.gitkeep

0b0af80c3f290ab5c906e75be65d03fc.svg

132ac441c0609f7a40afc6cd3fcf9864.svg

1719d2772ca31440c7d2a3909f213d8a.svg

1b2fb62f37f1c1e59208f4993714d166.svg

1bfb12c5e9bc97db3ab2352529fe723e.svg

1f9ff7e74258bbc27d6229378bed4ada.svg

2141c8429cead2a721a6ccf3b59baec4.svg

225fad06063f28872e31210cdde42182.svg

2b32dd75e86dce941dbf10ad87b15ba5.svg

36491ba3bc5a9cb342a7f9eded007dcb.svg

36d6cdfad01bcfc72181659e90913901.svg

3a8a65d2fc6e6d91634eb83e59206f4f.svg

3d34fb98434d9adae9814b8b5e13b1ce.svg

4257dfae39f3c70a87f2c72ba4d60196.svg

459ebe418a9783cd0b80bdd8b98e5faa.svg

4baccccf5a9c659a681890db40fdd3e0.svg

57d885330bf5562505d4efa8834107b8.svg

588e89eedb60f23973db0db200b9994c.svg

5897d807850a98c27da8eb9af5f2b5cd.svg

65d9d0330f048a63c92ffa41152db86b.svg

66bba36fc6b38216a8504c8e5707f1bd.svg

6e09f1ca2f287cf199430b1e513280bc.svg

70df93976161913460c37ece1d6d933a.svg

72b925db5d850af26dabbfc974e0d559.svg

72e442451ad096f52db2057313aa6eb1.svg

781d0c2df3bec0d12cf4516427019948.svg

78fc65139103b0051515ba2ee20283d4.svg

7903f464ebfcaf9ba4669757e1d5c1f6.svg

7a228775c8f260541cc1de758c74d6ba.svg

7bea82702534cd03acc6e64ba3d547e6.svg

80151e418c498ffb9ff44064582eafa8.svg

865634cee658e2e0ae76af2078344137.svg

8a6affc91ccf90da9f5d38ea85aca5d6.svg

8b48b8f13fb202c31b004f14cdf68cc1.svg

8d34ece3f5814fb462ae231c10ff6cc7.svg

9954ca10aa920adc38b71c5e7e260bb7.svg

9a5dea54d4e4b11168794a414a451e8c.svg

9ec2322fb936c356f331605c4343ce9c.svg

README.md

a583e45cb6e642d138a163f7bbb84a9d.svg

aca151b3eb54d1a0acb50bd7d3ea8fdb.svg

aca23a699d1c7d42bca46f18009cc93c.svg

b55b76b50252ad9bfabe0ae268b71c5b.svg

bf49ab1e0fcc643db924f67668869b64.svg

bf939349fea83a8ad3ad2314826b5dee.svg

c58a3c5791e0a71180e98db5572c3b0a.svg

cbcab546708d6bb9696c84d5cf4af366.svg

cd8f1f8059946ae92f13b6164214579d.svg

d21a7fc1326a13c89f98b48c1b0cb747.svg

d55b1318f2f8f923caaebb5f7a724e97.svg

da407910cc792fcf05ba0695711a34a4.svg

dc4b00a232efe2756cfc3c84160303b1.svg

dc82aca3c31be2d29bf8208b62b05634.svg

de20966a1c8f8971222d709eea6cc226.svg

e209223e60d1df7e72a67107fd46d29e.svg

e3161356ddab64ecaa10850b09390292.svg

e3977401e3d0b95243b0d6a89e1e3ff9.svg

e4bee17c343067ecec351eae994994f6.svg

e68a249e1638bb1ff76121a8d769d8ef.svg

ea4f4488fadb13c24effbaf2889e6f95.svg

ef802ac4fb0ac6efbc66594f71d551ed.svg

f41f55c19dbeaf36c49f14b128b88a17.svg

fe6c8fb1bdcfa60b3d3d6acb13da5a63.svg

node.js

package.json

style.css

web.js

Please see: https://github.com/mozilla/addons-frontend#addons-frontend-blog-utils. 

Announcing our $40M Series B led by Abstract Ventures

addons-frontend-blog-utils

Please see: https://github.com/mozilla/addons-frontend#addons-frontend-blog-utils

addons-robot

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

What are invisible characters?

Invisible chars

(Experimental) Package license has recently changed.

What is a license change?

License change

(Experimental) Contains an SPDX license exception.

What is a license exception?

License exception

This package is not allowed per your license policy. Review the package's license to ensure compliance.

What is a license policy violation?

License Policy Violation

Contains long string literals, which may be a sign of obfuscated or packed code.

What's wrong with long strings?

Long strings

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

What is a major refactor?

Major refactor

This package is malware. We have asked the package registry to remove it.

What is known malware?

Known malware

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

addons-frontend-blog-utils - npm Package File explorer