Material Design for Bootstrap (MDB) is a powerful Material Design UI KIT for most popular HTML, CSS, and JS framework - Bootstrap.

.git

COMMIT_EDITMSG

FETCH_HEAD

HEAD

ORIG_HEAD

config

description

hooks

applypatch-msg.sample

commit-msg.sample

fsmonitor-watchman.sample

post-update.sample

pre-applypatch.sample

pre-commit.sample

pre-push.sample

pre-rebase.sample

pre-receive.sample

prepare-commit-msg.sample

update.sample

index

info

exclude

logs

refs

heads

master

remotes

origin

objects

e4731727375f317518f44b29d086d8496b7609

c935fe7a6f5f84de2b948540fdadcb0c9b4dc9

d22a7f265f7ede6b0e8b643fe3234b6bb55549

3c2c349699d4de940da8a022ad78e2bc24a054

02523ae1730ef4c23fd9cfc913f1f5a283731c

2a7be26893c14006a0e1d346705949268fb716

815459b4aab14cb59c9e759b5542639d24de7b

8775884cd76860bbe2762c3c5e6e700ccd9767

1306b88c2303c193f7f2c173b7cc9831373e57

a36036be8d46d0ccfea7219a6ef7570c726573

71efda644a088cf35b25b547f69ae81bb31df8

0f86e8c495363785801e0d34092a22b00cccf9

05f82fcb53c604b77fa8d1eb8cfdd3cbe845d3

7cc1f0cd0733d69091108c9d4b76e6f6d56e45

81a12d3806103797b23f7471dc48a787eb7a63

a8eef101d2937d962d3b86591e591dcb65ede8

40367d2d9fd89961421782ba70d882234f7ead

b22714c90c0c23f9c15ea6cb70963302fc349d

b7c3a6517834a0a6bbbaceb23780ab402dbfa6

861e0458137f38dc988093c307ef06cb7cf01b

bed26fe6bcd66ebdb1cccda97e325c455889ca

cb4d56b6996c4ff855bfe71ab55530532480b6

d62f48acd9ef13dac360cce3e89ae25e1ccc82

e26843e09523d517bbe2b91cb158b38b791869

7474bf15e759896ce593f2478fc3b41f4828ac

36690bf58366d6291326b03bd2d5e47ab8ad6e

57a3033c3dfe65d4faef92fd2d401025e2bf1c

fb78a631bc18f429d47df0a0634472bd13ae72

e86657457869af16be63a3651effe1f0b25f0a

35aa861368a9388dd1f76cd172997a7881e937

782de6571b393a816abfb44284bc3029e6b6c6

fd4bba8ae61999a60a3773747e4323333b1eb2

ce44edffdfa21003088cdca35b8b72be381e3b

ba77e705df6379759752519d45bffba3746bd3

93e9acf62d0553f95c3efc937216912e9dd1e4

ed0d1933ee37f8e01373b78f08564933adf30a

c3176c58e7716386689c8ba6a9831302b92773

fb84ef3ef7c5b98084a023f913385ce5605401

Announcing our $40M Series B led by Abstract Ventures

mdbootstrap

aidzikowski

fkappa

gbujanski

kwilk

marlucz

smolenski-mikolaj

wojstan

mattonit

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

What are invisible characters?

Invisible chars

(Experimental) Package license has recently changed.

What is a license change?

License change

(Experimental) Contains an SPDX license exception.

What is a license exception?

License exception

This package is not allowed per your license policy. Review the package's license to ensure compliance.

What is a license policy violation?

License Policy Violation

Contains long string literals, which may be a sign of obfuscated or packed code.

mdbootstrap - npm Package File explorer