registry / dxfview / 0.0.7-beta

dxfview@0.0.7-beta

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessShell

Supply chain

HighEntropyStringsMinifiedObfuscatedTrivialUrlStrings

Manifest

NoLicense

scanned 1 file(s), 1.96 MB of source, external domains: github.com

Source & flagged code

1 flagged

package.jsonView file

Lines 1-29json

2 "name": "dxfview",

3 "version": "0.0.7-beta",

4 "homepage": "",

5 "module": "dist/dxfview.esm.min.js",

6 "main": "dist/dxfview.esm.min.js",

7 "types": "dist/types/index.d.ts",

8 "type": "module",

9 "scripts": {

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg · L9

10 "clean": "rimraf dist build",

11 "build:release": "node --loader ts-node/esm esbuild.config.ts -mode=production",

12 "build:prebuild": "node --loader ts-node/esm esbuild.config.ts -mode=prebuild",

13 "build:datatype": "tsc && tsc-alias",

14 "build": "npm run clean && npm run lint-fix && npm run build:datatype && npm run build:release",

15 "build:dev": "npm run clean && npm run lint-fix && npm run build:prebuild",

16 "build:dev:watch": "npm run clean && npm run lint-fix && npm run build:datatype && node --loader ts-node/esm esbuild.config.ts -mode=devwatch",

17 "demo": "npm run build:dev && node demo/index.cjs",

18 "start": "node --loader ts-node/esm esbuild.config.ts -mode=development",

19 "lint": "eslint src --ext ts",

20 "lint-fix": "npm run lint -- --fix",

21 "docs": "typedoc src/export.doc.ts --excludePrivate --excludeProtected --excludeInternal --exclude src/pathes/*"

22 },

23 "files": [

24 "/dist"

25 ],

26 "repository": {

27 "type": "git"

28 },

29 "author": "dxfview",

Source & flagged code

1 flagged · loading source

package.jsonView file

•Runtime dependency names matching Node built-ins: stream

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

Findings

1 High1 Medium5 Low

HighNode Builtin Dependency Squatpackage.json

MediumStructural Risk Force Deep Review

LowScripts Present

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License