registry / ozone-mosaic / 6.5.3

ozone-mosaic@6.5.3

[![NPM version][npm-image]][npm-url] # ozone-mosaic

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 86 file(s), 2.30 MB of source, external domains: citeseerx.ist.psu.edu, en.wikipedia.org, github.com, html.spec.whatwg.org, mths.be, npmjs.org, polymer.github.io, www.ecma-international.org, www.w3.org

Source & flagged code

3 flagged

bower_components/accessibility-developer-tools/dist/js/axs_testing.jsView file

Lines 342-382javascript

342 var c;

343 if (goog.isFunction(a)) {

344 c = a.call(void 0, {});

345 } else {

346 if (goog.isString(a)) {

347 c = goog.loadModuleFromSource_.call(void 0, a);

348 } else {

349 throw Error("Invalid module definition");

350 }

351 }

352 var d = goog.moduleLoaderState_.moduleName;

353 if (!goog.isString(d) || !d) {

354 throw Error('Invalid module name "' + d + '"');

355 }

356 goog.moduleLoaderState_.declareLegacyNamespace ? goog.constructNamespace_(d, c) : goog.SEAL_MODULE_EXPORTS && Object.seal && goog.isObject(c) && Object.seal(c);

357 goog.loadedModules_[d] = c;

358 } finally {

359 goog.moduleLoaderState_ = b;

360 }

361};

362goog.loadModuleFromSource_ = function(a) {

363 eval(a);

364 return {};

Low

Eval

Package source references a known benign dynamic code generation pattern.

bower_components/accessibility-developer-tools/dist/js/axs_testing.jsView on unpkg · L362

365};

366goog.normalizePath_ = function(a) {

367 a = a.split("/");

368 for (var b = 0;b < a.length;) {

369 "." == a[b] ? a.splice(b, 1) : b && ".." == a[b] && a[b - 1] && ".." != a[b - 1] ?

370 }

371 return a.join("/");

372};

373goog.loadFileSync_ = function(a) {

374 if (goog.global.CLOSURE_LOAD_FILE_SYNC) {

375 return goog.global.CLOSURE_LOAD_FILE_SYNC(a);

376 }

377 try {

378 var b = new goog.global.XMLHttpRequest;

379 b.open("get", a, !1);

380 b.send();

381 return 0 == b.status || 200 == b.status ? b.responseText : null;

382 } catch (c) {

Lines 957-997javascript

957(function() {

958 for (var a in axs.constants.ARIA_PROPERTIES) {

959 var b = axs.constants.ARIA_PROPERTIES[a];

960 if (b.values) {

961 for (var

webpack.test.jsView file

Lines 1-22javascript

1/* webpack.config.js */

3var HtmlWebpackPlugin = require('html-webpack-plugin');

4var CopyWebpackPlugin = require('copy-webpack-plugin');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

webpack.test.jsView on unpkg · L2

Source & flagged code

3 flagged · loading source

bower_components/accessibility-developer-tools/dist/js/axs_testing.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code