registry / kaspacore-lib / 1.1.1
kaspacore-lib@1.1.1
⚠ Under reviewJavaScript Kaspa library.
Static Scan Results
scanned 4d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
Crypto
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
2 flagged · loading sourcelib/crypto/hash.jsView file
45Hash.hmac = function(hashf, data, key) {
L46: //http://en.wikipedia.org/wiki/Hash-based_message_authentication_code
L47: //http://tools.ietf.org/html/rfc4868#section-2
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/crypto/hash.jsView on unpkg · L45lib/script/script.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/script/script.js#virtual:normalized:round1View on unpkgFindings
1 High1 Medium4 Low
HighSemantic Analysis Limitedlib/script/script.js#virtual:normalized:round1
MediumWildcard Dependency
LowScripts Present
LowWeak Cryptolib/crypto/hash.js
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to kaspacore-lib@1.1.1.
See all versions of kaspacore-lib for other recorded verdicts.
- Review the evidence and your use of kaspacore-lib@1.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.