registry / pkg_ui_components / 0.8.27

pkg_ui_components@0.8.27

pkg_ui_components

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 46 file(s), 1.06 MB of source, external domains: maps.googleapis.com, qafto.com, www.w3.org

Source & flagged code

3 flagged

dist/pkg_ui_components.cjs.development.jsView file

Lines 827-867javascript

827 if (paramsObject.data.type && paramsObject.data.type == 'toggle') {

828 value = !prev[paramsObject.data.objectKey];

829 } else if (paramsObject.data.type && paramsObject.data.type == 'increment') {

830 var val;

831 if (paramsObject.data.maximumValue) {

832 val = prev[paramsObject.data.objectKey] + 1 <= paramsObject.data.maximumValue ? prev[paramsObject.data.objectKey] + 1 : paramsObject.data.maximumValue;

833 } else {

834 val = prev[paramsObject.data.objectKey] + 1;

835 }

836 value = val;

837 } else if (paramsObject.data.type && paramsObject.data.type == 'decrement') {

838 var _val;

839 if (paramsObject.data.minimumValue) {

840 _val = prev[paramsObject.data.objectKey] - 1 >= paramsObject.data.minimumValue ? prev[paramsObject.data.objectKey] - 1 : paramsObject.data.minimumValue;

841 } else {

842 _val = prev[paramsObject.data.objectKey] - 1;

843 }

844 value = _val;

845 } else if (paramsObject.data.type && paramsObject.data.type == 'form') {

846 value = paramsObject.e.target.value;

847 } else if (paramsObject.data.type && paramsObject.data.type == 'custom') {

848 value = eval(paramsObject.data.value);

849 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pkg_ui_components.cjs.development.jsView on unpkg · L847

850 return _extends({}, prev, (_extends5 = {}, _extends5[paramsObject.data.objectKey] = value, _extends5));

851 });

852 } else if (paramsObject.data.stateType == 'array') {

853 paramsObject.props[paramsObject.data.state](function (prev) {

854 var arr = [];

855 for (var i = 0; i < (prev == null ? void 0 : prev.length); i++) {

856 if (i != paramsObject.props.index) {

857 arr.push(prev[i]);

858 } else {

859 var _extends6;

860 var value = void 0;

861 if (paramsObject.data.type && paramsObject.data.type == 'toggle') {

862 value = !prev[i][paramsObject.data.objectKey];

863 } else if (paramsObject.data.type && paramsObject.data.type == 'increment') {

864 var val = void 0;

865 if (paramsObject.data.maximumValue) {

866 val = prev[i][paramsObject.data.objectKey] + 1 <= paramsObject.data.maximumValue ? prev[i][paramsObject.data.objectKey] + 1 : paramsObject.data.maximumValue;

867 } else {

dist/pkg_ui_components.cjs.production.min.jsView file

Lines 1-3javascript

1"use strict";function _interopDefault(e){return e&&"object"==typeof e&&"default"in e?e.default:e}Object.defineProperty(exports,"__esModule",{value:

src/functions/functions.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = pkg_ui_components@0.8.26 matchedIdentity = npm:cGtnX3VpX2NvbXBvbmVudHM:0.8.26 similarity = 0.978 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/functions/functions.tsView on unpkg

Source & flagged code

3 flagged · loading source

dist/pkg_ui_components.cjs.development.jsView file

847

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code