registry / html-reporter / 11.14.0

html-reporter@11.14.0

Html-reporter and GUI for viewing and managing results of a tests run. Currently supports Testplane and Hermione.

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 131 file(s), 5.52 MB of source, external domains: babel.dev, babeljs.io, bit.ly, fb.me, github.com, mc.yandex.ru, npm.im, npms.io, reactjs.org, redux.js.org, www.w3.org

Source & flagged code

3 flagged

build/lib/static/search-worker.min.jsView file

Lines 1-1javascript

1(()=>{var e,t,r={54077:(e,t)=>{t.SA={RESULT:"result",META:"meta"},t.wK="error",t.wK},22354:(e,t,r)=>{"use strict";var i=r(56666),n=r(89325),a=(r(82841),r(76635)),o=(r(5634),r(883),"INT"),s="TEXT",c=([{name:"suitePath",type:s},{name:"suiteName",type:s},{name:"name",type:s},{name:"suiteUrl",type:s},{name:"metaInfo",type:s},{name:"history",type:s},{name:"description",type:s},{name:"error",type:s},{name:"skipReason",type:s},{name:"imagesInfo",type:s},{name:"screenshot",type:o},{name:"multipleTabs",type:o},{name:"status",type:s},{name:"timestamp",type:o},{name:"duration",type:o},{name:"attachments" ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/lib/static/search-worker.min.jsView on unpkg · L1

Long lines were clipped for display.

plugins-sdk/build/plugins-sdk/index.jsView file

Lines 1-6javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.ExtensionPointName = void 0;

4var plugins_1 = require

build/lib/static/516.min.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = html-reporter@11.12.0 matchedIdentity = npm:aHRtbC1yZXBvcnRlcg:11.12.0 similarity = 0.892 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

build/lib/static/516.min.jsView on unpkg

Source & flagged code

3 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code