.rpt2_cache

4e9ba99ef5222237dc093197ee45ff403eb21f79

code

cache

47e7ebe9bda329cd530b6c2d838867e6a7668925

60c415094cd0c828c1a353afadcce466613d074a

e0cec061cf703607906eeab070d352619adfcd51

semanticDiagnostics

syntacticDiagnostics

types

06e4dd7aa7e827cde9d5611df7ab9a562c4ae255

187aa9704182e6cec601e95d4736566526b5c538

2ac41e32da891bedd5b1e9242b0cf4a232f5fd48

3579a35ffb80942766a038237482aadeda21eb73

4af23a04072f5146cd4d587120c48186536804d6

5310c84afd0543527d731e92d4df77168275f20b

561c4011f056f336ffa6fbb7f34e5b3df7bda54e

6651190f7e504918c5a7c47efa004fdd79524131

86450aa7aacefaa716274678f76fffc7d4ad637f

b96fb177029fb8887dc042eed1a3e25d209a1221

d648306d8ec3901f62977befad66d12527553761

df5aa54def95205074c754f0a53ae1c31eb5f2c4

f9d7ec1b5ff2d28d9481b0cb29c90ca2b310dae5

586cdca112a4cc0f5d02de177988e608a3b48b53

2b958434775e84c97c625e74d7577ce1a8bece40

721e64c2312150a89afe77097131c431fb60bd65

b3ff8a0959837e5daeee458ff02285497e635b6f

eeb80aef6d99369b8bd51b4a7cc8bc00828a5ea9

12fffa5bcb9e5fd51192e7b788a57fcefa2a2f1a

47fd51ee6fa4713bfcda34bad577f38db0e513fc

5a22ef9480161a3b7f225047f4d772b2774cc382

9a67077cefd9283e86e53b1298ab12316c746282

e885457744704a337e0e6d47819618f950912813

a3a1a1de5305a43867ac7646432ae085ca69dabe

0ac8800afa781aa4e9e0c52b465dae89e24e66e8

392a7bcc40a472b6832b88cd47bc6b4066ad0a3d

5bafa7dc246b75729c1b414037d300abb412ac49

a3f49b090c5e2c6150b2695c65648eac43864806

f235f206c9c3d442b599729da1073fa215b0a520

## Install ```bash yarn add @ant-design/icons yarn add @ant-design/icons-react ```. 

Announcing our $40M Series B led by Abstract Ventures

@ant-design/icons-react

bang88

chenshuai2144

afc163

zombiej

heskey

yesmeck

wendzhue

tangjinzhou

vthinkxie

wilsoncook

## Install ```bash yarn add @ant-design/icons yarn add @ant-design/icons-react ```

heskeybaozi

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

What are invisible characters?

Invisible chars

(Experimental) Package license has recently changed.

What is a license change?

License change

(Experimental) Contains an SPDX license exception.

What is a license exception?

License exception

This package is not allowed per your license policy. Review the package's license to ensure compliance.

What is a license policy violation?

License Policy Violation

Contains long string literals, which may be a sign of obfuscated or packed code.

What's wrong with long strings?

Long strings

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

What is a major refactor?

Major refactor

This package is malware. We have asked the package registry to remove it.

What is known malware?

Known malware

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

What is manifest confusion?

Manifest confusion

Contains a medium severity Common Vulnerability and Exposure (CVE).

What is a medium CVE?

Medium CVE

Contains a low severity Common Vulnerability and Exposure (CVE).

What is a mild CVE?

Low CVE

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

What's wrong with minified code?

Minified code

(Experimental) A package's licensing information has fine-grained problems.

Misc. License Issues

The package was published by an npm account that no longer exists.

What is a non-existent author?

Non-existent author

A required dependency is not declared in package.json and may prevent the package from working.

@ant-design/icons-react - npm Package File explorer