registry  /  gt-next  /  6.16.35

gt-next@6.16.35

A Next.js library for automatic internationalization.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 77 file(s), 211 KB of source, external domains: generaltranslation.com

Source & flagged code

2 flagged · loading source
dist/client.jsView file
2Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L3: require("./_virtual/_rolldown/runtime.js"); L4: let gt_react_client = require("gt-react/client");
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/client.jsView on unpkg · L2
dist/config.jsView file
307package = gt-next; repositoryIdentity = gt; dependency = @generaltranslation/compiler L307: if (mergedConfig.experimentalCompilerOptions?.type === "babel") try { L308: const { webpack: gtUnplugin } = require("@generaltranslation/compiler"); L309: webpackConfig.plugins.unshift(gtUnplugin(mergedConfig.experimentalCompilerOptions || {}));
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/config.jsView on unpkg · L307

Findings

1 High4 Medium4 Low
HighCopied Package Dependency Bridgedist/config.js
MediumDynamic Requiredist/client.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings