registry / userflow.js-self-hosted / 0.1.1023170

userflow.js-self-hosted@0.1.1023170

Self-hosted version of Userflow.js

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEval

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

NoLicense

scanned 81 file(s), 1.12 MB of source, external domains: app.userflow.com, cdn.userflow.com, docs.userflow.com, fast.wistia.net, fb.me, fonts.googleapis.com, github.com, js.userflow.com, marked.js.org, npms.io, player.vimeo.com, reactjs.org, userflow.com, www.loom.com, www.w3.org, www.youtube.com

Source & flagged code

1 flagged

TreeDoc.jsView file

Lines 1-12javascript

1import{R as t,r as v}from"./vendor.react.js";import{c as De,g as Le,a as ye,b as ke}from"./flow-condition-types.js";import{c as Ue,D as K}from"./stylesheets.js";import"./vendor.core-js.js";import{o as D}from"./vendor.obj-str.js";import{J as ie,a8 as Oe,x as Pe,O as I,y as _e,X as he,E as re,a9 as C,U as ge,t as _,d as Me}from"./userflow.js";import{g as G}from"./vendor.fortawesome.pro-solid-svg-icons.js";import{u as Be}from"./vendor.react-i18next.js";import{u as xe}from"./client-context.js";(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},r=new Err ...

2`+s)()}catch(s){console.error(`Userflow.js: Evaluate JavaScript action failed.

Low

Eval

Package source references a known benign dynamic code generation pattern.

TreeDoc.jsView on unpkg · L1

4Error:

5${s.stack||s.message||s}

7Code:

8${n.code}`)}return;case I.GO_TO_STEP:{if(r.kind==="flow"){const s=i.find(({crossVersionId:l})=>l===n.stepCvid);if(!s)throw new ge("Action points to unknown step: "+n.stepCvid);await e.goToStep(r,s)}else if(r.kind==="workflow"){const s=r.version.workflowSteps.find(({crossVersionId:l})=>l===n.stepCvid);if(!s)throw new ge("Action points to unknown step: "+n.stepCvid);await e.goToStep(r,s)}return}case I.NAVIGATE:{if(!n.url){console.warn("Userflow.js: NAVIGATE action is missing url property");return}const s=W(n.url,{lookupAttribute:Le(r.data)});n.navigateTarget===_e.NEW_TAB?window.open(s):Ke(s);ret ...

10But if this flow was running in published mode, the flow would now be snoozed for ${n.timeValue} ${n.timeUnit.toLowerCase()+(n.timeValue===1?"":"s")}.`):e.send({kind:"Snooze",flowId:r.flow.id,timeValue:n.timeValue,timeUnit:n.

11//# sourceMappingURL=TreeDoc.js.map

Long lines were clipped for display.

Source & flagged code

1 flagged · loading source

TreeDoc.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

TreeDoc.jsView on unpkg · L1

Findings

1 Medium6 Low

MediumStructural Risk Force Deep Review

LowEvalTreeDoc.js

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

1 flagged

TreeDoc.jsView file

Lines 1-12javascript

2`+s)()}catch(s){console.error(`Userflow.js: Evaluate JavaScript action failed.

Low

Eval

Package source references a known benign dynamic code generation pattern.

TreeDoc.jsView on unpkg · L1

4Error:

5${s.stack||s.message||s}

7Code:

11//# sourceMappingURL=TreeDoc.js.map

Long lines were clipped for display.