registry / ui-soxo-bootstrap-core / 2.6.43

ui-soxo-bootstrap-core@2.6.43

All the Core Components for you to start

AI Security Review

scanned 14d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package is a React component/core UI library with runtime API integrations and a user-invoked dynamic script helper, but no install/import-time exfiltration or agent control-surface mutation was found.

Static reason

One or more suspicious static signals were detected.

Trigger

Application runtime use of exported React components/helpers

Impact

No confirmed unauthorized impact; consumers should treat dynamic scripts/API-key storage as application security design risks

Mechanism

UI library runtime network integrations and caller-provided script execution helper

Rationale

Scanner findings map to app-aligned runtime features: dynamic scripting for form/app logic, browser API integrations, and public-client API configuration. I found no lifecycle malware, exfiltration, destructive behavior, persistence beyond a commented Husky pre-commit file, or AI-agent control hijack.

Evidence

package.jsonindex.jscore/lib/utils/script.utils.jscore/modules/steps/chat-assistant.jscore/modules/steps/openai-realtime.jscore/modules/steps/voice-navigation.jscore/components/component-loader/component-loader.jscore/lib/elements/complex/google-map/google-map.js.husky/pre-commit

Network endpoints8

/v1beta

ui-soxo-bootstrap-core@2.6.43

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code