@scandit/web-datacapture-barcode
Scandit Data Capture SDK for the Web
8
Versions
SEE LICENSE IN LICENSE
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
scandit-lorenzoscandit-cimoritz-scanditscandit-sebastienscandit-thomas
Keywords
scanditbarcodedata capturecaptureqrscanscannerscanningcodewebassemblysdkjavascripttypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:new-function-constructor | AI (semgrep): Emscripten WASM JS glue routinely uses new Function(); stable false positive for this package. | ai | |
| source-diff | net-exec-file:build/js/chunks/chunk-3AKV37VJ.js | AI (source-diff): Emscripten WASM loader pattern (Blob+Worker for .wasm files); stable false positive for this SDK package. | ai | |
| source-diff | net-exec-file:build/js/chunks/chunk-BE6R6FCS.js | AI (source-diff): Blob URL + WASM fetch is Scandit's documented worker-loading pattern; not malicious. | ai | |
| source-diff | net-exec-file:build/js/chunks/chunk-ELW7RLZN.js | AI (source-diff): WASM worker loader using Blob URL — standard pattern for WebAssembly SDKs, not dropper malware. | ai | |
| source-diff | net-exec-file:build/js/chunks/chunk-KQ3LRAYO.js | AI (source-diff): Code is a purity-checker sandbox that blocks network/eval globals in user functions — not a dropper. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scandit multi-module SDK; templated naming and minimal README are expected patterns for this commercial package family. | ai | |
| phantom-deps | phantom-dep:@types/emscripten | AI (phantom-deps): WebAssembly SDK; @types/emscripten is a type-only dep used by convention for WASM interop, not directly imported. | ai |