LICENSE

README.md

cache.json

dist

index.json

白路棒棒手写体

011a01f258a18d04122fe1e8d828840b.woff2

035c1cffdf2d4e80e7cd173c938ab149.woff2

05fbfedbe9dc185c872ba2eee7a802ab.woff2

0651f18f1c129fc5352cf05ee0b0b317.woff2

0cae1d18300fcd0ade94b4278ffe70fa.woff2

0e591de05857693b6d7011b325d0dfb5.woff2

0ecc2110dac401644d64a376a27f74a1.woff2

13e0514eb0f1b2b53e94c02be20aeea8.woff2

170da6d57a79cab48260363195c66965.woff2

1a8fa46110c3ecac9bbfaea69a1886ed.woff2

1b1c34b49819b1b210cdbe5a152443a2.woff2

1cf2ff2e3f3dc04903783d04a222ade5.woff2

2725fe85b2efc3d4a6cce4f376ad18b2.woff2

27f5eeda1dda2308538897968eb8f5d7.woff2

2aa30f2edbc4412929750d40d534c7a3.woff2

2b1424cfdee03d966b38a7eb05510fb6.woff2

372e05a09fae1a1638a14becdc04ef05.woff2

39bd98f11a4fdf51b75576c9f96e0640.woff2

3fa9a6295e993e1332469b9423912cd0.woff2

4071089a861f8a9f923f269e86d22ee2.woff2

43bac30e05b83f0b3a646ee84287f9d6.woff2

47b6338ed24c7ec837c6638ff82a3caa.woff2

48b558488dd20b62df42c8b2245328e8.woff2

4ec2af7aac78b37ae86c20a17e721789.woff2

4fdb78e8bf76f8539c754dd69ebc5851.woff2

54b6c662b7275032f04d78a10c86b27d.woff2

56ef516572cac4869b6556c4fbbd6999.woff2

5a56103c0f17e1d2c67fb5d9fe586e0b.woff2

5aa568de183e2089c836e2eacfea3671.woff2

5ff8bc2faaba75842952d869b2a6ca8f.woff2

62ce1c0e8ddd238276b333191fe37837.woff2

6707a1ede3f046bbd75e9d0aed739353.woff2

6d4760735bc8610cba1e9ea9248e01f3.woff2

6dbf6162b993cd6e8a2304efb7939dd6.woff2

6e1e97ee373dd38e3793c3f6ef1afc49.woff2

6f9adff950f748636d61ac620bdb59ec.woff2

72dab4fcefee90f89f38789820ed38e8.woff2

73fdcc6c484d80053d102d4df735a530.woff2

7795c616e54f00a667e42f18c88ec74b.woff2

7bbe512d0af2e7c663e3e9c560c3116c.woff2

7bc7e0e1ca6086063f58e2acd1d10db2.woff2

83d28eadfd64ba1b4707898064e1e782.woff2

897db47097f5d50b8804f67bc6816228.woff2

8a3bacfdbd7554f76fa61b066ff9bae2.woff2

8d3ec1a57b9cbd26a664cada6b56b1d2.woff2

8d790f5c11665e2c971d2b017f5b09f5.woff2

8d8bfc6805c353cfa94e8dd39b4f18dd.woff2

90a0fe366d714ea662138c78b97b5663.woff2

90fa064ce0b336956d959fcd4d8b0be9.woff2

94bedadc40e9204dd7cfca8c1392f86d.woff2

9bc20684c763eb4bff8cf427a76e3f7e.woff2

9d43ae9a3f8dafd6037b07bf0fd8d3f3.woff2

9eea43510e2f2619b2307a1c5a99ba1b.woff2

9f0c000beb18a6ef4206228f80c500f3.woff2

a1c51e12b9ed67e23f3d969207d6692e.woff2

ae8a5598323da6b3390b0dd3d5c7fb5f.woff2

b34ea5dc7f9a4b59ddeb318b5fc1d8d0.woff2

b56dfb48b469abd54e517fc3e7d57a68.woff2

b9fb81fabf4608df1418c1b7c130c6eb.woff2

be4668b4aa6b9538ba8e3b383adb0f53.woff2

c41a144eb0bbbebf3377ab00d2528e4b.woff2

c5f0a3faccc656485851cfda3e4a11f6.woff2

c6da2a36b271744eabcf2ec67c4069ad.woff2

c7447ddcca0ffa1eb474e4b7203d6665.woff2

d051a7707805ba4b91a274234637855d.woff2

d4c3fe21306e3cc5f1527d5fa2fb9dcf.woff2

d4e3b096bfd5821ce10b05551cca9082.woff2

d86e48db1383719e6e2f8eddeb4401dc.woff2

d9160f2de04ee13e31e3da92254f5e94.woff2

d9bcb0130bfd63fe4871b2367d977a26.woff2

d9f84d2f59ef85dbe010009d00837743.woff2

de37e7589f2eb36794ed2148e8a59ad9.woff2

dfa7d1a2a64a1c7bf18819876ba11aea.woff2

e3c7d563ef69ab124327fcf192ca73a8.woff2

e4c22d6b5aa590d0d915f7707580ff4a.woff2

eef46e68c3469c342072cb6f19077192.woff2

f0104ed4f097a2dd9babb07dbf1d2c2d.woff2

f3d4b65aa2de3f285f840773d0594a1e.woff2

f4bb8789f907178e78eca31230a98fa6.woff2

f6102055aa8f418d81ac33f4c0f5847b.woff2

f8a327c6317c499ca0bb832b01d619c5.woff2

f9afc9968fee1ecd8167471779eb2945.woff2

fcaa453a568706e2e941c40af8370195.woff2

fcae83d854ff3d14abc59e2059287b81.woff2

fe729a892d7c26db21fd513649a4b71e.woff2

fee20cc074a079fd24dc6cc5d698a7e9.woff2

index.html

index.proto

preview.svg

reporter.bin

result.css

package.json

Introducing Webhook Events for Alert Changes

@chinese-fonts/blbbsxt

konghayao

blbbsxt

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

This Chrome extension includes content scripts that execute JavaScript on specified websites.

What are Chrome extension content scripts?

Chrome: Content Script

This Chrome extension requests host permissions to access specific websites or domains.

What are Chrome extension host permissions?

Chrome: Host Permission

This Chrome extension requests permissions to access browser APIs, user data, or system features.

What are Chrome extension permissions?

Chrome: Permission

This Chrome extension requests wildcard host permissions that grant broad access to websites.

What are Chrome extension wildcard host permissions?

Chrome: Wildcard Host Permission

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Generic ad-hoc alert, uploaded by user or produced by system diagnostics

Alert title

Generic alert

An input argument to this GitHub Action is being exported as an environment variable. If a user of this action passes untrusted input, it could be used in an insecure manner by subsequent workflow steps.

What are GitHub Actions taint flows?

GitHub Actions: Input argument exported as environment variable

An input argument to this GitHub Action is being passed back as an output. If a user of this action passes untrusted input, it could be used in an insecure manner by consuming workflows.

GitHub Actions: Input argument passed back as output

An input argument to this GitHub Action flows into a dangerous sink (such as shell command execution). This could allow a malicious user to inject commands or exploit the action.

GitHub Actions: Input argument flows to dangerous sink

A GitHub context variable (such as issue title, PR description, or comment body) is being exported as an environment variable. These context values are user-controlled and could be exploited by subsequent workflow steps.

GitHub Actions: GitHub context variable exported as environment variable

A GitHub context variable (such as issue title, PR description, or comment body) is being passed back as an output. These context values are user-controlled and could be exploited by consuming workflows.

GitHub Actions: GitHub context variable passed back as output

@chinese-fonts/blbbsxt - npm Package File explorer