.babelrc

.eslintignore

.eslintrc

.npmignore

.sass-cache

1e07625c777283513c68a5fafb89af76d92d64df

_convert-units.scssc

_gradient-positions-parser.scssc

_is-num.scssc

_linear-angle-parser.scssc

_linear-gradient-parser.scssc

_linear-positions-parser.scssc

_linear-side-corner-parser.scssc

_radial-arg-parser.scssc

_radial-gradient-parser.scssc

_radial-positions-parser.scssc

_render-gradients.scssc

_shape-size-stripper.scssc

_str-to-num.scssc

36fa858f3dc040b1e7fdaaf45fc9e283476c4c5a

_breakpoints.scssc

_mixins.scssc

_variables.scssc

3c596b687de37a74517d945d437a96e4e59c5a09

_asset-pipeline.scssc

_prefixer.scssc

_px-to-em.scssc

50ea9e0b32bab8946798da3f11b3eb249c117722

_bourbon-deprecated-upcoming.scssc

_bourbon.scssc

7bf1d98c42f6709155ff8dbda1db4f9db66c37e4

custom.scssc

layout.scssc

829b3f7e28a79f69e7c11361c6b615783d918226

_new-breakpoint.scssc

_private.scssc

923f1600254893665fa4cbe2486ceaf440b13c6c

_sass-helpers.scssc

946aebb7af5f209927c04d25fa08b41000163362

_assign.scssc

_color-lightness.scssc

_flex-grid.scssc

_golden-ratio.scssc

_grid-width.scssc

_modular-scale.scssc

_px-to-rem.scssc

_strip-units.scssc

_tint-shade.scssc

_transition-property-name.scssc

_unpack.scssc

9d4cc60393b7bd20817ef29d4ca0e2e0e9bfdaf9

_button.scssc

_clearfix.scssc

_directional-values.scssc

_ellipsis.scssc

_font-family.scssc

_hide-text.scssc

_html5-input-types.scssc

_position.scssc

_retina-image.scssc

_size.scssc

_timing-functions.scssc

_triangle.scssc

_word-wrap.scssc

9e248b39a407bc665daf36bf6cbe411787870189

_disable-warnings.scssc

_grid.scssc

_visual-grid.scssc

a4e9ad1e4f43b6160d67c709a6afabd5b6f414a8

syntax_highlighting.scssc

a9d941062b6592771cb206d7110a3f21e657778e

_animation.scssc

_appearance.scssc

_backface-visibility.scssc

_background-image.scssc

_background.scssc

_border-image.scssc

_border-radius.scssc

_box-sizing.scssc

_calc.scssc

_columns.scssc

_filter.scssc

_flex-box.scssc

_font-face.scssc

_font-feature-settings.scssc

_hidpi-media-query.scssc

_hyphens.scssc

_image-rendering.scssc

_keyframes.scssc

_linear-gradient.scssc

_perspective.scssc

_placeholder.scssc

_radial-gradient.scssc

_transform.scssc

_transition.scssc

_user-select.scssc

cb38d9709443c741b3f60a55530886551d8672e4

_colors.scssc

The JS Buy UI library allows merchants to build Shopify interfaces into any website. 

Announcing our $40M Series B led by Abstract Ventures

@shopify/buy-button-js

BuyButton.js allows merchants to build Shopify interfaces into any website

goodforonefare

lemonmade

shopify-dep

blittle

jplhomer

wcandillon

bpscott

andyw8-shopify

antoine.grant

hannachen

henrytao

nathanpjf

tsov

vividviolet

wizardlyhel

shopify-admin

vsumner

justin-irl

megswim

st999999

crisfmb

netlohan

pmoloney89

maryharte

The JS Buy UI library allows merchants to build Shopify interfaces into any website

minasmart

richgilbank

tessalt

harisaurus

michelleyschen

tanema

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

@shopify/buy-button-js - npm Package File explorer