registry / hexo-theme-hipaper-keyboarddaily / 1.9.3
hexo-theme-hipaper-keyboarddaily@1.9.3
Bugfix for A newspaper theme for Hexo.
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection found no install-time behavior or concrete attack. The network matches correspond to page sharing and visitor analytics features.
Static reason
No blocking static signals were detected.
Trigger
Sharing is initiated by a visitor clicking a share link; visitor counting occurs when the generated page loads.
Impact
No malicious impact was established.
Mechanism
The theme creates share links from the page URL and loads a visitor counter. The package manifest declares no install hook or runtime entrypoint.
AI rationale
Source inspection found no install-time behavior or concrete attack. The network matches correspond to page sharing and visitor analytics features.
Evidence
package.jsonsource/js/script.jslayout/_partial/after-footer.ejs_config.yml
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists theme files and development dependencies; it declares no lifecycle hook or runtime entrypoint.
- The browser sharing feature runs from a click handler and uses the page URL supplied by the theme.
- Visitor counting uses a configured analytics ID and a browser-loaded CNZZ counter; these are theme analytics features.
Evidence against
Behavioral surface
FilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
13"files": [
"layout",
"scripts",
"source",
"languages",
"_config.yml"
],
"devDependencies": {
"grunt": "~1.4.1",
"load-grunt-tasks": "~5.1.0",
"grunt-git": "~0.2.2",
"grunt-contrib-clean": "~1.0.0",
"grunt-contrib-copy": "~1.0.0"
}
}
Low
Suspicious Lifecycle Evidence
package.json lists theme files and development dependencies; it declares no lifecycle hook or runtime entrypoint.
package.jsonView on unpkg · L13source/js/script.jsView file
52}).on('click', '.article-share-link', function(e){
e.stopPropagation();
var $this = $(this),
url = $this.attr('data-url'),
encodedUrl = encodeURIComponent(url),
id = 'article-share-box-' + $this.attr('data-id'),
offset = $this.offset();
if ($('#' + id).length){
var box = $('#' + id);
if (box.hasClass('on')){
box.removeClass(
Low
Ai Review Evidence
The browser sharing feature runs from a click handler and uses the page URL supplied by the theme.
source/js/script.jsView on unpkg · L52Findings
1 Medium7 Low
MediumNetwork
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencesource/js/script.js
LowAi Review Evidencelayout/_partial/after-footer.ejs
LowAi Review Evidence_config.yml
Affected versions and remediation
This report applies to hexo-theme-hipaper-keyboarddaily@1.9.3.
See all versions of hexo-theme-hipaper-keyboarddaily for other recorded verdicts.
- Review the evidence and your use of hexo-theme-hipaper-keyboarddaily@1.9.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.