file sizeBytes = 3138448 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist-lib/christy-richtext.umd.cjsView on unpkg

Findings

2 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighOversized Source Filedist-lib/christy-richtext.umd.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirescripts/postinstall.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License