.tscache

abtest

hashes

a.ts-898f28700cab8ee2244b035674abb5be

b.ts-15fef3c9b095a842b07aff53e05e242d

c.ts-11035782f90a855affb6401b8255ed90

timestamp

amdloadersrc

.baseDir.ts-537cd4ba0442ca65039d07a9beada48f

app.ts-686b470e4b1130069ef2632983ad9fd6

classa.ts-f5afc62dcc5d1c6017ab37f430b45b1d

classb.ts-49f40883c659067b74ac18b1d7fd7e1b

classc.ts-2cd896b953c57b75a202f85d196bd869

classd.ts-d6ee254c60baf44efd33a03d02a061fc

amdloadertest

.baseDir.ts-0bb1473c88683a1859b74b269c1b656a

classt.ts-ab51849ab6e3cb41c104400338caacd7

classu.ts-fd54a907d081f59b60cc7b2c21baec0a

classv.ts-ebb12ec6469a4d27f10714d344952e24

classw.ts-17fdee592c86c4cd15647cbd6711ba49

extendedAppCode.ts-043eac54c42092ac4bad810c9d5d9271

test.ts-225db4ab2bd82579a564508ad75a20a9

amdtest

a.ts-58d5e46371ebdd83f90383630d21acfb

b.ts-790f7a141172a90b20b0121c84c56a64

c.ts-3843918adf45d54cfa33f15bdd70e653

build

amdLoader.ts-dd6017e67470f6df09bd9495a9a2893c

cacheUtils.ts-9588e73314ff4cafc853dc5cf2489d5f

compile.ts-93020f698a5d823bb1f82fa695deb9a3

html2ts.ts-d1a7414f14f630de243ed9a133bf279a

index.ts-f6bb6b66ba9c2f2a90a128b52a27c219

interfaces.d.ts-bcb2e3f1f0fba6d360993141de2094e4

reference.ts-c240a4443d3560f82bbf8aed46db2a36

scratch.ts-728abe47f505f4318451a05280ada1b8

templateCache.ts-1cf2a2deec4715519a13b74d5a57e556

transformers.ts-2b167e7392497b9368ed4e2015999014

ts.ts-b7bdf25ec756dc2282d8473db52e8d6e

utils.ts-375f6c09f7278e944c719b948793ef36

definitelyTypedTest

async.d.ts-e75b62ada49e186c199485395c8754ed

test.ts-3cbf03749729ea6ec26a0ceb58ba1faa

htmltest

bar.ts-6b2741bb3fa0d28cc9bab13ef8f63b43

foo.ts-eafa6c8f12de4bf494a7138e2ae6e1c3

index

.baseDir.ts-1f62f8e824fdadbe9d7f217d75dd8a5a

A1.ts-8cc040e3556593af39c7549ec2498707

A1.ts-c1042b2dc4920e20f3e7dd6eccb7468a

A2.ts-9c5cc4ec11b922fe3542fbe1d7055809

A2.ts-b05c1f7064b10f9ec10dd985210fdd05

a.ts-af211a40e373747c56a633db34477b0f

b.ts-ebad0bd271c8eaee854d54992045d7bf

b1.ts-09cccec665d4deb59a5b5aca8da01024

b1.ts-41c6a9ade6415fc4e6a55c9d36e574ac

b2.ts-0893956d7e03fbadcce28c0d2d6afe56

b2.ts-a12f2b0700250ffe5006d8eaa83eb757

bar.ts-5e6de091d135aa920ef67ff28af4c989

c.ts-b05eb67a3ef3aea5027114dfdb283e38

c1.ts-0d53558c5678c4161201549d9fac121a

c1.ts-b881ae8e73d8b13c8891981527e0a26a

c2.ts-015564844d8ba3481da70e9a3fb4f2c1

c2.ts-326e7b4483b8c76f4ae59693356f607f

foo.ts-13aeb499213c0ae0174cc3f9f7c6e5d1

index.ts-a4353b5a135edb4c0d1de09a20d23503

index.ts-bfe8ada679c7fd929102b39f2a6e764b

rootLevel.ts-80a1966b66e0a65315a8c67d2f2853cb

outdirtest

.baseDir.ts-a64d2d250c5cdb86dbecb5fbe37e12f8

source.ts-ab107e0f1ac1f8bf4e70a89266deb602

simple

.baseDir.ts-6df31ddb3846e5f682151861498b0a62

zoo.ts-9a4c721ba74898bf58055089eb9830f8

sourceroottest

a.ts-721e1bf58a252a24a0e5b2bcd084f573

b.ts-76364c7a49419da481f460ac9b8ad902

templatecache

.baseDir.ts-0b5968e68c8f822cecf57ce4f8fd245b

app.ts-376cedbf3f9d9c0325ae14128aa8f1b9

Compile and manage your TypeScript project. 

grunt-ts

Compile and manage your TypeScript project

basarat

bartvds

nycdotnet

jeffmay

nexussays

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

grunt-ts - npm Package File explorer