registry  /  i18ntk  /  4.6.1

i18ntk@4.6.1

i18n Tool Kit - Zero-dependency internationalization toolkit for setup, scanning, analysis, validation, auto translation, fixing, reporting, and runtime translation loading.

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 98 file(s), 1.55 MB of source, external domains: api-free.deepl.com, libretranslate.com, translate.googleapis.com

Source & flagged code

2 flagged · loading source
settings/settings-cli.jsView file
6L7: const cliHelper = require('../utils/cli-helper'); L8: const fs = require('fs');
Medium
Dynamic Require

Package source references dynamic require/import behavior.

settings/settings-cli.jsView on unpkg · L6
main/i18ntk-translate.jsView file
•matchType = previous_version_dangerous_delta matchedPackage = i18ntk@4.6.0 matchedIdentity = npm:aTE4bnRr:4.6.0 similarity = 0.959 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

main/i18ntk-translate.jsView on unpkg

Findings

1 High3 Medium3 Low
HighPrevious Version Dangerous Deltamain/i18ntk-translate.js
MediumDynamic Requiresettings/settings-cli.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings