Package evidence
@kmkf-fe-packages/[email protected]
Obfuscation Density: high encoded/escaped-token density
Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 1,806Mature · −50% score
- First published
- Apr 2023
- Publisher
- raycloud-apaas
Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@kmkf-fe-packages/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@kmkf-fe-packages/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Obfuscation Density: high encoded/escaped-token density
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 80 · status changed
Evidence
Static findings
140 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/dist/esm/components/LogisticsInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/esm/components/LogisticsMoreInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/esm/components/Common/index.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dist/esm/components/ErpTradeId/components/OrderNum/index.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dist/esm/components/PicturePro/PictureName.js | matched "cUrl " | 12 |
Show all 140 findings (low-signal and informational)
Showing 60 of 140 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/dist/esm/components/LogisticsInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/esm/components/LogisticsMoreInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/esm/components/Common/index.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dist/esm/components/ErpTradeId/components/OrderNum/index.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dist/esm/components/PicturePro/PictureName.js | matched "cUrl " | 12 |
| low | Obfuscation | package/dist/esm/components/Payment/AlipayNick.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/Payment/AlipayNo.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/Payment/AlipayTime.js | matched "\\u6253" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/constants/bs_e3.js | matched "\\u5546" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/constants/bs.js | matched "\\u5546" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/common/BsType.js | matched "\\u7C7B" | 3 |
| low | Obfuscation | package/dist/esm/components/Payment/BuyerNick.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/LogisticsInterception/columnHeader.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/LogisticsMoreInterception/columnHeader.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/StatusSelect/constants.js | matched "\\u6210" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/constants/defaultColumns.js | matched "\\u5546" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/common/expressCode.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/common/expressCompany.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/GlobalContext/index.js | matched "\\u6570" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/QueryLogisticsTrack/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/ShopList/index.js | matched "\\u3010" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/Wangwang/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/ActualPayment/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/AfterSalesOrderId/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/AlipayAccount/index.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/AlipayName/index.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsExchange/index.js | matched "\\u9000" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsLogistics/index.js | matched "\\uD83D" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsReissue/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsReturn/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsSystemOrder/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/DeliveryNo/index.js | matched "\\u81F3" | 3 |
| low | Obfuscation | package/dist/esm/components/BsE3/BsReissueE3/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/BuyerNick/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/Cascader/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/Checkbox/index.js | matched "\\u5176" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonInput/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonMultiStatus/index.js | matched "\\u81F3" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonSystemOrder/index.js | matched "\\u81F3" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonTradeId/index.js | matched "\\u65E0" | 3 |
| low | Obfuscation | package/dist/esm/components/ErpTradeId/components/OrderNum/index.js | matched "\\u7CFB" | 3 |
| low | Obfuscation | package/dist/esm/components/ErpTradeId/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/Express/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/ExpressCode/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/ExpressCompany/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowMarkSelect/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowOverallStatusSelect/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowStatusSelect/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowTag/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowWorkOrderId/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowWorkOrderStatus/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/GetFormItem/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/GY/GyReissue/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/GY/GyReturn/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/Input/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/JST/JstItemSelect/index.js | matched "\\u4F9B" | 3 |
| low | Obfuscation | package/dist/esm/components/JST/JstSendGood/index.js | matched "\\u540D" | 3 |
| low | Obfuscation | package/dist/esm/components/JST/JstSupply/index.js | matched "\\u4F9B" | 3 |
| low | Obfuscation | package/dist/esm/components/KM/KmExchange/index.js | matched "\\u6362" | 3 |
Manifest
Package metadata
Scripts4
buildyarn run lint && father buildlinteslint '**/*.{ts,tsx}'lint:fixeslint --fix '**/*.{ts,tsx}'syncyarn build && yalc push
Dependencies5
@kmkf-fe-packages/basic-components2.7.3-beta.8@kmkf-fe-packages/kmkf-utils2.7.3-beta.8b64-to-blob^1.2.19html2canvas^1.4.1react-pdf-js^5.1.0