registry / ui-soxo-bootstrap-core / 2.6.40

ui-soxo-bootstrap-core@2.6.40

All the Core Components for you to start

AI Security Review

scanned 17d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. The package is a React/Firebase UI component library with runtime helpers that make configured application API calls and can execute app-provided scripts when invoked by the consuming app.

Static reason

One or more suspicious static signals were detected.

Trigger

consumer imports components or calls exported runtime helpers

Impact

No evidence of unauthorized install-time execution, credential exfiltration, persistence, or destructive behavior.

Mechanism

React UI library with configured fetch/Firebase/AI API integrations and user-invoked script execution helper

Rationale

Static inspection found risky primitives, especially app-supplied script execution, but they are exposed as runtime library functionality rather than hidden install/import-time behavior. Network and credential access are tied to documented application integrations, with no concrete malicious exfiltration or persistence path.

Evidence

package.jsonindex.jscore/lib/utils/script.utils.jscore/lib/elements/complex/google-location-input/map-container-library-load.jscore/modules/steps/chat-assistant.jscore/modules/steps/narration.jscore/lib/models/process/components/process-dashboard/process-dashboard.jscore/lib/utils/http/http.utils.jscore/lib/utils/http/auth.helper.jscore/lib/utils/firebase.utils.js

ui-soxo-bootstrap-core@2.6.40

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code