registry / pkg_ui_components / 0.8.29

pkg_ui_components@0.8.29

pkg_ui_components

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 46 file(s), 1.06 MB of source, external domains: maps.googleapis.com, qafto.com, www.w3.org

Source & flagged code

3 flagged

dist/pkg_ui_components.cjs.development.jsView file

Lines 840-880javascript

840 if (paramsObject.data.type && paramsObject.data.type == 'toggle') {

841 value = !prev[paramsObject.data.objectKey];

842 } else if (paramsObject.data.type && paramsObject.data.type == 'increment') {

843 var val;

844 if (paramsObject.data.maximumValue) {

845 val = prev[paramsObject.data.objectKey] + 1 <= paramsObject.data.maximumValue ? prev[paramsObject.data.objectKey] + 1 : paramsObject.data.maximumValue;

846 } else {

847 val = prev[paramsObject.data.objectKey] + 1;

848 }

849 value = val;

850 } else if (paramsObject.data.type && paramsObject.data.type == 'decrement') {

851 var _val;

852 if (paramsObject.data.minimumValue) {

853 _val = prev[paramsObject.data.objectKey] - 1 >= paramsObject.data.minimumValue ? prev[paramsObject.data.objectKey] - 1 : paramsObject.data.minimumValue;

854 } else {

855 _val = prev[paramsObject.data.objectKey] - 1;

856 }

857 value = _val;

858 } else if (paramsObject.data.type && paramsObject.data.type == 'form') {

859 value = paramsObject.e.target.value;

860 } else if (paramsObject.data.type && paramsObject.data.type == 'custom') {

861 value = eval(paramsObject.data.value);

862 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pkg_ui_components.cjs.development.jsView on unpkg · L860

863 return _extends({}, prev, (_extends5 = {}, _extends5[paramsObject.data.objectKey] = value, _extends5));

864 });

865 } else if (paramsObject.data.stateType == 'array') {

866 paramsObject.props[paramsObject.data.state](function (prev) {

867 var arr = [];

868 for (var i = 0; i < (prev == null ? void 0 : prev.length); i++) {

869 if (i != paramsObject.props.index) {

870 arr.push(prev[i]);

871 } else {

872 var _extends6;

873 var value = void 0;

874 if (paramsObject.data.type && paramsObject.data.type == 'toggle') {

875 value = !prev[i][paramsObject.data.objectKey];

876 } else if (paramsObject.data.type && paramsObject.data.type == 'increment') {

877 var val = void 0;

878 if (paramsObject.data.maximumValue) {

879 val = prev[i][paramsObject.data.objectKey] + 1 <= paramsObject.data.maximumValue ? prev[i][paramsObject.data.objectKey] + 1 : paramsObject.data.maximumValue;

880 } else {

dist/pkg_ui_components.cjs.production.min.jsView file

Lines 1-3javascript

1"use strict";function _interopDefault(e){return e&&"object"==typeof e&&"default"in e?e.default:e}Object.defineProperty(exports,"__esModule",{value:

src/functions/functions.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = pkg_ui_components@0.8.27 matchedIdentity = npm:cGtnX3VpX2NvbXBvbmVudHM:0.8.27 similarity = 0.870 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/functions/functions.tsView on unpkg

Source & flagged code

3 flagged · loading source

dist/pkg_ui_components.cjs.development.jsView file

860} else if (paramsObject.data.type && paramsObject.data.type == 'custom') { L861: value = eval(paramsObject.data.value); L862: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pkg_ui_components.cjs.development.jsView on unpkg · L860

dist/pkg_ui_components.cjs.production.min.jsView file

1"use strict";function _interopDefault(e){return e&&"object"==typeof e&&"default"in e?e.default:e}Object.defineProperty(exports,"__esModule",{value:!0});var reactToastify=require("r... L2: //# sourceMappingURL=pkg_ui_components.cjs.production.min.js.map

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/pkg_ui_components.cjs.production.min.jsView on unpkg · L1

Findings

2 High3 Medium6 Low

HighSame File Env Network Executiondist/pkg_ui_components.cjs.production.min.js

HighPrevious Version Dangerous Deltasrc/functions/functions.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/pkg_ui_components.cjs.development.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License