Loading npm security reports…
single file for my website
Loading the SVG entrypoint runs browser code that fetches and executes remotely supplied JavaScript. The remote content is not pinned to the published package.
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
single.jsView on unpkg · L117Package source references dynamic require/import behavior.
single.jsView on unpkg · L6495Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.
single.svgView on unpkg · L113A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
single.svgView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
single.svgView on unpkgPackage ships non-JavaScript build or shell helper files.
build_svg.pyView on unpkgThis report applies to spark-sf@1.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
single.jsView on unpkg · L117Package source references dynamic require/import behavior.
single.jsView on unpkg · L6495Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.
single.svgView on unpkg · L113A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
single.svgView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
single.svgView on unpkgPackage ships non-JavaScript build or shell helper files.
build_svg.pyView on unpkg