registry / keystone-design-bootstrap / 1.0.106

keystone-design-bootstrap@1.0.106

Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

Keystone Design Bootstrap - Sections, Elements, and Theme System for customer websites

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 250 file(s), 3.40 MB of source, external domains: connect.facebook.net, images.unsplash.com, maps.google.com, maps.googleapis.com, motion.dev, us.i.posthog.com, www.facebook.com, www.googletagmanager.com, www.keystone.app, www.untitledui.com, www.w3.org, www.youtube.com

Source & flagged code

6 flagged

dist/design_system/sections/index.jsView file

2518patternName = google_api_key severity = high line = 2518 matchedText = var GOOG...48";

High

High Secret

Package contains a high-severity secret pattern.

dist/design_system/sections/index.jsView on unpkg · L2518

2518patternName = google_api_key severity = high line = 2518 matchedText = var GOOG...48";

High

Secret Pattern

Google API key in dist/design_system/sections/index.js

dist/design_system/sections/index.jsView on unpkg · L2518

dist/design_system/components/DynamicFormFields.jsView file

Lines 2487-2527javascript

2487var

Source & flagged code

6 flagged · loading source

dist/design_system/sections/index.jsView file

2518patternName = google_api_key severity = high line = 2518 matchedText = var GOOG...48";

High

High Secret

Package contains a high-severity secret pattern.

dist/design_system/sections/index.jsView on unpkg · L2518

2518patternName = google_api_key severity = high line = 2518 matchedText = var GOOG...48";

High

Secret Pattern

Google API key in dist/design_system/sections/index.js

dist/design_system/sections/index.jsView on unpkg · L2518

dist/design_system/components/DynamicFormFields.jsView file

2507patternName = google_api_key severity = high line = 2507 matchedText = var GOOG...48";

High

Secret Pattern

Google API key in dist/design_system/components/DynamicFormFields.js

dist/design_system/components/DynamicFormFields.jsView on unpkg · L2507

dist/design_system/elements/index.jsView file

2502patternName = google_api_key severity = high line = 2502 matchedText = var GOOG...48";

High

Secret Pattern

Google API key in dist/design_system/elements/index.js

dist/design_system/elements/index.jsView on unpkg · L2502

dist/index.jsView file

2544patternName = google_api_key severity = high line = 2544 matchedText = var GOOG...48";

High

Secret Pattern

Google API key in dist/index.js

dist/index.jsView on unpkg · L2544

src/design_system/elements/map/GoogleMap.tsxView file

71patternName = google_api_key severity = high line = 71 matchedText = const GO...48';

High

Secret Pattern

Google API key in src/design_system/elements/map/GoogleMap.tsx

src/design_system/elements/map/GoogleMap.tsxView on unpkg · L71

Findings

6 High2 Medium4 Low

HighHigh Secretdist/design_system/sections/index.js

HighSecret Patterndist/design_system/sections/index.js

HighSecret Patterndist/design_system/components/DynamicFormFields.js

HighSecret Patterndist/design_system/elements/index.js

HighSecret Patterndist/index.js

HighSecret Patternsrc/design_system/elements/map/GoogleMap.tsx

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowNo License

dist/design_system/elements/index.jsView file

Lines 2482-2522javascript

2482var PaginationPageMinimalCenter = (_a) => {

2483 var _b = _a, { rounded, page = 1, total = 10, className } = _b, props = __objRest(_b, ["rounded", "page", "total", "className"]);

2484 const isDesktop = useBreakpoint("md");

2485 return /* @__PURE__ */ React.createElement(

2486 Pagination.Root,

2487 __spreadProps(__spreadValues({}, props), {

2488 page,

2489 total,

2490 className: cx("flex w-full items-center justify-between gap-3 border-t border-secondary pt-4 md:pt-5", className)

2491 }),

2492 /* @__PURE__ */ React.createElement("div", { className: "flex flex-1 justify-start" }, /* @__PURE__ */ React.createElement(Pagination.PrevTrigger, { asChild: true }, /* @__PURE__ */ React.createElement(Button, { iconLeading: ArrowLeft, color: "secondary", size: "sm" }, isDesktop ? "Previous" : void 0))),

2493 /* @__PURE__ */ React.createElement(Pagination.Context, null, ({ pages, currentPage, total: total2 }) => /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement("div", { className: "hidden justify-center gap-0.5 md:flex" }, pages.map(

2494 (page2, index) => page2.type === "page" ? /* @__PURE__ */ React.createElement(PaginationItem2, __spreadValues({ key: index, rounded }, page2)) : /* @__PURE__ */ React.createElement(Pagination.Ellipsis, { key: index, className: "flex size-10 shrink-0 items-center justify-center text-tertiary" }, "\u2026")

2495 )), /* @__PURE__ */ React.createElement("div", { className: "flex justify-center text-sm whitespace-pre text-fg-secondary md:hidden" }, "Page ", /* @__PURE__ */ React.createElement("span", { className: "font-medium" }, currentPage), " of ", /* @__PURE__ */ React.createElement("span", { className: "font-medium" }, total2)))),

2496 /* @__PURE__ */ React.createElement("div", { className: "flex flex-1 justify-end" }, /* @__PURE__ */ React.createElement(Pagination.NextTrigger, { asChild: true }, /* @__PURE__ */ React.createElement(Button, { iconTrailing: ArrowRight2, color: "secondary", size: "sm" }, isDesktop ? "Next" : void 0)))

2497 );

2498};

2499

2500// src/design_system/elements/map/GoogleMap.tsx

2501import { useEffect as useEffect3, useRef as useRef2, useState as useState4, useCallback as useCallback2 } from "react";

2502var GOOGLE_MAPS_API_KEY = "AIzaSyAb4-zSsPFx-QGi4cAiCGaRrzsAJC6e348";

High

Secret Pattern

Google API key in dist/design_system/elements/index.js

dist/design_system/elements/index.jsView on unpkg · L2502

2503function GoogleMap({ address, locationName, className = "" }) {

2504 const mapRef = useRef2(null);

2505 const [mapError, setMapError] = useState4(null);

2506 const [isLoaded, setIsLoaded] = useState4(false);

2507 const geocoderRef = useRef2(null);

2508 const mapInstanceRef = useRef2(null);

2509 const isInitializingRef = useRef2(false);

2510 const callbackNameRef = useRef2(null);

2511 const initMapRef = useRef2(null);

2512 const initMap = useCallback2(async () => {

2513 if (isInitializingRef.current) return;

2514 if (!mapRef.current || !window.google || !window.google.maps) {

2515 return;

2516 }

2517 if (!window.google.maps.Geocoder) {

2518 warn("google-map", "GEOCODER_NOT_READY_RETRYING", {

2519 address

2520 });

2521 setTimeout(() => {

2522 var _a, _b;

src/design_system/elements/map/GoogleMap.tsxView file

Lines 51-91tsx

51 markers?: GoogleMarker[];

52}

54interface GoogleMarkerOptions {

55 map: GoogleMapInstance;

56 position: GoogleLatLng;

57 title: string;

58}

60interface GoogleMarker {

61 map: GoogleMapInstance | null;

62}

64declare global {

65 interface Window {

66 google?: GoogleMaps;

67 [key: string]: unknown; // Allow dynamic callback properties

68 }

69}

71const GOOGLE_MAPS_API_KEY = 'AIzaSyAb4-zSsPFx-QGi4cAiCGaRrzsAJC6e348';

High

Secret Pattern

Google API key in src/design_system/elements/map/GoogleMap.tsx

src/design_system/elements/map/GoogleMap.tsxView on unpkg · L71

73export default function GoogleMap({ address, locationName, className = '' }: GoogleMapProps) {

74 const mapRef = useRef<HTMLDivElement>(null);

75 const [mapError, setMapError] = useState<string | null>(null);

76 const [isLoaded, setIsLoaded] = useState(false);

77 const geocoderRef = useRef<GoogleGeocoder | null>(null);

78 const mapInstanceRef = useRef<GoogleMapInstance | null>(null);

79 const isInitializingRef = useRef(false);

80 const callbackNameRef = useRef<string | null>(null);

82 // Initialize map once Google Maps API is loaded

83 // Use ref to store callback to avoid "accessed before declaration" error

84 const initMapRef = useRef<(() => Promise<void>) | null>(null);

86 const initMap = useCallback(async () => {

87 // Prevent multiple simultaneous initializations

88 if (isInitializingRef.current) return;

90 // Ensure DOM element exists and Google Maps is fully loaded

91 if (!mapRef.current || !window.google || !window.google.maps) {