incubator.js

generateStructure.js

package.json

structure

.babelrc

client

.cache

00697f7ad9f3bd70171792d48384f694.json

00a0a8974076950f5389b2b604f2af51.json

01328b6c9ef197c4744e9ce0497b4b1a.json

01f109f4e2ebf82461f2dadaa85747d5.json

020809eac4c2fbf78dff8dade06bda0b.json

023354c20a772d9acce07d872af222ca.json

02f046982a0cf779e2e7eadc0737eb68.json

03d9f2d1192e53dfb91527df75b00f50.json

044b2f560705196e69b8237b5ae1aa88.json

0456c6f6372aae04e455ebb56753413d.json

054efa27cb8eaa87e52cbd19592263af.json

05b9680c6ff48a59a30e26105285e2f6.json

05c3253e0ca76d9179e9fc8b537f34f8.json

05d2b4b918390724dcbaea4d1fcdeb3e.json

0613af377fa67193067538906dd697dd.json

06576abbdc8c3de1d67155dc5ff25f34.json

066a93ecfdf7161e9561fb4b3162acb9.json

06c12dfad6a9635ceda87012589d23ff.json

06c8ac9aef02004838b2e442dd02560b.json

06ccb9ea850d407944ec84cfc207848c.json

06f721a6724901032e0444247a91a56b.json

073b082d9962c0733981aff9b3852d40.json

0759701110a5a9ae7902c3ca69750c27.json

07776ccbcd680970a2b4ce8a0fcec637.json

086119a64f47f2c293bdd1b31f28dd77.json

086b38a14bf138441a445bda407315b9.json

08ab1183d49e893028140fb59a381bb5.json

095c771da2e9db4e70afd6e5040ddda4.json

099b6af34c378a28b9c82464708ba279.json

09b16b87e0c5c31970ca89cdd571c872.json

0a33c91c6da6fdcd04c7c13baca9a186.json

0ac54305d080e19e2bb273f4f561014d.json

0af8e2b8f2e1c2549fd911bef2472177.json

0ba414e60f4fa1b933d0e9c01c206eda.json

0ba42496447c4cc1eabaaed5c67adebf.json

0c6b3fadd0b895a54f3069f4de2458bd.json

0c71a5c1a8160de854425c3554f71a4e.json

0c72ac1c22c853643c52a10a09215d23.json

0d4a649137f5133161c55173c80153ae.json

0e7f1bafa566085f7ab227bf8da7044e.json

0f4dd60c48fefb6da27f4c53126a5d91.json

0fd0339c5a22c31166de303ccf89c639.json

0fdc8134df2010f688962136f7c207e8.json

10cede8fc41f1763e5aa5da5877a0799.json

114e7d678c423a82faeb0503677d4b53.json

1275e7aa5befac5b56da0c87d5983a82.json

12838cbe8d4f266b4d2d75ea9ebff51e.json

12a854c3e949a31aeb6dd25cca009915.json

12e297fa8c525754175615cb6285bc8a.json

131a4e54cd85efe343abf7e77d7d2bb9.json

141b9e78f2b118aa887c7610aef168c3.json

1471c00980c10de4815f9cddfdc5e4a0.json

14fbd0675afb854b18a8014ab633647b.json

1503d06ee0da20ef2b951b4ad17cc764.json

151bfd6ea8f3c458a4a6c6610374060c.json

1572e50dbbf89852d2185eef5bc7117f.json

15954b6fb43de023d1c51e54a4ac8c49.json

1619749e429e4e58de57cfeffb8b8d37.json

17c720b5332c356827d5c67e1611b50e.json

1853198535be7bceb929b5ef64ea0ff3.json

18834e23b9545f1c90c4dad6acc3679c.json

18b485c1b9a2077be0b272b1a975591a.json

18ca476cbe456bb5fb09087a9653e594.json

18fd4c14093b17d34e1c76f0623753f3.json

195344340ab7bda083f40cb4877398c4.json

196f1d447bb7478d108c1b6276d45cba.json

19a12978e68d6c8ac28027e2b48440ac.json

19ba2fe74e115cc84fd1e935e68a9916.json

1a3154ffcbb355b3c189295a3c9abe0a.json

1a9f059706d3ce22c7c1d9545542ae1e.json

1b25f0110bf1069bced7e9e477e52db2.json

1b5f9d3a7d43cdfefee4c38197ae373d.json

1b6564e4547746ef8285c62a42187b27.json

1c36d24af8f54599f0e81ef6b091e154.json

1c8705e4406d54d7c3bc6540da21b87a.json

1cf59b712c65fadd8f9fe3eff7752a3b.json

1d01bd5d353fc9e0450e88fd5f416077.json

1d0f9ee27d2e169cdfe077dcc44e01e1.json

1d7804be38fdd6b72ea84824f79cea75.json

1daa32f8422a746b81395b9a281788f6.json

1e4425622983239a0562b0ec3f186663.json

1ebe50143e6c8eabfdb940316c66acbe.json

1f2bbe9b53140bd7391b05016c4de694.json

1f90f6024b58b3073249aeebf45f6e3a.json

2042da1513b1abe3d845c1a5ef707586.json

20504bf4ed8c094c59353841407e0481.json

20514fa1b5cf309ce56111169fcf9427.json

2092014ff74a38ad5f4437e083bd1878.json

2110863913b9d7d86fe8e93e546eaf43.json

2169b2097518456a199d1233496523a0.json

21cceba85ef2c0d8b604040f4d9f2e4a.json

fatest way to build your project with koaserver react react-redux react-router parcel to build. 

Announcing our $40M Series B led by Abstract Ventures

full-incubator

fatest way to build your project with koaserver react react-redux react-router parcel to build

tangpriest

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

full-incubator - npm Package File explorer