registry / hexo-shoka-swiper / 0.1.15

hexo-shoka-swiper@0.1.15

A Slideshow and Cardshow plugin for theme-shoka based on swiper

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. At Hexo generation/runtime, the package injects configured carousel assets and initializes Swiper.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User installs/enables the Hexo plugin and generates or serves a site.

Impact

Expected site presentation behavior; no package-originated exfiltration or persistence identified.

Mechanism

Hexo carousel template and browser-side Swiper lifecycle integration.

Rationale

Direct inspection shows a Hexo/Swiper presentation plugin with expected template injection and bundled browser carousel code. The CDN reference is package-aligned and no concrete malicious chain was found.

Evidence

package.jsonindex.jslib/swiper_init.jslib/slider.njklib/swiper.njklib/swiper.min.js

Network endpoints1

cdn.jsdelivr.net/npm/hexo-shoka-swiper@0.1.15

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

hexo-shoka-swiper@0.1.15

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code