.cache

esbuild

esbuild-linux-64@0.12.20

skypack

pkg-cache-3.0

content-v2

sha512

cc058bf0da85e86afaa43708c7cc806e2f46adec2907465709a7b59979728e300882a2d909e6e776c8750092642646637b925df1f645bc68a684ac6dee2d

46230ee2e2686256ad7c56e95bca89f74d30904a0f83c3863543f2c61646ea512fe81e9d79955b3b92867aa58ea4dda5c49cf56b86565669e52e2eda8dab

694ea4303fb225a7237026dd14685c78cde3a05499cac9af9392961502def778033a68735e620834f6623fab93f20318faa05509190d7f882c5d6787db97

1986ef806d08a6f98767afeaf5f98441e7ea656dda3ab1bd400614b94f86ea6bce086162453b9a41047b6e413a2423cd0345de85596958e3bcc4cf6bcbcf

048015449cd36d4a64a554750e5f58671e72fe5536a841683cb7bf1170222737058943b574a25953f8cec749c1ead41ba4bc9c4696e0b451930eb61c8ab7

1afca48ebd6db2165fdff081b55755fa87befa672baf46144cdbaa10f1a01ec3f294cc83ee7bbfb92a6d7a961d4463a5347d710090f029ad95db4d41fe0c

28b51580bae098624e7d1ed21bff3dd1781de5c9b245b57a3128094269c8c90d7740477a6fba12feadd648d468c439f5d9a9f464ad69327e924f141d5434

2bbc6fcb737bd7932e34637d1982b9c656f3b9517e4bd66fdb7e75dc76848b371f5ae80e14e606a853e3bea36eb99edf1ed580e207c462ca24461e068d66

2e8f148e113fa16c4f95f0dad3a3270f563a3c2e24ef908dcd000b15cb6277f646b0d6cbe3743901177014714dd5f58fff5b4d6ca21d3f4c22db842ef2d8

3d660bf51a52bdd22670bdd063542076e853465c78f4428f39e82b69170d7cb688c7e4136a0c5b0086e2a32a8e27ba38fe0f44d7ec2e6b0f72422862865d

8726649da024480e09d624a798b041e31ec4208993e0f350614e7e8bfdf0c65f57f1847bce2695c1e0744a404f9f0c345fb90cbba6e707bd83af82dcefba

index-v5

7e74924b73aa1066866b40e86b895d489c9b93d037480da143b1c78fb97a

1982dcb567f8cfbf25ec866ab54b247220beeaeb9799a1509b8c6ba7b6ef

860db6d7ec9cddded5b6cd58072a24e58dc5cbb3045145f6d668b4d50bb8

2791ce87bec98d0916bb405959cc9c9d28d7653fd2f1a98529cac419a88f

5c706dd66e15830080b5750e6e093a7be12f00191a74a86526323f27c5ab

f182f589fa048cbe11d21e36eddf4d699424f24c0d97651722cb46168582

48491e94211f46e996f9c6f59aa8011ad74804e251fc51867605e1b57b1c

5d2142d8d19c4652a5ff468f6b852ca3b2b657ddb1b1270e8c45205a27af

8bfb04e8ce1d94ba1c3112ee95e5328dc1fadd4948403090bac5f1ae70c2

713eb5ff312cb505c03cd66383d25f007bb7d8b27152b394cb1e76ffa39d

5071ec950fc84cdffaad8dab3e27a78085189fca86f4f846ea6f7a8b58a1

238a38ae8ac46f136a3cab11088d4c38fc6d95e745f06bf90d9bfbbefe15

dfb4c58a9d07818d61e344f3732bdd5867d2aab9b9aef7b935c007c1407d

e4b6be3451dd856a32919087eccc2433482178bdcd49606cde3c3e02dc58

074ab919370a876702c1f96c8c663234540978a425c2cb6995a0ef3ad587

11b580ba91d0fbf69e9b5d2d6fac38a7b99aa88d7fdf9f6184538bb48e84

541bbf2bfebf75f5e56cd3d687ef0da8ae47fd52a45b7c48f5e2a500c6c5

4e91096a

react-dom.tgz

ae6e7073

canvas-confetti.tgz

d501c518

react.tgz

.config

Announcing our $40M Series B led by Abstract Ventures

smart-chatbot

bucksh0t

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

What are invisible characters?

Invisible chars

(Experimental) Package license has recently changed.

What is a license change?

License change

(Experimental) Contains an SPDX license exception.

What is a license exception?

License exception

This package is not allowed per your license policy. Review the package's license to ensure compliance.

What is a license policy violation?

License Policy Violation

Contains long string literals, which may be a sign of obfuscated or packed code.

What's wrong with long strings?

Long strings

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

What is a major refactor?

Major refactor

This package is malware. We have asked the package registry to remove it.

What is known malware?

Known malware

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

What is manifest confusion?

Manifest confusion

Contains a medium severity Common Vulnerability and Exposure (CVE).

What is a medium CVE?

Medium CVE

Contains a low severity Common Vulnerability and Exposure (CVE).

What is a mild CVE?

Low CVE

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

What's wrong with minified code?

Minified code

(Experimental) A package's licensing information has fine-grained problems.

Misc. License Issues

The package was published by an npm account that no longer exists.

What is a non-existent author?

Non-existent author

A required dependency is not declared in package.json and may prevent the package from working.

What is a missing dependency?

Missing dependency

(Experimental) Package does not have a license and consumption legal status is unknown.

What is a missing license?

Missing license

This package is missing its tarball. It could be removed from the npm registry or there may have been an error when publishing.

smart-chatbot - npm Package File explorer