.DS_Store

.editorconfig

.gitattributes

.gitignore

.husky

husky.sh

pre-commit

.yarnrc

README.md

babel.config.js

example

.expo

packager-info.json

settings.json

cache

development

babel-loader

00fb31a59f8059a371925c6563cc997b.json

02864927117d03b881e7a8edfefbce1f.json

03baac388b3f9a631dca74f8f5355871.json

03bc10b4a5ee3eedb5e5f050d616c7ca.json

078514ef0b378ba9f78589e2d9ed00f0.json

07b3a89a9e74b685cf404ebf38b09cf3.json

080f366125f90a9e8eadd83a478fd0a4.json

0870d39da57bb2851188686e42cd8929.json

089ef8767f5d45067bcc9b748c2e2ca6.json

099f90b9def7e410f3bba04d6226387e.json

0a242186b7618fda93384aeb3173eaaf.json

0a579bb4b1dc23ec08a88f1bdee88608.json

0ba90d135dbde2f2ed800d6988b78450.json

0bb2866e03fb170ecb2af745142093ba.json

0bb36a2fb4073700b144f62a027bd1de.json

0be51050d78340dc2f89663ad0af3632.json

0c07be62e43d474eb25c09f670fb08b5.json

0c837f034f4f17e8b4762c3d2df80d5c.json

0cdf4f458fd0cf908dfede501bdba0fc.json

0d31f492a7a9c529dbcbd75b848d6d0e.json

0d9788739cbfbd79ea593eeaa1887870.json

0da5caa9849b893e893d2f84251d2b0c.json

0f7beaa387100bbf52b0795fff708e9b.json

0fa2c2dc537c942ad8aa7e16f3e3ee7f.json

0fbfb2dea0d4ca9896ab83137f7a443c.json

119aa1b9951b02dd534f8968d8d3bdcc.json

122d66f7c19d923eda33d5be469f98df.json

12f67411dabf1aba4c19bc21578a1eb6.json

1373cfa1a25ef0d52cb4356053bd50a6.json

13f991ac86a7338392f35706b6f3ff13.json

156441416de4a576dc90c34dbbb005f4.json

16431afdd306659127e684ef2c528a5e.json

16d0b8dbc4e2615d53d7a99d3c399b1c.json

16d1bc10d8e4f05640c709260fe4cff7.json

176b3020eb65c46ea40baf76391fdeca.json

17c2c08b53b428a4549da5c8dfe32283.json

183decf56ac00edb29d05a83cb230ed1.json

18b98ff69a443c8d8c34b1e908c8c8c5.json

19b862353f8639c724c77fef48f745b9.json

1ae06e69db0965f0680818d1a4bae914.json

1b60e83cd9326cd1bedb362ca3695db7.json

1d75e19efb03e53ecf3ac88a9bc660f6.json

1da1472f2e94b667c4f3d73d437b78d2.json

1db83c8bbf361b4e9c9d637ffd3fda9f.json

20b5cfe5b4fae8cc46f24e1ad10f084b.json

20e5a97e718e32b1e4793147d6f69e45.json

2205972b2a20db62efa79ce469cfe964.json

2213676b835b1649f016c0bff6b0d893.json

22e45563d6234e853ec8e4a4267750d8.json

235079d51d6d83ca54da405649b91110.json

23be422a323e77a515117c42beac5044.json

2572f610636111e63226d070b6df704a.json

2662f01bd2d995efd4c68fb1dde0751c.json

26cb1b1abe574d9b890ef696f2871346.json

26e511c3ed7ffeb19f2a5d51e2cac69b.json

26e6a4ea55e0d322127634128523cad1.json

288357d67d14eb8a67ea7431f3c8416d.json

28de677a319035c81b48e51b8c8801ab.json

2a3adcb3c1ad03050e8262f913537bb8.json

2aaeb9279315ba2ad10a4c0f551e8645.json

2acf873c8a41c7ea75a5cc3ae31878f7.json

2b68997a650089f484e2aa3b04e19c17.json

2b701f7ecf1146a2266cfc4b1f85883b.json

2c02bff6f2785c6f9c97e54794c5cb1e.json

2f24be2c7134f588272fcf9f397008bf.json

3030b35c886f71dc0c5445ba8f6f987a.json

3053d7b372b5a38a9ffddbf16715f2ce.json

3067d2c72bfaf66f5f19c7909af1133e.json

341a6c60339e92183d4dc4beb411f72d.json

34603acbdde5dfab35a94ddba2a32d46.json

349cd67f61ed6f6ef9bafc83ab8d8fe6.json

349f0c8c11b69e43a478d773b131d4d2.json

35011e104b58754e49c4d3d702a2f61f.json

3575ff3ca012124bf251e6cfeca7b7d7.json

359f8f7aff4ad2f996000b550df5b917.json

36865faf642c5676bc5f905a17d39810.json

3690ca8f7494abb6bbf399a72dd529d0.json

376ebb0e2cf53138b2add663f358ad8e.json

A sweet candlestick chart for React Native. 

See how Anthropic automated 95% of dependency reviews with Socket

react-native-wagmi-charts

A sweet candlestick chart for React Native

jmoxey

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

react-native-wagmi-charts - npm Package File explorer