Loading npm security reports…
single file for my website
Opening or embedding the exported SVG runs browser code that retrieves and executes remote JavaScript. It also replaces the page fetch API to route requests through a remote service.
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
single.jsView on unpkg · L117Package source references dynamic require/import behavior.
single.jsView on unpkg · L6495Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.
single.svgView on unpkg · L113A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
single.svgView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
single.svgView on unpkgPackage ships non-JavaScript build or shell helper files.
build_svg.pyView on unpkgThis report applies to spark-sf@1.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
single.jsView on unpkg · L117Package source references dynamic require/import behavior.
single.jsView on unpkg · L6495Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.
single.svgView on unpkg · L113A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
single.svgView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
single.svgView on unpkgPackage ships non-JavaScript build or shell helper files.
build_svg.pyView on unpkg