@antv/hierarchy @0.8.1
rejected
This version was rejected.
It did not pass GreenFlagged's security review and is not served by the registry.
The findings and risk dispositions below explain why.
100
Risk Score
MIT
License
No
Install Scripts
0
Dependencies
14
Dev Dependencies
212.0 KB
Package Size
Published
layout algorithms for visualizing hierarchical data
Maintainers
lviseifreestyle21soundquietelaine.q.10sturubysakuya223serializedowenxdzhaoyangzhanmeiwjgogogoleungwensendoriiaaronyardsimaqdxq613intchoussusan_annjinke.lilzxuearmy8735atoolbaizndengfupingneoddishjeffy2012zqluafc163pomelo-nwukopiluwakyccnuzindexpanyuqibubkoozengyuekasmineboyu.zljl1ud0ngq1newbyvectorwinniexingchenlulikn9117xdddstsemious2020esoranadia_liubbsqqmxz96102openwaynepearminipddpdyiqianyaozhanbacxxxxxnlaixingui.lxgsusiwen8yanxiongzeyuwangrainy25ghzzhangjunjie-lokiflash1yisi.wangdreammy23biupiubiupiubasketduckxuying1027banxuanpearl_wangbqxbqxbqxalex_zjtduxinyue023wang1212leondt1gaofuhong
Keywords
antvhierarchy
Dev Dependencies (14)
| Package | Constraint | Registry Status |
|---|---|---|
| vite | ^7.2.7 | approved |
| eslint | ^9.39.1 | auto_approved |
| terser | ^5.44.1 | auto_approved |
| vitest | ^3.0.0 | auto_approved |
| prettier | ^3.7.4 | auto_approved |
| @eslint/js | ^9.39.1 | auto_approved |
| @vitest/ui | ^3.0.0 | auto_approved |
| typescript | ^5.9.3 | auto_approved |
| @types/node | ^20.0.0 | auto_approved |
| vite-plugin-dts | ^4.5.4 | auto_approved |
| @types/eslint__js | ^8.42.3 | No greenflagged match |
| typescript-eslint | ^8.49.0 | auto_approved |
| eslint-config-prettier | ^10.1.8 | auto_approved |
| eslint-plugin-prettier | ^5.5.4 | auto_approved |
Changes from v0.7.1
Dependency Changes
Script Changes
+ preinstallFile Changes
1 added
0 removed
1 modified
size delta: +486.9 KB
Risk Dispositions (0 applicable to this version, 3 other)
Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.
Show 3 disposition(s) that do not match any finding on this version
| Rule | Source | Disposition | Author | Reason | |
|---|---|---|---|---|---|
install-script:preinstall |
install-scripts | reject | AI | AI (install-scripts): Preinstall runs obfuscated payload; malicious across all versions with this script. | |
obfuscated-file:index.js |
source-diff | reject | AI | AI (source-diff): Obfuscated index.js is a malicious payload, not legitimate build output. | |
url-dep:@antv/setup |
npm-metadata | reject | AI | AI (npm-metadata): SHA-pinned GitHub dep in optionalDependencies used to smuggle payload. |
Review Summary
Risk score: 100 (capped from 283). Findings: 10 high (+250), 3 medium (+30), 1 low (+3).
Published to npm: