registry / neiki-qr / 1.0.0

neiki-qr@1.0.0

Lightweight, dependency-free CDN-ready QR Code Generator & Scanner Web Component with dozens of QR content types, live camera scanning, and i18n support

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 146 KB of source, external domains: example.com, wa.me, www.w3.org

Source & flagged code

6 flagged

dist/neiki-qr.jsView file

Lines 501-541javascript

501 if (typeof module !== 'undefined' && module.exports) {

502 module.exports = QR;

503 }

504

505 if (typeof window === 'undefined' || !window.customElements) {

506 return;

507 }

508

509 // =======================================================================

510 // i18n

511 // =======================================================================

512

513 var TRANSLATIONS = {

514 en: {

515 mode: { generate: 'Generate', scan: 'Scan' },

516 type: {

517 text: 'Text', url: 'URL', wifi: 'Wi-Fi', email: 'Email', tel: 'Phone', sms: 'SMS', whatsapp: 'WhatsApp',

518 vcard: 'Contact (vCard)', event: 'Event', geo: 'Location', sepa: 'SEPA Payment', czqr: 'Czech QR Payment', bitcoin: 'Bitcoin'

519 },

520 field: {

521 text: 'Text', url: 'Web address', ssid: 'Network name (SSID)', password: 'Password', encryption: 'Encryption', hidden: 'Hidden network',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/neiki-qr.jsView on unpkg · L521

522 to: 'To', subject: 'Subject', body: 'Message', number: 'Phone number', message: 'Message',

523 firstName: 'First name', lastName: 'Last name', phone: 'Phone', email: 'Email', org: 'Organization', title: 'Job title', address: 'Address',

524 eventTitle: 'Title', location: 'Location', start: 'Starts', end: 'Ends', description: 'Description',

525 lat: 'Latitude', lon: 'Longitude',

526 name: 'Beneficiary name', iban: 'IBAN', bic: 'BIC (optional)', amount: 'Amount', currency: 'Currency', reference: 'Reference',

527 account: 'IBAN', variableSymbol: 'Variable symbol', specificSymbol: 'Specific symbol', constantSymbol: 'Constant symbol',

528 address_btc: 'Bitcoin address', label: 'Label'

529 },

530 enc: { wpa: 'WPA/WPA2', wep: 'WEP', nopass: 'None' },

531 toolbar: { type: 'Type', ecc: 'Error correction', size: 'Size', download: 'Download', downloadPng: 'Download PNG', downloadSvg: 'Download SVG', copy: 'Copy content', copied: 'Copied!' },

532 ecc: { L: 'Low (7%)', M: 'Medium (15%)', Q: 'Quartile (25%)', H: 'High (30%)' },

533 scan: {

534 start: 'Start camera', stop: 'Stop camera', upload: 'Upload image', switchCamera: 'Switch camera', torch: 'Flashlight',

535 history: 'Scan history', clear: 'Clear', openLink: 'Open', copy: 'Copy', copied: 'Copied!', empty: 'No codes scanned yet',

536 noSupport: 'Your browser does not support live barcode scanning. Try Chrome or Edge, or upload an image instead.',

537 permissionDenied: 'Camera access was denied. Allow camera access to scan.', notFound: 'No code was found in the selected image.',

538 scanning: 'Scanning…', found: 'Code detected'

539 },

540 misc: { placeholder: 'Enter a value to generate a QR code', dataTooLong: 'This data is too long to fit in a QR code' }

541 },

Lines 557-653javascript

557 },

558 enc: { wpa: 'WPA/WPA2', wep: 'WEP', nopass: 'Žádné' },

559 toolbar: { type: 'Typ', ecc: 'Oprava chyb', size: 'Velikost', download: 'Stáhnout', downloadPng: 'Stáhnout PNG', downloadSvg:

dist/neiki-qr.min.jsView file

Lines 1-8javascript

1/* neiki-qr 1.0.0 | MIT */

2/*!

3 * Neiki's QR 1.0.0

4 * A lightweight, dependency-free QR Code Generator & Scanner Web Component.

5 * https://github.com/neikiri/neiki-qr

6 * MIT License

7 */

8!function(){"use strict";if("undefined"==typeof window||!window.customElements||!customElements.get("neiki-qr")){

README.mdView file

Lines 167-207markdown

167Each type has its own set of guided form fields; call `setType()` to switch and `setFields()` to populate them (or let the user fill in the on-screen form directly).

168

169| Type | `setType()` id | Fields |

170|------|------|--------|

171| Text | `text` | `text` |

172| URL | `url` | `url` |

173| Wi-Fi | `wifi` | `ssid`, `password`,

Source & flagged code

6 flagged · loading source

dist/neiki-qr.jsView file

521patternName = generic_password severity = medium line = 521 matchedText = text: 'T...rk',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/neiki-qr.jsView on unpkg · L521

577patternName = generic_password severity = medium line = 577 matchedText = text: 'T...rk',

Medium

Secret Pattern

Hardcoded password in dist/neiki-qr.js

dist/neiki-qr.jsView on unpkg · L577

605patternName = generic_password severity = medium line = 605 matchedText = text: 'T...ta',

Medium

Secret Pattern

Hardcoded password in dist/neiki-qr.js

dist/neiki-qr.jsView on unpkg · L605

633patternName = generic_password severity = medium line = 633 matchedText = text: 'T...ué',

Medium

Secret Pattern

Hardcoded password in dist/neiki-qr.js

dist/neiki-qr.jsView on unpkg · L633

dist/neiki-qr.min.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = !functio...}();

Medium

Secret Pattern

Hardcoded password in dist/neiki-qr.min.js

dist/neiki-qr.min.jsView on unpkg · L8

README.mdView file

187patternName = generic_password severity = medium line = 187 matchedText = qr.setFi... });

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L187

Findings

6 Medium3 Low

MediumSecret Patterndist/neiki-qr.js

MediumSecret Patterndist/neiki-qr.min.js

MediumSecret Patterndist/neiki-qr.js

MediumSecret PatternREADME.md

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/neiki-qr.jsView file

Lines 501-541javascript

501 if (typeof module !== 'undefined' && module.exports) {

502 module.exports = QR;

503 }

504

505 if (typeof window === 'undefined' || !window.customElements) {

506 return;

507 }

508

509 // =======================================================================

510 // i18n

511 // =======================================================================

512

513 var TRANSLATIONS = {

514 en: {

515 mode: { generate: 'Generate', scan: 'Scan' },

516 type: {

517 text: 'Text', url: 'URL', wifi: 'Wi-Fi', email: 'Email', tel: 'Phone', sms: 'SMS', whatsapp: 'WhatsApp',

518 vcard: 'Contact (vCard)', event: 'Event', geo: 'Location', sepa: 'SEPA Payment', czqr: 'Czech QR Payment', bitcoin: 'Bitcoin'

519 },

520 field: {

521 text: 'Text', url: 'Web address', ssid: 'Network name (SSID)', password: 'Password', encryption: 'Encryption', hidden: 'Hidden network',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/neiki-qr.jsView on unpkg · L521

522 to: 'To', subject: 'Subject', body: 'Message', number: 'Phone number', message: 'Message',

523 firstName: 'First name', lastName: 'Last name', phone: 'Phone', email: 'Email', org: 'Organization', title: 'Job title', address: 'Address',

524 eventTitle: 'Title', location: 'Location', start: 'Starts', end: 'Ends', description: 'Description',

525 lat: 'Latitude', lon: 'Longitude',

526 name: 'Beneficiary name', iban: 'IBAN', bic: 'BIC (optional)', amount: 'Amount', currency: 'Currency', reference: 'Reference',

527 account: 'IBAN', variableSymbol: 'Variable symbol', specificSymbol: 'Specific symbol', constantSymbol: 'Constant symbol',

528 address_btc: 'Bitcoin address', label: 'Label'

529 },

530 enc: { wpa: 'WPA/WPA2', wep: 'WEP', nopass: 'None' },

531 toolbar: { type: 'Type', ecc: 'Error correction', size: 'Size', download: 'Download', downloadPng: 'Download PNG', downloadSvg: 'Download SVG', copy: 'Copy content', copied: 'Copied!' },

532 ecc: { L: 'Low (7%)', M: 'Medium (15%)', Q: 'Quartile (25%)', H: 'High (30%)' },

533 scan: {

534 start: 'Start camera', stop: 'Stop camera', upload: 'Upload image', switchCamera: 'Switch camera', torch: 'Flashlight',

535 history: 'Scan history', clear: 'Clear', openLink: 'Open', copy: 'Copy', copied: 'Copied!', empty: 'No codes scanned yet',

536 noSupport: 'Your browser does not support live barcode scanning. Try Chrome or Edge, or upload an image instead.',

537 permissionDenied: 'Camera access was denied. Allow camera access to scan.', notFound: 'No code was found in the selected image.',

538 scanning: 'Scanning…', found: 'Code detected'

539 },

540 misc: { placeholder: 'Enter a value to generate a QR code', dataTooLong: 'This data is too long to fit in a QR code' }

541 },

Lines 557-653javascript

557 },

558 enc: { wpa: 'WPA/WPA2', wep: 'WEP', nopass: 'Žádné' },

559 toolbar: { type: 'Typ', ecc: 'Oprava chyb', size: 'Velikost', download: 'Stáhnout', downloadPng: 'Stáhnout PNG', downloadSvg:

dist/neiki-qr.min.jsView file

Lines 1-8javascript

1/* neiki-qr 1.0.0 | MIT */

2/*!

3 * Neiki's QR 1.0.0

4 * A lightweight, dependency-free QR Code Generator & Scanner Web Component.

5 * https://github.com/neikiri/neiki-qr

6 * MIT License

7 */

8!function(){"use strict";if("undefined"==typeof window||!window.customElements||!customElements.get("neiki-qr")){

README.mdView file

Lines 167-207markdown

167Each type has its own set of guided form fields; call `setType()` to switch and `setFields()` to populate them (or let the user fill in the on-screen form directly).

168

169| Type | `setType()` id | Fields |

170|------|------|--------|

171| Text | `text` | `text` |

172| URL | `url` | `url` |

173| Wi-Fi | `wifi` | `ssid`, `password`,