.rpt2_cache

rpt2_8c858beee809865f3260da2c4fc8c3c816c150c0

code

cache

069745b82f3408f41447a2fc3de2139894d2cbd8

07120b1e966fa985217fcf0e747512067f16fcd3

0b9d58de64d147e0ffb23e0e924abf5d4fb0b279

0dd0407ecd73bb47c9733281d4cd9985f22e4cc7

0e232898b7b4711f26afb6b036377a7d368f9fc0

10808000da9969335c6f0bfed11030877a685d86

14a056a42b6032695b3fa243b2146c1ce14e6168

1651a293633116d9facea6c78ced7b77b982b28d

184370bd81015126a2bb35af8995c98e41a186b9

1926fca7537c96c17d87cf3d0e7dce834fbb2ef0

1b75508d8794558878eb7909bafbf5e735b3a9b5

1dcadb3d8c93eacb93e1632f376da1d07888f1f4

210522acd9408d1a718da10eaf6336fee16a4ac6

221e6c0c90d74d2f593921cca4936a86f1911f3f

235dc9412f15f7ef71132f94440b54592c20ed39

2a3bc5a981f287209e2696eaaf4852c0f97f3320

2c61017b4c90440e1fa40c94dcdd121e71277b40

2e3e7d1f0d4d8532bf987884084956158a9a4807

323f8677fe3b471761d2f8a4575935a9da75faae

381f2175474d252a604ce86fd446c2a9893e89ca

3869a4de172ba9e9d1eaa3d6ac21fa9d2acde312

38a88ab613c6d57c62030f226353f0ab44d6fc58

3b721c5db60a1352cd1bcf0cbcad2db6105948a0

49190c6697317721c280868c5561c790e867d49b

4b1934a3117c479e4291415af4467aedda6c73ad

50b30eb7a6496c057e35818f9200cab9bb5fedbb

5f2a8bfa7f8754d0bd9087be3a773f5dfa6c73da

6181a37aa66cf7bd39a1efbfbfd8241238e1941c

6abeb7978e92fc8be0e4fec8bb42b11042fdcf77

758401aca587e1f446c2e5f9e622ea4e6305114e

76ddd2a5c0cd571d3211681d2a4b2151fd0c1a19

7bf3dd4d2ef36046def4d149322894c23527556e

7e102886e594d609f31fec99de91d339ba1a71be

7f97e661af434b228c54c0644fb235a7e0108064

80d1c37ed53cc97940516b5f2e43544bf808eb4e

81b15840ba638e3652a3ed35534f7d6fbf2b02b0

89d3e4da4debf72df5789e783761f3279e9d477b

8d2817102737624c8c6e077cafe981d50ed4bc26

94f7ea8e6ce5159a1933e90f11f325e0b8f859c5

a20210fa460f5be0bd64c34ff616b9a178df4889

a517b5fd3e3dca290b39d74810688dd8e3f1a526

a5e92b0e8af51643b7e85f51404f443bdbad3564

a69dbcf678b4bc33747abca6d61cccccbbb51788

a7d356a6a7dd638ae4704958fd09d51b6ed2e9fd

a8db8aad24e304958443634cd6ead887f354f680

ad05ac6129b1af342641b073b517af62c8db3ba1

af5d601b0d5b4815af3da7c7116ac88308b01367

af8e073ab051f00066218dcd3d0f47db4ab2e6b7

b58a0b081be739593cbb4cc21b4d9ea1dc9d8b23

b91e2769f4964c38e70c36744a10297dee2bf7c1

b95ee6f5491bf38394db792d042a2a25899e4909

bea39083205d9e69328479a58983905e6664551b

d739bc19006857dfd61b3347e8b8e85773da17db

e09aedde44c17b617b9cf628fae80a7abc42bb69

e89656f1fb3079b43228fad47178a1f2916cde7d

e97ec03d57b6254bfdd5c5f3c0ffc5791ce00d6f

ee2ee984ce3a135c53b6bd02f631ecc4ff49f756

f2695b40882a06b306ed62fa6c8cc6b6d38c6c85

f9ab3621b53d0b7ba03fbf79d69ac33cfa3a7b0a

semanticDiagnostics

Announcing our $40M Series B led by Abstract Ventures

@influxdata/giraffe

[![Slack Status](https://img.shields.io/badge/slack-join_chat-white.svg?logo=slack&style=social)](https://www.influxdata.com/slack)

drdelambre

bednar.b

bnelson_influx

chitlangesahas

genehynson

hoorayimhelping

influxdata-ci

influxmark

jzbridges

mavarius

monono

nvcook42

reed_de_la_mer

rhajek

scbrickley

tcl735

zoesteinkamp

subirjolly

chunyellow

brandentenbrink

blegesse

asalem1

wdoconnell

myalongmire

popeydc

reimda

sspaink

mrpowersj

bthesorceror

121watts

alirie

ebb-tide

ischolten

jsternberg

lukevmorris

palakbhojani

russorat

thealexpaxton

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

@influxdata/giraffe - npm Package File explorer