registry / react-native-inapp-inspector / 1.1.17
react-native-inapp-inspector@1.1.17
A self-contained network, console, analytics, and webview inspector for React Native applications.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedexample/android/gradlew.batView file
•path = example/android/gradlew.bat
kind = build_helper
sizeBytes = 3093
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
example/android/gradlew.batView on unpkgexample/android/gradle/wrapper/gradle-wrapper.jarView file
•path = [redacted]-wrapper.jar
kind = high_entropy_blob
sizeBytes = 46175
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
example/android/gradle/wrapper/gradle-wrapper.jarView on unpkg•path = [redacted]-wrapper.jar
kind = compressed_blob
sizeBytes = 46175
magicHex = [redacted]
Medium
Ships Compressed Blob
Findings
1 High4 Medium4 Low
HighShips High Entropy Blobexample/android/gradle/wrapper/gradle-wrapper.jar
MediumNetwork
MediumShips Build Helperexample/android/gradlew.bat
MediumShips Compressed Blobexample/android/gradle/wrapper/gradle-wrapper.jar
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionexample/android/gradle/wrapper/gradle-wrapper.jar
Affected versions and remediation
This report applies to react-native-inapp-inspector@1.1.17.
See all versions of react-native-inapp-inspector for other recorded verdicts.
- Review the evidence and your use of react-native-inapp-inspector@1.1.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.