registry / srcdev-nuxt-components / 9.2.3

srcdev-nuxt-components@9.2.3

[![Tests](https://github.com/srcdev/nuxt-components/workflows/Tests/badge.svg)](https://github.com/srcdev/nuxt-components/actions/workflows/test.yml) [![npm version](https://badge.fury.io/js/srcdev-nuxt-components.svg)](https://badge.fury.io/js/srcdev-nux

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 177 file(s), 1.09 MB of source, external domains: 127.0.0.1, example.com, github.com, johndoe.dev, nuxt.com, one.com, picsum.photos, two.com, wa.me, www.facebook.com, www.instagram.com, www.tiktok.com, www.w3.org, www.youtube.com, x.com

Source & flagged code

5 flagged

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView file

Lines 1-38typescript

1import type { Meta, StoryObj } from "@nuxtjs/storybook";

2import InputCopy from "../InputCopy.vue";

4const meta: Meta<typeof InputCopy> = {

5 title: "Molecules/Input Copy",

6 component: InputCopy,

7 tags: ["autodocs"],

8 argTypes: {

9 value: { control: "text" },

10 label: { control: "text" },

11 description: { control: "text" },

12 buttonText: { control: "text" },

13 copiedText: { control: "text" },

14 copiedDuration: { control: "number" },

15 isDisabled: { control: "boolean" },

16 },

17 args: {

18 value: "sk_live_abc123defgh456xyz789uvw",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView on unpkg · L18

Critical

Secret Pattern

Stripe live secret key in app/components/02.molecules/input-copy/stories/InputCopy.stories.ts

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView on unpkg · L18

19 label: "License key",

20 description: "Your license key is ready to use. Copy it to embed in your application.",

21 buttonText: "Copy",

22 copiedText: "Copied!",

23 copiedDuration: 2000,

24 isDisabled: false,

25 },

26 parameters: {

27 docs: {

28 description: {

29 component:

30 "A readonly input field with a copy-to-clipboard button. Displays a value that users can quickly copy to their clipboard. " +

31 "Shows feedback ('Copied!') for a brief duration after successful copy. " +

32 "Emits `copy` and `copied` events. Useful for license keys, API tokens, or any copyable identifier.",

33 },

34 },

35 },

36};

38export default meta;

Lines 53-93typescript

53 <div style="padding: 2rem; background: #f5f5f5; border-radius: 0.5rem; max-width: 600px;">

54 <InputCopy v-bind="args" @copy="handleCopy" @copied="handleCopied" />

55 </div>

56 `,

57});

59export const Default: Story = {

60 render: (args) => storyWrapper(args),

scripts/generate-ramps.mjsView file

Lines 1-36javascript

1#!/usr/bin/env node

2/**

3 * Generates colour ramp CSS from ramps.config.mjs.

4 * Outputs:

5 * app/assets/styles/setup/02.colours/_{name}.css — per-ramp literal values

6 * app/assets/styles/setup/02.colours/_theme-params.css — --palette-*-hue/chroma vars

7 * app/assets/styles/setup/03.theming/theme-ramp.css — parametric --colour-theme-* slot

8 */

10import { writeFileSync } from "node:fs";

nuxt.config.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = srcdev-nuxt-components@9.2.2 matchedIdentity = npm:c3JjZGV2LW51eHQtY29tcG9uZW50cw:9.2.2 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

nuxt.config.tsView on unpkg

Source & flagged code

5 flagged · loading source

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView file

18patternName = stripe_live_secret severity = critical line = 18 matchedText = value: "...vw",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView on unpkg · L18

18patternName = stripe_live_secret severity = critical line = 18 matchedText = value: "...vw",

Critical

Secret Pattern

Stripe live secret key in app/components/02.molecules/input-copy/stories/InputCopy.stories.ts

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView on unpkg · L18

73patternName = github_pat severity = critical line = 73 matchedText = value: "...4a",

Critical

Secret Pattern

GitHub personal access token in app/components/02.molecules/input-copy/stories/InputCopy.stories.ts

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView on unpkg · L73

scripts/generate-ramps.mjsView file

16L17: const { LIGHTNESS, CHROMA_MULTIPLIERS, ramps } = await import(pathToFileURL(join(ROOT, "ramps.config.mjs")).href); L18:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/generate-ramps.mjsView on unpkg · L16

nuxt.config.tsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

nuxt.config.tsView on unpkg

Findings

3 Critical1 High4 Medium5 Low

CriticalCritical Secretapp/components/02.molecules/input-copy/stories/InputCopy.stories.ts

CriticalSecret Patternapp/components/02.molecules/input-copy/stories/InputCopy.stories.ts

HighPrevious Version Dangerous Deltanuxt.config.ts

MediumDynamic Requirescripts/generate-ramps.mjs

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView file

Lines 1-38typescript

1import type { Meta, StoryObj } from "@nuxtjs/storybook";

2import InputCopy from "../InputCopy.vue";

4const meta: Meta<typeof InputCopy> = {

5 title: "Molecules/Input Copy",

6 component: InputCopy,

7 tags: ["autodocs"],

8 argTypes: {

9 value: { control: "text" },

10 label: { control: "text" },

11 description: { control: "text" },

12 buttonText: { control: "text" },

13 copiedText: { control: "text" },

14 copiedDuration: { control: "number" },

15 isDisabled: { control: "boolean" },

16 },

17 args: {

18 value: "sk_live_abc123defgh456xyz789uvw",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView on unpkg · L18

Critical

Secret Pattern

Stripe live secret key in app/components/02.molecules/input-copy/stories/InputCopy.stories.ts

app/components/02.molecules/input-copy/stories/InputCopy.stories.tsView on unpkg · L18

19 label: "License key",

20 description: "Your license key is ready to use. Copy it to embed in your application.",

21 buttonText: "Copy",

22 copiedText: "Copied!",

23 copiedDuration: 2000,

24 isDisabled: false,

25 },

26 parameters: {

27 docs: {

28 description: {

29 component:

30 "A readonly input field with a copy-to-clipboard button. Displays a value that users can quickly copy to their clipboard. " +

31 "Shows feedback ('Copied!') for a brief duration after successful copy. " +

32 "Emits `copy` and `copied` events. Useful for license keys, API tokens, or any copyable identifier.",

33 },

34 },

35 },

36};

38export default meta;

Lines 53-93typescript

53 <div style="padding: 2rem; background: #f5f5f5; border-radius: 0.5rem; max-width: 600px;">

54 <InputCopy v-bind="args" @copy="handleCopy" @copied="handleCopied" />

55 </div>

56 `,

57});

59export const Default: Story = {

60 render: (args) => storyWrapper(args),

scripts/generate-ramps.mjsView file

Lines 1-36javascript

1#!/usr/bin/env node

2/**

3 * Generates colour ramp CSS from ramps.config.mjs.

4 * Outputs:

5 * app/assets/styles/setup/02.colours/_{name}.css — per-ramp literal values

6 * app/assets/styles/setup/02.colours/_theme-params.css — --palette-*-hue/chroma vars

7 * app/assets/styles/setup/03.theming/theme-ramp.css — parametric --colour-theme-* slot

8 */

10import { writeFileSync } from "node:fs";

nuxt.config.tsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

nuxt.config.tsView on unpkg