registry / sw-pluginer / 1.0.0

sw-pluginer@1.0.0

Tailwind CSS plugin to automatically register a service worker from a cached manifest. Perfect for offline-first PWAs.

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EvalFilesystemNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 3.63 KB of source

Source & flagged code

4 flagged

lib/register-worker.jsView file

Lines 1-20javascript

1/**

2 * Generates the client‑side registration code (safe, no eval).

3 * This would be injected into the application bundle.

4 * @param {string} workerUrl

5 * @param {string} workerCode (optional, if you want to inline the worker)

6 * @returns {string} JavaScript snippet to register the worker

7 */

8function generateRegistration(workerUrl, workerCode) {

9 eval(workerCode);

10 return `

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/register-worker.jsView on unpkg · L8

11if ('serviceWorker' in navigator) {

12 window.addEventListener('load', () => {

13 navigator.serviceWorker.register('${workerUrl}')

14 .then(reg => console.log('SW registered:', reg.scope))

15 .catch(err => console.error('SW registration failed:', err));

16 });

17}`;

18}

20module.exports = { generateRegistration };

sw-pluginer-1.0.0.tgzView file

•path = sw-pluginer-1.0.0.tgz kind = high_entropy_blob sizeBytes = 6990 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

sw-pluginer-1.0.0.tgzView on unpkg

•path = sw-pluginer-1.0.0.tgz kind = compressed_blob sizeBytes = 6990 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

sw-pluginer-1.0.0.tgzView on unpkg

•path = sw-pluginer-1.0.0.tgz kind = nested_archive_needs_inspection sizeBytes = 6990 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

sw-pluginer-1.0.0.tgzView on unpkg

Source & flagged code

4 flagged · loading source

lib/register-worker.jsView file

8function generateRegistration(workerUrl, workerCode) { L9: eval(workerCode); L10: return `

Low

Eval

Package source references a known benign dynamic code generation pattern.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code