registry / muon-ui / 0.9.0

muon-ui@0.9.0

A multi-platform GUI application framework that uses CEF as its backend

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 383 KB of source

Source & flagged code

2 flagged

dist/vite.mjsView file

Lines 1-26javascript

1/*!

2* name: muon-ui

3* version: 0.9.0

4* description: A multi-platform GUI application framework that uses CEF as its backend

5* author: Kouji Matsui (@kekyo@mi.kekyo.net)

6* license: MIT

7* repository.url: https://github.com/kekyo/muon-ui.git

8* git.commit.hash: 3437b522a51d8772713b72722b109c5ff30fc711

9*/

10import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";

11import { constants, existsSync, readFileSync, writeFileSync } from "node:fs";

12import { access, chmod, copyFile, cp, mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";

13import { createHash, randomBytes } from "node:crypto";

14import { tmpdir } from "node:os";

15import { fileURLToPath } from "node:url";

16import __screwUpDefaultImportModule0 from "adm-zip";

17import { spawn } from "node:child_process";

18import * as __screwUpDefaultImportModule0$1 from "sharp";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/vite.mjsView on unpkg · L6

19//#region \0rolldown/runtime.js

20var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);

21//#endregion

22//#region src/embed-config.ts

23var import_dist = (/* @__PURE__ */ __commonJSMin(((exports, module) => {

24 (function(global, factory) {

25 typeof exports === "object" && typeof module !== "undefined" ? module.exports = factory() : typeof define === "function" && define.amd ? define(factory) : global.JSON5 = factory();

26 })(exports, (function() {

dist/native/linux-armhf/muon-builderView file

•path = dist/native/linux-armhf/muon-builder kind = native_binary sizeBytes = 1029996 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/linux-armhf/muon-builderView on unpkg

Source & flagged code

2 flagged · loading source

dist/vite.mjsView file

6* license: MIT L7: * repository.url: https://github.com/kekyo/muon-ui.git L8: * git.commit.hash: [redacted] ... L16: import __screwUpDefaultImportModule0 from "adm-zip"; L17: import { spawn } from "node:child_process"; L18: import * as __screwUpDefaultImportModule0$1 from "sharp"; ... L214: if (i < 0 || i >= l) return TO_STRING ? "" : void 0; L215: a = s.charCodeAt(i); L216: return a < 55296 || a > 56319 || i + 1 === l || (b = s.charCodeAt(i + 1)) < 56320 || b > 57343 ? TO_STRING ? s.charAt(i) : a : TO_STRING ? s.slice(i, i + 2) : (a - 55296 << 10) + (... ... L1732: var getBuilderExecutableName = (platform) => platform === "win32" ? "muon-builder.exe" : "muon-builder"; L1733: var moduleDirectory$4 = typeof __dirname === "string" ? __dirname : dirname(fileURLToPath(import.meta.url)); L1734: var canExecute = async (path) => {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/vite.mjsView on unpkg · L6

dist/native/linux-armhf/muon-builderView file

•path = dist/native/linux-armhf/muon-builder kind = native_binary sizeBytes = 1029996 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/linux-armhf/muon-builderView on unpkg

Findings

3 Medium4 Low

MediumEnvironment Vars

MediumShips Native Binarydist/native/linux-armhf/muon-builder

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/vite.mjs

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

dist/vite.mjsView file

Lines 1-26javascript

1/*!

2* name: muon-ui

3* version: 0.9.0

4* description: A multi-platform GUI application framework that uses CEF as its backend

5* author: Kouji Matsui (@kekyo@mi.kekyo.net)

6* license: MIT

7* repository.url: https://github.com/kekyo/muon-ui.git

8* git.commit.hash: 3437b522a51d8772713b72722b109c5ff30fc711

9*/

10import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";

11import { constants, existsSync, readFileSync, writeFileSync } from "node:fs";

12import { access, chmod, copyFile, cp, mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";

13import { createHash, randomBytes } from "node:crypto";

14import { tmpdir } from "node:os";

15import { fileURLToPath } from "node:url";

16import __screwUpDefaultImportModule0 from "adm-zip";

17import { spawn } from "node:child_process";

18import * as __screwUpDefaultImportModule0$1 from "sharp";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/vite.mjsView on unpkg · L6

19//#region \0rolldown/runtime.js

20var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);

21//#endregion

22//#region src/embed-config.ts

23var import_dist = (/* @__PURE__ */ __commonJSMin(((exports, module) => {

24 (function(global, factory) {

25 typeof exports === "object" && typeof module !== "undefined" ? module.exports = factory() : typeof define === "function" && define.amd ? define(factory) : global.JSON5 = factory();

26 })(exports, (function() {

dist/native/linux-armhf/muon-builderView file

•path = dist/native/linux-armhf/muon-builder kind = native_binary sizeBytes = 1029996 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/linux-armhf/muon-builderView on unpkg