.github

pull_request_template.md

workflows

node.js.yml

LICENSE

README.md

images

io109mf3ua2tfkm2lkzq432hu03ys7vuv4d5m40gk.png

io10u9dv0ys93nmr7smzyptpkhlhzylt4wtqzrvld.png

io1343t63p68pc9h76hmy0azvzy0l9msfetp2at70.png

io1343t63p68pc9h76hmy0azvzy0l9msfetp2at70.svg

io1350aa78f2h4czfn67e7dajdh7trg3749rp40ne.png

io1350aa78f2h4czfn67e7dajdh7trg3749rp40ne.svg

io13envp44hps9j85ulfvs6r6k99wagaky60pzl2c.png

io13z9y0kqcgsmke00xwdalcup2zz3pwhuhexd22e.png

io13z9y0kqcgsmke00xwdalcup2zz3pwhuhexd22e.svg

io14ky4h2u6ahq9vprrrt9u62fszzkwu2tz04mf03.png

io14nhfkywdfvl40evgsqnh43ev33q6he8yez8c8a.png

io14tw8gyn3p8v5fcmvh4c0w8797ryjrlrvnsr6zf.png

io15qr5fzpxsnp7garl4m7k355rafzqn8grrm0grz.png

io15wrl9ws86vvq2qxz6zal72k8anq8mz8sx8n65h.png

io16e77pc9ql4a3thyrfzaehe6z70zc2pz5x60q22.png

io186ngxd2tlrf4nnv7cmsgkkhv9ywhrkyq8rejue.png

io18d6759s7k4pgw842844vf9uktrcvfjdwekw9ea.png

io18lsyxgygtesjggcj2nyqyqzgwxlxsysc9lgmg8.png

io18n9gze9dhapgml4jjtpdrmycq0m8e8kmden7fl.png

io18ndhcj88pwz5a5h68yhzz6r4q8vykwhugq45ns.png

io18v4l9dfr74xyu320pz4zsmgrz9d07vnvy20yrh.png

io1990thrrc9cvxhjmsmx5pysznqs734h6uhxfxkq.png

io19fsq8e9krrlng4ay5gyq6q5tqfym28yq9ly0fz.png

io1a35seh2y3c7tk50dzdwlwgcpcvn94ruqsshltu.png

io1ahh04jn2zkqlug6feh7rpq75a75p3rj42hp4ch.png

io1c7unwg8h8vph89xwqru4f7zfa4yy5002wxvlrm.png

io1cpx682vazuf4s4amjd7jlwejr5akc65plgmdru.png

io1d4xnudyemu8f7tjtqt8vpzyj3lmc4kvx7fszpn.png

io1d77dcytfk5fsck089eg7669gfpqunrx35ue5ln.png

io1d7zv3k2t2ty3236mup52fv6pvnqu9rwpdkcde6.png

io1d7zv3k2t2ty3236mup52fv6pvnqu9rwpdkcde6.svg

io1daejpenv38639dw8xplp7c9zr4ff0c9p9kfx3g.png

io1etcq5krprmxnqg9jqxzfefm2xmyx8gq5p20lwg.png

io1ex2s5f8f3d7hruzktslpqpywt78vgvzsx384dw.png

io1f4acssp65t6s90egjkzpvrdsrjjyysnvxgqjrh.png

io1fs9py0ck0e8jjyl0eh7sqj56r0knaswd0s746d.jpeg

io1fs9py0ck0e8jjyl0eh7sqj56r0knaswd0s746d.png

io1fyx0h7decsmr8hw3j6xsv2vkyfl0gw9fcz3hfz.png

io1fzlznshpukgtm7zgzejjnw8qsynuxyzrwv629k.png

io1gafy2msqmmmqyhrhk4dg3ghc59cplyhekyyu26.png

io1gafy2msqmmmqyhrhk4dg3ghc59cplyhekyyu26.svg

io1gtyj2h272ghg8vtw5ydrhgzv95a0egre4zemtf.png

io1hp6y4eqr90j7tmul4w2wa8pm7wx462hq0mg4tw.png

io1hp6y4eqr90j7tmul4w2wa8pm7wx462hq0mg4tw.svg

io1hpqrl7ay6zhsusctz2x9260rxhkqp3xf7maaqj.png

io1hpqrl7ay6zhsusctz2x9260rxhkqp3xf7maaqj.svg

io1j9u0fmy20lm0uz8gfrh2c0wmuxjl43cdmgva4a.png

io1jlnvfzr8lhper2xla8gknmxsqhgajq5ravu4wr.png

io1lpaw6pygngwaq9vans3tp4tmx3dtzmwa38cf2d.png

io1m43dzu4q5klmhu9yffperyrugu8dag58kq9syu.png

io1m43dzu4q5klmhu9yffperyrugu8dag58kq9syu.svg

io1nasw2uce050w7d5mz4005hcy3kx4zz2zhewav6.png

io1nxetpma4de3wx6tqcgxdtj5wc64a24t64dc76s.png

io1p00c9unkxz0zal2fglhguz3y3vnjd6xlx24h8m.png

io1p3dtqfkhf3z3xa4y0xp59f595r5e5klwwnrex7.png

io1qde5ded9wg540tpv4dkwhrr5lsvva2ga3hf6ry.png

io1qfvgvmk6lpxkpqwlzanqx4atyzs86ryqjnfuad.png

io1qjv68myk2ymtagq7gdgpzw3pq4ey0pwuu8z7pj.png

io1qqhzumd747f39f7zfen4f6ulyxhl774tknf778.png

io1rjadsk4xdleuztwgf3vgrzrwav5urwumaakt0w.png

io1secz5lugnzch9h3ed6esf47czgr3y7g43k5jcv.png

io1sj4uk2pjhesxxsd9qy52avwmgw4qzazfrypm04.png

io1swzq8crn57t3ngyj0gtxgt98mnwxg274knr566.jpg

io1swzq8crn57t3ngyj0gtxgt98mnwxg274knr566.png

io1t585efypl4e9ex7xks2upnjm8saawfk0v0s5sj.png

io1u346nz58mj5cjuj7ng3cn96upwam37v9axtju2.png

io1u3wetfnvla4tt6dhjm845dhsv6d08mycve0w0r.png

io1u88pcraz9mrf8wk2dag8d0xuf5qc8hsuxt9s9a.png

io1v25anp7t7nz954gdam2m27eqp4arr93jly4maa.png

io1v5m9d7zrs852xkdzdresqf3phwc5cchc5crylc.png

io1wu3dd95vn0kexpftahsd5eky3f5gqxuaykl039.png

io1wyvvmta30t72xzqe4079u3pgs6x5y2dx8ue25z.png

io1xge7h37n7xhrvjakutc476amn030fdcucyvu4r.png

io1xgy9hr4g23ffz79apa8f95lay3668g2e57h6j2.png

io1xpvzahnl4h46f9ea6u03ec2hkusrzu020th8xx.png

io1zakt2yfmfzzm8gv5h45s26krlcm6fw2unck7a2.png

io1zl0el07pek4sly8dmscccnm0etd8xr8j02t4y7.png

iotexchart.png

iotx.png

index.js

package.json

test

token-metadata.json

a collection of the metadata of all tokens on IoTeX blockchain. 

Announcing our $40M Series B led by Abstract Ventures

iotex-token-metadata

a collection of the metadata of all tokens on IoTeX blockchain.

haaai_202108

koishi

maswalker

qevan1

solan

xueping

zongzheng

taozhiyuzhuo

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

iotex-token-metadata - npm Package File explorer