// npm package
@antv/f-react
FEngine for React
versions
82
maintainers
51
license
MIT
first publish
2022-09-27
publisher
xuying1027
tarball
36,523 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-01-21
// publisher campaignby xuying1027
6 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 5 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.10.0· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @1.10.0··AUTO-PUBLISHED·publisher: xuying1027heuristic 75/100static flags 0llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-3885
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/f-react", "version": "1.10.0", "description": "FEngine for React", "main": "lib/index.js", "module": "es/index.js", "types": "es/index.d.ts", "sideEffects": false, "keywords": [ "antv", "f2", "chart", "charts", "mobile", "visualization", "react" ], "dependencies": { "@antv/f-engine": "1.10.0", "@babel/runtime": "^7.12.5", "tslib": "^2.3.1" }, "devDependencies": { "@types/react": "^16.9.35", "@types/react-dom": "^16.9.8", "enzyme": "^3.11.0", "enzyme-adapter-react-16": "^1.15.6", "react": "16.8.6", "react-dom": "16.8.6" }, "peerDependencies": { "react": ">=16.8.6", "react-dom": ">=16.8.6" }, "homepage": "https://f2.antv.vision/zh/docs/tutorial/react", "author": "https://github.com/orgs/antvis/people", "license": "MIT", "repository": { "type": "git", "url": "https://github.com/antvis/f2" }, "bugs": { "url": "https://github.com/antvis/f2/issues" }, "gitHead": "5bb6d8fc1e435eefbe4576a44fb427d3b909b0b5" } --- index.js (entry) --- "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); Object.defineProperty(exports, "createCanvas", { enumerable: true, get: function get() { return _createCanvas.createCanvas; } }); exports.default = void 0; var _fEngine = require("@antv/f-engine"); var _createCanvas = require("./createCanvas"); // 通过工厂模式创建时为了让 f2-react 依赖 f2 的 canvas 而不是 f-engine var _default = exports.default = (0, _createCanvas.createCanvas)(_fEngine.Canvas);
