registry / construct-hub-webapp / 0.1.1470

construct-hub-webapp@0.1.1470

This project maintains the React web app for [Construct Hub].

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 43 file(s), 1.71 MB of source, external domains: a0.awsstatic.com, amazonwebservices.d2.sc.omtrdc.net, aws.amazon.com, aws.demdex.net, aws.github.io, awscdk.io, cdk.dev, cdk8s.io, cdkworkshop.com, cm.everesttech.net, constructs.dev, dev.to, developer.hashicorp.com, docs.aws.amazon.com, dpm.demdex.net, github.com, hayao-k.dev, join.slack.com, learn.hashicorp.com, prod.log.shortbread.analytics.console.aws.a2z.com, prod.log.shortbread.aws.dev, prod.tools.shortbread.analytics.console.aws.a2z.com, prod.tools.shortbread.aws.dev, www.npmjs.com, www.w3.org

Source & flagged code

1 flagged

.envView file

•patternName = blocked_file severity = critical matchedText = .env redactedSecretContext = secretLikeLines = 0 notes = no secret-like key/value lines found in sampled text

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.envView on unpkg

Source & flagged code

1 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code