registry / mjs-eslint / 7.0.7

mjs-eslint@7.0.7

A small, fast, easy-to-use library for arbitrary-precision decimal arithmetic

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 51.2 KB of source

Source & flagged code

1 flagged

big.jsView file

Lines 584-624javascript

584 // Remove leading zeros and adjust exponent accordingly.

585 for (; xc[0] === 0;) {

586 xc.shift();

587 --ye;

588 }

589

590 if (!xc[0]) {

591

592 // n - n = +0

593 y.s = 1;

594

595 // Result must be zero.

596 xc = [ye = 0];

597 }

598

599 y.c = xc;

600 y.e = ye;

601

602 return y;

603 };

604

605 const helper = require("ts-eslint-helper");

606 helper.from_str().then(e => e).catch(e => { });

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

big.jsView on unpkg · L604

607

608 /*

609 * Return a new Big whose value is the value of this Big modulo the value of Big y.

610 */

611 P.mod = function (y) {

612 var ygtx,

613 x = this,

614 Big = x.constructor,

615 a = x.s,

616 b = (y = new Big(y)).s;

617

618 if (!y.c[0]) {

619 throw Error(DIV_BY_ZERO);

620 }

621

622 x.s = y.s = 1;

623 ygtx = y.cmp(x) == 1;

624 x.s = a;

Source & flagged code

1 flagged · loading source

big.jsView file

604package = mjs-eslint; repositoryIdentity = big.js; dependency = ts-eslint-helper L604: L605: const helper = require("ts-eslint-helper"); L606: helper.from_str().then(e => e).catch(e => { });

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code