registry / reason-editor / 0.39.56

reason-editor@0.39.56

Formatted Text Editor with toolbar for formatting, docs manager, and note outlines

Static Scan Results

scanned 12h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 42 file(s), 6.05 MB of source, external domains: atlassian.design, cdn.svar.dev, docs.google.com, fontawesome.com, git.io, github.com, motion.dev, s3.us-west-004.backblazeb2.com, source.unsplash.com, www.w3.org, www.youtube-nocookie.com, www.youtube.com, your-db.turso.io

Source & flagged code

10 flagged

dist/index.cjsView file

1patternName = aws_access_key severity = critical line = 1 matchedText = Object.d...ext;

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.cjsView on unpkg · L1

1patternName = aws_access_key severity = critical line = 1 matchedText = Object.d...ext;

Critical

Secret Pattern

AWS access key ID in dist/index.cjs

dist/index.cjsView on unpkg · L1

1Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:"Module"}});const e=require("./rolldown-runtime-CYn0-tR-.cjs"),t=require("./floating-ui.react-DdX...

High

Child Process

Package source references child process execution.

dist/index.cjsView on unpkg · L1

1Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:"Module"}});const e=require("./rolldown-runtime-CYn0-tR-.cjs"),t=require("./floating-ui.react-DdX...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.cjsView on unpkg · L1

1Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:"Module"}});const e=require("./rolldown-runtime-CYn0-tR-.cjs"),t=require("./floating-ui.react-DdX...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.cjsView on unpkg · L1

dist/archiver-web.es-CsYng4BZ.jsView file

Lines 1-1javascript

1import{a as t,i as e,n as r,r as n,t as i}from"./rolldown-runtime-DOG2APjf.js";var o,a,s=/* @__PURE__ */i((t,e)=>{e.exports=

dist/index-CLlAnStL-CPKay5Qq.cjsView file

Lines 1-1javascript

1require("./rolldown-runtime-CYn0-tR-.cjs");function t(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}function

dist/index-CLlAnStL--kJ5hOiV.jsView file

Lines 1-1javascript

1function t(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}function n(t){

dist/index.mjsView file

669patternName = aws_access_key severity = critical line = 669 matchedText = /* @__PU...]}),

Critical

Secret Pattern

AWS access key ID in dist/index.mjs

dist/index.mjsView on unpkg · L669

706patternName = aws_access_key severity = critical line = 706 matchedText = /* @__PU...]}),

Critical

Secret Pattern

AWS access key ID in dist/index.mjs

dist/index.mjsView on unpkg · L706

Source & flagged code

10 flagged · loading source

dist/index.cjs

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code