registry  /  muon-ui  /  0.16.0

muon-ui@0.16.0

A multi-platform GUI application framework that uses CEF as its backend

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStrings
ManifestNo manifest risk signals triggered.
scanned 6 file(s), 502 KB of source

Source & flagged code

3 flagged · loading source
dist/vite.cjsView file
10const require_vite_internals = require("./vite-internals-D987wez0.cjs"); L11: let node_child_process = require("node:child_process"); L12: let node_fs = require("node:fs");
High
Child Process

Package source references child process execution.

dist/vite.cjsView on unpkg · L10
dist/cli.cjsView file
7Cross-file remote execution chain: dist/cli.cjs spawns dist/vite-internals-D987wez0.cjs; helper contains network access plus dynamic code execution. L7: * license: MIT L8: * repository.url: https://github.com/kekyo/muon-ui.git L9: * git.commit.hash: [redacted] ... L12: let commander = require("commander"); L13: let node_child_process = require("node:child_process"); L14: let node_fs = require("node:fs"); ... L21: var import_dist = require_vite_internals.require_dist(); L22: var muonRecycleExitCode = 88; L23: var defaultProjectConfigFileNames = [ ... L90: }; L91: const previous = process.env[require_vite_internals.[redacted]]; L92: process.env[require_vite_internals.[redacted]] = "1";
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.cjsView on unpkg · L7
dist/native/linux-armhf/muon-builderView file
•path = dist/native/linux-armhf/muon-builder kind = native_binary sizeBytes = 1034724 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

dist/native/linux-armhf/muon-builderView on unpkg

Findings

3 High3 Medium3 Low
HighChild Processdist/vite.cjs
HighShell
HighCross File Remote Execution Contextdist/cli.cjs
MediumEnvironment Vars
MediumShips Native Binarydist/native/linux-armhf/muon-builder
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings