registry / pkg_ui_components / 0.8.28

pkg_ui_components@0.8.28

pkg_ui_components

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 46 file(s), 1.06 MB of source, external domains: maps.googleapis.com, qafto.com, www.w3.org

Source & flagged code

3 flagged

dist/pkg_ui_components.cjs.development.jsView file

Lines 868-908javascript

868 if (paramsObject.data.type && paramsObject.data.type == 'toggle') {

869 value = !prev[paramsObject.data.objectKey];

870 } else if (paramsObject.data.type && paramsObject.data.type == 'increment') {

871 var val;

872 if (paramsObject.data.maximumValue) {

873 val = prev[paramsObject.data.objectKey] + 1 <= paramsObject.data.maximumValue ? prev[paramsObject.data.objectKey] + 1 : paramsObject.data.maximumValue;

874 } else {

875 val = prev[paramsObject.data.objectKey] + 1;

876 }

877 value = val;

878 } else if (paramsObject.data.type && paramsObject.data.type == 'decrement') {

879 var _val;

880 if (paramsObject.data.minimumValue) {

881 _val = prev[paramsObject.data.objectKey] - 1 >= paramsObject.data.minimumValue ? prev[paramsObject.data.objectKey] - 1 : paramsObject.data.minimumValue;

882 } else {

883 _val = prev[paramsObject.data.objectKey] - 1;

884 }

885 value = _val;

886 } else if (paramsObject.data.type && paramsObject.data.type == 'form') {

887 value = paramsObject.e.target.value;

888 } else if (paramsObject.data.type && paramsObject.data.type == 'custom') {

889 value = eval(paramsObject.data.value);

890 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pkg_ui_components.cjs.development.jsView on unpkg · L888

891 return _extends({}, prev, (_extends5 = {}, _extends5[paramsObject.data.objectKey] = value, _extends5));

892 });

893 } else if (paramsObject.data.stateType == 'array') {

894 paramsObject.props[paramsObject.data.state](function (prev) {

895 var arr = [];

896 for (var i = 0; i < (prev == null ? void 0 : prev.length); i++) {

897 if (i != paramsObject.props.index) {

898 arr.push(prev[i]);

899 } else {

900 var _extends6;

901 var value = void 0;

902 if (paramsObject.data.type && paramsObject.data.type == 'toggle') {

903 value = !prev[i][paramsObject.data.objectKey];

904 } else if (paramsObject.data.type && paramsObject.data.type == 'increment') {

905 var val = void 0;

906 if (paramsObject.data.maximumValue) {

907 val = prev[i][paramsObject.data.objectKey] + 1 <= paramsObject.data.maximumValue ? prev[i][paramsObject.data.objectKey] + 1 : paramsObject.data.maximumValue;

908 } else {

dist/pkg_ui_components.cjs.production.min.jsView file

Lines 1-3javascript

1"use strict";function _interopDefault(e){return e&&"object"==typeof e&&"default"in e?e.default:e}Object.defineProperty(exports,"__esModule",{value:

src/functions/functions.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = pkg_ui_components@0.8.29 matchedIdentity = npm:cGtnX3VpX2NvbXBvbmVudHM:0.8.29 similarity = 0.891 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/functions/functions.tsView on unpkg

Source & flagged code

3 flagged · loading source

dist/pkg_ui_components.cjs.development.jsView file

888

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code