// npm 패키지

uri-parse

Mini data-uri parser for nodejs and browser. No dependencies!

npmjs.com tarball repo homepage

버전

메인테이너

라이선스

MIT

최초 publish

2017-11-14

publisher

atool

tarball

8,345 B

AUTO-PUBLISHED·1개 버전 인덱싱됨·최근 publish: 2020-06-13

// publisher 캠페인by atool

이 계정에서 catch된 패키지 9건

고립된 catch가 아닙니다. 동일 publisher가 8개의 다른 패키지를 추가로 발행했고, 모두 파이프라인이 catch했습니다 — 일회성이 아닌 조직적 캠페인의 형태. 아래 링크는 각 형제 catch의 분석으로 이동합니다.

// offending code· @1.0.0· 1 file flagged

llm: benign · 0.85

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

@1.0.0·2020-06-13·AUTO-PUBLISHED·publisher: atool

heuristic 75/100

static flags 1

llm benign (0.85) via ollama

publisher-multi-name-burst:5osv-flagged:MAL-2026-4157public-github-push

→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).

// offending code· 1 file flaggedpatterns: 1

--- package/package.json (excerpt) ---
{
  "name": "uri-parse",
  "version": "1.0.0",
  "description": "Mini data-uri parser for nodejs and browser. No dependencies!",
  "main": "index.js",
  "files": [
    "index.js"
  ],
  "scripts": {
    "coverage": "nyc npm test && nyc report --reporter=lcov",
    "test": "mocha test.js",
    "perf": "node benchmark.js"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/hustcc/uri-parse.git"
  },
  "keywords": [
    "uri-parse",
    "data-uri",
    "url-parse"
  ],
  "author": "hustcc",
  "license": "MIT",
  "bugs": {
    "url": "https://github.com/hustcc/uri-parse/issues"
  },
  "homepage": "https://github.com/hustcc/uri-parse#readme",
  "devDependencies": {
    "benchmark": "^2.1.4",
    "coveralls": "^2.11.6",
    "expect": "^1.14.0",
    "mocha": "^2.4.5",
    "nyc": "^5.6.0",
    "url-parse": "^1.2.0"
  }
}


--- package.json (entry) ---
{
  "name": "uri-parse",
  "version": "1.0.0",
  "description": "Mini data-uri parser for nodejs and browser. No dependencies!",
  "main": "index.js",
  "files": [
    "index.js"
  ],
  "scripts": {
    "coverage": "nyc npm test && nyc report --reporter=lcov",
    "test": "mocha test.js",
    "perf": "node benchmark.js"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/hustcc/uri-parse.git"
  },
  "keywords": [
    "uri-parse",
    "data-uri",
    "url-parse"
  ],
  "author": "hustcc",
  "license": "MIT",
  "bugs": {
    "url": "https://github.com/hustcc/uri-parse/issues"
  },
  "homepage": "https://github.com/hustcc/uri-parse#readme",
  "devDependencies": {
    "benchmark": "^2.1.4",
    "coveralls": "^2.11.6",
    "expect": "^1.14.0",
    "mocha": "^2.4.5",
    "nyc": "^5.6.0",
    "url-parse": "^1.2.0"
  }
}


--- index.js (entry) ---
/**
 * Created by hustcc on 17/11/11.
 * Contract: i@hust.cc
 */

/*
 * graph from https://github.com/Xsoda/url
 * parse url like this
 *
 * schema://username:password@host:port/path?key=value#fragment;key=value
 * \____/   \______/ \______/ \__/ \__/ \__/ \_______/ \______/ \______/
 *   |         |        |       |    |    |      |         |       |
 * schema      |     password   |   port  |    query    fragment   |
 *          username          host      path                     extension
 *
 * note:
 *   - username, password, port, path, query, fragment, extension is optional.
 *   - scheme, host must be setting.
 *   - username and password must be paired.
 */

function URI(uri) {
  this.uri = uri;
  this._pos = 0;

  // the instance has properties below:
  //
  // this.schema
  // this.username
  // this.password
  // this.host
  // this.port
  // this.path
  // this.query
  // this.fragment
  // this.extension

  this._parse();
}

URI.prototype._end = function() {
  return this._pos >= this.uri.length;
};

URI.prototype._next = function() {
  return this.uri[this._pos += 1];
};

URI.prototype._current = function() {
  return this.uri[this._pos];
};

URI.prototype._skip = fu