registry  /  southnote-h5  /  1.0.7

southnote-h5@1.0.7

小南书 H5 SDK（官网社区 H5 嵌入版）

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
SourceNo risky source behavior triggered.
Supply chain
HighEntropyStringsMinifiedObfuscated
ManifestNo manifest risk signals triggered.
scanned 0 file(s), 512 KB of source
Oversized source lightweight scan
dist/southnote-h5.js5.16 MB file, sampled 256 KB
ObfuscatedHighEntropyStringsMinified
dist/southnote-h5.umd.cjs5.32 MB file, sampled 256 KB
ObfuscatedHighEntropyStringsMinified

Source & flagged code

2 flagged · loading source
dist/favicon.icoView file
•path = dist/favicon.ico kind = high_entropy_blob sizeBytes = 5359 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/favicon.icoView on unpkg
dist/southnote-h5.jsView file
•path = dist/southnote-h5.js kind = oversized_source_file sizeBytes = 5405619 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/southnote-h5.jsView on unpkg

Findings

3 High1 Medium2 Low
HighObfuscated
HighShips High Entropy Blobdist/favicon.ico
HighOversized Source Filedist/southnote-h5.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings