.changeset

README.md

config.json

.github

workflows

changeset.yaml

.plop

actions

install-dependencies.js

templates

component

README.md.hbs

component.tsx.hbs

package.json.hbs

src-index.ts.hbs

story.ts.hbs

styles.css.hbs

tsconfig.build.json.hbs

.pnpm-store

files

004cabe625b2c47a316ddd747ced82df4fe5760e920cdee1ee683ba6c107f070ea8073a24526bb3a7ed40f9d48ae7e4c930e872e287633d9cdae98d85d4c96

00cc06fe80fe136b07a2bcc0829446f57762adb43bc05d667ada3fcd8e4bbece2847684cfea95a01e30db9c3868cc3c106c118513973c630b7a64aeec274c7

0af4fc03d2ecf7155b911e07941ea071519cc573fc911548cdad0701587a3617d6dc9954610260c3d1c421adc4799ccec5835ec14b994d5fc5baa8a6f83e0a

0dd3563fb40368ae2284245842bfb6a16306ada3fba3cee98d3325cbf32c016110520edc72f4be5b3d8562e77196c001b2b499aafba19e15d3bf48fea3ccc6-index.json

1964986d531b57f13008a726001a1e7999d284cf8d03725c57160bc19406a20f8c508b10f838f325f2584daafdbc996c2dc6b0a82a0a8d67ec53898625d83c

1994a3d573fab75c7558a1f6f88392e35bb153a1a433a4735ca2e03686d1e66cf2f8f24c68954d3d11c0a7f0afb6aed981815629839d899b39dc42939632f8

1bd318b4f0e816c9ded28091d256ae7ff7d3b0e9ff3b262376377857e0801e53b59d3ea434c2e032cd746ed135c655b1479cafe5e4473c7fbb224ae36f4ae8

1f4aa56320af5e9d868cee51d81e2acda0b179b666e20ba6cded2b51d9581905963aa1ff6508d1a6eb35ef110b87c5c0e3f5363791ce9f68e7e493cf3ec5fe

1fc59cd022779599363bdaf4c68ddbf995372d97e184b7696a2d80f9e3ff0446cc343a1c34510d1d15540cfe726ccb2963b3c9cb52d7a1352d4e496c5c55b3

25dbbad20d0215a14306bac67d6c2a11b8b42641df36f82d704796655078aa1fecafc75e7729b267a1e403b0b7dfc097c4d9f5b98e6bd3be48632bf8bc183c

25ea109f898f17616a8840383bebff19178da02846f8715fd3b7c096214271385a52625ec8898cd77f2a6ae0522295414308374a203965bbf857a65e66a237

29505843f5686e8b52d0b12127823a579a5a09a3c7cbbee5dbe690a7d74ac45a4b1d23796691a87c9de8b7120c3cc6125a1bc94193969d90c2fc105b8e24b0

352148d951ffbb46d4ec5ff69a104339dd6250f508d9c568c8561668af0a19ca64cc5fbe5c8a2eb7b10cb73761ebf0a66e09d857d141f01ae94435b54202e0

358a98ebfc5f002d81dba724affd650340bfa0796bef02868fbc94e81cd69c4be7a7e87c324ac43285c4eac8abd61dfd12099a280302bef6ee5b14fd8d0b03

3aeab6161ee817758ee6f70fdb8d226fd21becf36f3bca06b02b00b9fa90199a33b85386aedb3da73f6768f18604576c533c277e95e3e26126557fe2a4f99b

3e41a10238fa8129d95eac97d849e26621c3c2e03ea1be5bf7dee213bb74692b33f58006199163bca54c6df43ab1373768595b66904a7123ad931fb1d5bb28

3f0e3fd5a97c79205f26ac042e96afa93adc201157fd56467e4866a8e06319be50fd1b8b92cba3c2518cb8e22b80c08c936c88b3dc21033ad20b752826b244

3f6b44e15bcec30c35ad475caf50d21b755e818c76615ae8776928c239896c7ede7a3be21207ccb2513dbb5820848ed5003720b2f4ea8ab429cf92b6744565

3fd81c0c3d112d76f785433fc6db9a6e224974859cb9b092ac4a0e9efc4d9df3dc5d97fd888cfa94d4d5d25198ddba94f791b917a4843345613238f8ad3655

44e7c43527a86f6f116069d2b4dd72c13411a7164ae8f818f99be28fd31d5b9505376248fcf14c6516bb3e611aa41120aaf96165dd45098985f0899b50c205

46b7e2d19fe0381f74f43589a9c95a325fd6d18d930c9309abff838dad378294771c21dbf5a03d5b7426197e8698f2d5d54131bf846794c914d8a35673ff9f

4b60241f6f527747f2f52cb492319da80abe1da96f414ce473efde488a48a621793bc4d032d7457f164f74aad7f3bf5375861a27347a542aaf0747d6401d3c

51eeb937fd9598197179aa4d14873e4d0c7dd76a27a58e4509851bbc4cc8199c1b92dba61525269e4e11e6f0669643baf97afe12fdea72bde3604fe8467c6a-exec

540178b96af1f1bb1c731e2a88e6dd01e2c11150124007cb4570f02dd9627e2dd223ee78056bc38e443913b9c224576ff36e9e94927ea515abd881be0224d2

5b735c8ef18dd98cb6923f808a2056eda01c96c78f534642dbcae1c14e30eeff29c592320f4b3462e6c12a419483f483f57b7311b682226335d9251087aba5

5debecfe5d5b12fc331c884d132539140d68e036224005693af893b054ba68cfb51a460d36699743dbd5708ee89783081769d76e8282cf6c331a928e063246-index.json

62c056a112b6f8f916c4e2e0109d9456bbbd46ef9c79f276781d894a297e6282bebbae6124a72808d7912c651d4dc6e563bb0352d95dad72bd9fb607c04551

62c1faf8626f14b3cb18de0e7a06db5034146c60be357dbd15581fa7d2e7ca1246524886e075149ca05806ab08cf0983526b7d7c3c1b5e7b6c2baee1fa3819

69b2b5cb6b1ad4dfd701aafb622e1e8d54000af990d27384981dca2fccb65a73cb5b2a3537668be1b96c5c5aea2962f47235019489760f1738a38547f1bb2f

6ed091a1280631d11210d1fb907c4fd06e8870c468b1e5c560cdfb95cf145c333b0a19700026a36bf5ca4b132e225e328fdcf219144c58775c1d2527f40e06

6ee7850c50318529b7ec2c8e1b1ceb2c1704b23ba196269c138d3909a28aca5321350765937948791a83d74deead027c2c9f3131008ff2d198ef30a82c565f

783ce68d26e8508ef044a24da12c7e63e598acb8da73820ec0759c65ae7c31deff6d5102e7e0202e696255dc15e1956303c506537f033cd732d37b2e607c6d-exec

78859a05a6f66a3d9b954fac882c30be08da1fcb3785f24221a62ddb01c7fe86cec66bb42754cc75e8fc109636356ae190f7082e4468fd158f78c1c1452273

7fd3731eea72f62d89fc72cfbd0b8ba0e32836c464555602293e8cabfb76d9b27794770df0295f70afbb21821e03a0a672943b6ef38135d8ccf6f018dcee65

84ae73d2acbff6d68b91cace63e3f840801a991e654f2dd69630782ef99520767436fa71ee4a96532c1eaba4a03e3270a7db8c2b4c4896241f1e224447d5fb

8656118b4445a347e8db20acfea1ee1d98900f0c69e85739fc6c5dee4454c207089524a9afe263675ce86e870cdf5c7f361688e87185e9f0966c38cd01087f

879645d028f36f1a1eeed52e47ad8e1c8a689dccf2b3cfe642d26d40735ffe59a624974e85a52c85fd4debf88392da9809b1cfd4eaf96e1db9234dc8c29a90

8a013c8d82297a0ed66ebe8311bc4f5422725897f540be5654b24af31d332009d555ecdcbadc60382a38f2fabeeef2d2c66ff089ecec5f76d49a8959e549e0

8de3ea7acbc4af5f84301d291dcf45ec14e1dce177ce2a719b74525802752b867bf3639022b44c4999ed00cdd21691517f4812d190c15b4ec8fa905eebb491

8fed940668dc88775ca95ddc7aec398d662f0d371091aad1b1c113872355a78e0ecc6dc5fc0cfd2190e3c1f4a9ec7628eacb81ea5fb29ec17575f88dd46e18

92f1e0413e4ffdf7e9fcbde9c1865b465aca44ef07f49c57f356c72efac1757c17208d2f51279bc2af7e947ef365cda1c8795d25838273d807f8d9ff486d7f

945cd479120be1e77163bc1216a29a978ed091779a8c7f8820155e16c1f9cde854c769490408d68ad69e80cedff0b9c36124115da8e685a88a71cf41d7d2f5

9530fc7b936783b8c08f83efc065b4b49b6eba10ec493a5725527d98b889a19ef0e98ae732d3812967d9bd31b3d1f062577b260945d9363c34c5c0ffa4a61d

954d8699a2b7fa09df09babd877f6ad93c1818c6125c246b3252e734849eb8960a529cecd418b8fe45f20e4acdca36b91d479cc36f3c9ad4157125c466fcfa

957582eb58ac865eb20dfb644fe18e71e907d9bf20f596cd386ea526f10d179024b65661bf7b170eac7076441a08c52be8bd2a027e2d30799601b64926b448

9fb06a5fc4d1e6af87eb7f49e38a6a09a5ab71f9add894331b6f087f53adf2b3be80cff8e71b92e2826b7b0b89b40dd0efcddbade555737e8dcdbb2f87ece4

aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58-index.json

ab870c7d9f3ba93fd60e1c7949a7382ddd73de44eb1f30b73a674059c742e2ac69a72dcb6413d9f2ac5b9ce643d09f0fdb045a4646afa1123f59e159e69f8a

ae061b93bd3f7143a55922083f16ae281852332e5d1cee867417fc1b1189400def1e6700fb03ef304d0899e31c1e23f1d38cfc6c6efa14a9466958650359a7

af795c0c0821c5d5179914127f524638179b45e2fa560dcbebe79257f7e366cc1e83d419ed22da0ab67f36eb85567a0a942ce1e857fce9157026602d240c40

b2920d002a0f3f3c917629f9f50579f4b2027779f17aca589a96e04d6b6b1a35745db534e5127f98dac03ae713108d29955f51510d732f59bb9e63bd46328a

b6289deea99ba426c19a0081ec8d92c71c4fd438016650e8fbdfc11dfb193eabe855943e0baaeac52634648c5765abefad68428071c0619ae83479a350c2f6-index.json

b8b0ced86c8dea4d33ebab4d57dc7dc5a73622c822cd0d209799a41ebea78e3c56069d70941610d2466d251508f562b68ac9dd09f629b05931ff275c9abca7

c131af3cee87b1e2976a44d247bb4947f672f8bdaa80bbc9e7ae589c4598c55b1cfe67ce549cac58186d761f1539d4f12d116fc7487f5e1d6afca21c7894af

c2b33fb948bb22d79cb55409910b35d2b44f640d7c0d47b2d1e3485ae0cff5cd03fc82392e022bad8e8cd28515884f265c7b2fdb33e6cb52bd16aaa0107132

c497bf0e46ba69f12b50bb5d7cfa98e64a5d3d0a559919f5ecdc0d4fb1060e75e9bd469f9c2ec29d9c479d9764af82ff04a779baa849feb75a0fb2b6cd81ea

cc854e8bd2f416a8d4c5d04b6792202d921d077255db1fcaee8ce9ffcc55ba7994452145972722f54d804d98234991e1eaeb1329665ff32e9a8ad1b8b86e3a

d08f1a9f3681ba91db600903c1cdad54e909d6c28c62a198cec0e0f23a7167dedb8f928bb08956e7b86ec309561d28930a74d09377d821e65dfe664c622ba3

d0bfc749c13c616ef3a6ed1cddb12b5bdcf034086d71c148db872fcceaff179e12d6d5596b1bf34b939a273cd2740349a7d4121651d2c21ca3b30f6d2eb464

d569bd81f3778a2bd590f3ce6c6bbc0bb15ff882d0771a6075f1625b553e135c7a597d08770fd0e0b8959820efb7e9954a49b59ed9f06eddbc5f488232f558

d92b5297bed3719853952ba6b06b4e9e114034a285416da7530710c10684913d9b14c3549f29cdd34df41348ec5ba142aa55d6ce1e7a7dab82e7169c07d9b7

da548d3a66e9026f6d903f1ef0900af4bc2e148700c855cc56f760052d7297fc213b76e322aff4608299029c8196955d64beb9ac94faed4b42b16560b220c5-exec

dbd6ec9969ea9d859a9fd30339a5dd4fc70f2c18d1b49a9a298389a4473a8e7f5a6fa8d2a820053643c143d7202dfdba59236e19ac28b5c19225d2df52f386

dd659a3d70b66774ed0249a250d7b0a05c5ced37ce4870ef433929dc2a4b491a1e5509f4cf825cc85e79757a7cd3951be190ca96d9979d874e8bb1c5530aa2

deb738ab63d081d3203475b2e1808204a4c84055a47deec42686a254f056e913b674f93421d29d110f38f44cec68dac711a5cc34b0b2353381b16d9fd8045d

dee98e8fbc37651207c83fa47cc3f4f21ee086a6f36f432a1cf363f3c24d14d95663a163db2be0cbf9b44163ebe955a9d07da5f22cc126b42e75bf71f2d89b

e05dd9e2fe8240278f0b17dd6d4c72778fe42bd06a6b47a1c7c60b9c3caf37b5d2579f280ce78cc18d314e852dde544b46d40be207cb6c93b05e9ada39c0c6

e11f0a364ccd28d40be3f81af9ab69dd00eada2afa03f99e57be5088248f8be42ab74696000226a45571cf095c960c5ebf4d3437c10df4d3018079a0d5b89d

e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3-index.json

e8a4139fba86e1b834627b045492c6bb962f62a06f5e4322871a2057a410144aa5500e2258a9017ea7825b431053a839a1307d3c11a3bb73184ebc2cc4e0c4

ee96f06efff4e8bd7ae1720fc19947da61b648f60abf984baa63f01b53db4b5f6c2803e28716884c4e5fb6f4ffb71d028823c27f14065897fc12bd948b87db

eee63dd2401b3a06daf9c0699ee625d28c2f4a73f6425d2042effea0daa60194c8ea87b38fec4518f24cc0e899d9d3c0ebf1f474ec8e6fc99757d5248d28d9

f032a41bad244198cff5b00a97560fb8f5f0f345ab9015ddb6796229c88961685808520392be6a4778552181c9c4b4ddc0e01991bf42dfd573e2e0ca2e2ada

f0b2809bf725e159a87e08a59825a1b22afa0b8ede467069c2a2bdc582697e60ff95ebc7b10c13822a69202094e9a3402cb0274e508230c0045895fcdd8d76-exec

fa0d036b4226eb4a588bacbbaa3a78cda773cec490ac3c8987286623e904e7c0901984e02b33d6b84fc3be9e032a2c50dab3b4c7c613fecefe2d8836bc4b24

03eec733729fc5990221ba8384423e6117e04e4eee7bc7d537090c5fdf95680a7ab4379a2f1dde3d802b71b669da47945a36c31bd3eec1140a167f1157789c

05ec71139782672cd2822b751fc1f4578190ebda03c43a3f49387e09a47003c4d9496491834f82bf8c05373ba7ed5743b1e950ec4757ca417b601115eb24ab

See how Anthropic automated 95% of dependency reviews with Socket

mindullepkg

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

mindullepkg - npm Package File explorer