registry / gt-next / 11.0.0

gt-next@11.0.0

A Next.js library for automatic internationalization.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 135 file(s), 270 KB of source, external domains: generaltranslation.com

Source & flagged code

2 flagged

dist/server-dir/runtime/tx.jsView file

Lines 1-21javascript

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

2require("../../_virtual/_rolldown/runtime.js");

3const require_request_getRequestConditions = require("../../request/getRequestConditions.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server-dir/runtime/tx.jsView on unpkg · L1

4let gt_i18n_internal = require("gt-i18n/internal");

5//#region src/server-dir/runtime/tx.ts

6/**

7* Translates the provided content string based on the specified locale and options.

8* If no translation is required, it renders the content as is. Otherwise, it fetches the

9* required translations or falls back to on-demand translation if enabled.

10*

11* @async

12* @function tx (translate)

13*

14* @param {string} content - The content string that needs to be translated.

15* @param {Object} [options] - Translation options.

16* @param {string} [options.$locale] - The target locale for translation. Defaults to the current locale if not provided.

17* @param {string} [options.$context] - Additional context for the translation process, which may influence the translation's outcome.

18* @param {number} [options.$maxChars] - The maximum number of characters to translate.

19* @param {string|number|boolean|Date} [options.<variable>] - Variables to interpolate into the message, passed as top-level keys (e.g. `{ price: 29.99 }`).

20* @param {StringFormat} [options.$format] - The data format for the message. ICU formatting is only applied when explicitly requested with `$format: 'ICU'`.

21*

dist/config.jsView file

Lines 275-315javascript

275 ...internalNextConfig.turbopack,

276 resolveAlias: {

277 ...internalNextConfig.turbopack?.resolveAlias,

278 ...turboAliases

279 }

280 } },

281 experimental: {

282 ...internalNextConfig.experimental,

283 ...require_plugin_getStableNextVersionInfo.rootParamStability

Source & flagged code

2 flagged · loading source

dist/server-dir/runtime/tx.jsView file

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L2: require("../../_virtual/_rolldown/runtime.js"); L3: const require_request_getRequestConditions = require("../../request/getRequestConditions.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server-dir/runtime/tx.jsView on unpkg · L1

dist/config.jsView file

295package = gt-next; repositoryIdentity = gt; dependency = @generaltranslation/compiler L295: if (mergedConfig.experimentalCompilerOptions?.type === "babel") try { L296: const { webpack: gtUnplugin } = require("@generaltranslation/compiler"); L297: webpackConfig.plugins.unshift(gtUnplugin(mergedConfig.experimentalCompilerOptions || {}));

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/config.jsView on unpkg · L295

Findings

1 High3 Medium4 Low

HighCopied Package Dependency Bridgedist/config.js

MediumDynamic Requiredist/server-dir/runtime/tx.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/server-dir/runtime/tx.jsView file

Lines 1-21javascript

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

2require("../../_virtual/_rolldown/runtime.js");

3const require_request_getRequestConditions = require("../../request/getRequestConditions.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server-dir/runtime/tx.jsView on unpkg · L1

4let gt_i18n_internal = require("gt-i18n/internal");

5//#region src/server-dir/runtime/tx.ts

6/**

7* Translates the provided content string based on the specified locale and options.

8* If no translation is required, it renders the content as is. Otherwise, it fetches the

9* required translations or falls back to on-demand translation if enabled.

10*

11* @async

12* @function tx (translate)

13*

14* @param {string} content - The content string that needs to be translated.

15* @param {Object} [options] - Translation options.

16* @param {string} [options.$locale] - The target locale for translation. Defaults to the current locale if not provided.

17* @param {string} [options.$context] - Additional context for the translation process, which may influence the translation's outcome.

18* @param {number} [options.$maxChars] - The maximum number of characters to translate.

19* @param {string|number|boolean|Date} [options.<variable>] - Variables to interpolate into the message, passed as top-level keys (e.g. `{ price: 29.99 }`).

20* @param {StringFormat} [options.$format] - The data format for the message. ICU formatting is only applied when explicitly requested with `$format: 'ICU'`.

21*

dist/config.jsView file

Lines 275-315javascript

275 ...internalNextConfig.turbopack,

276 resolveAlias: {

277 ...internalNextConfig.turbopack?.resolveAlias,

278 ...turboAliases

279 }

280 } },

281 experimental: {

282 ...internalNextConfig.experimental,

283 ...require_plugin_getStableNextVersionInfo.rootParamStability