// npm package
@antv/g-canvaskit
A renderer implemented by CanvasKit
weekly
145
monthly
870
versions
191
maintainers
51
license
MIT
first publish
2022-05-31
publisher
wang1212
tarball
2,529,324 B
AUTO-PUBLISHED·1 version indexed·latest published 2025-12-24
// publisher campaignby wang1212
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.1.1· 1 file flagged
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 3 known-vendor host(s), 2 other host(s).
- @1.1.1··AUTO-PUBLISHED·publisher: wang1212heuristic 75/100static flags 1llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-3912public-github-push
→ No suspicious destination, no remote-exec shape — 3 known-vendor host(s), 2 other host(s).
// offending code· 1 file flaggedpatterns: 1
--- package/package.json (excerpt) --- { "name": "@antv/g-canvaskit", "version": "1.1.1", "description": "A renderer implemented by CanvasKit", "keywords": [ "antv", "g", "renderer", "CanvasKit" ], "homepage": "https://github.com/antvis/g#readme", "bugs": { "url": "https://github.com/antvis/g/issues" }, "repository": { "type": "git", "url": "git+https://github.com/antvis/g.git", "directory": "packages/g-canvaskit" }, "license": "MIT", "author": "https://github.com/orgs/antvis/people", "exports": { "types": "./types/index.d.ts", "import": "./dist/index.esm.js", "default": "./dist/index.js" }, "main": "dist/index.js", "unpkg": "dist/index.umd.min.js", "module": "dist/index.esm.js", "types": "types/index.d.ts", "files": [ "package.json", "dist", "types", "LICENSE", "README.md" ], "dependencies": { "@antv/util": "^3.3.5", "@babel/runtime": "^7.25.6", "canvaskit-wasm": "^0.34.0", "gl-matrix": "^3.4.3", "tslib": "^2.5.3", "@antv/g-canvas": "2.2.0", "@antv/g-lite": "2.7.0", "@antv/g-math": "3.1.0" }, "devDependencies": { "@types/gl-matrix": "^2.4.5" }, "publishConfig": { "access": "public" }, "scripts": { "build:js": "rimraf dist && rollup -c", "build:types": "rimraf types && tsc --emitDeclarationOnly --noCheck", "build": "npm run build:js && npm run build:types", "sync": "tnpm sync", "watch": "rollup -c -w" } } --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/index.esm.js (bundled) --- /*! * @antv/g-canvaskit * @description A renderer implemented by CanvasKit * @version 1.1.1 * @date 12/24/2025, 11:57:15 AM * @author AntVis * @docs https://g.antv.antgroup.com/ */ import _createClass from '@babel/runtime/helpers/createClass'; import _classCallCheck from '@babel/runtime/helpers/classCallCheck'; import _callSuper from '@babel/runtime/helpers/callSuper'; import _inherits from '@babel/runtime/helpers/inherits'; import { isDisplayObject, parseColor, isCSSRGB, getEuler, rad2deg, parsedTransformToMat4, parseTransform, DisplayObject, GradientType, UnitType, computeLinearGradient, computeRadialGradient, Node, convertToPath, Path, fromRotationTranslationScale, isPattern, Shape, AbstractRendererPlugin, setDOMSize, AbstractRenderer, ImageLoader, DomInteraction, HTMLRenderer } from '@antv/g-lite'; export { DomInteraction, HTMLRenderer, ImageLoader } from '@antv/g-lite'; import { CanvasPathGenerator, CanvasPicker } from '@antv/g-canvas'; export { CanvasPathGenerator, CanvasPicker } from '@antv/g-canvas'; import _defineProperty from '@babel/runtime/helpers/defineProperty'; import _objectSpread from '@babel/runtime/helpers/objectSpread2'; import _slicedToArray from '@babel/runtime/helpers/slicedToArray'; import _regeneratorRuntime from '@babel/runtime/helpers/regeneratorRuntime'; import _asyncToGenerator from '@babel/runtime/helpers/asyncToGenerator'; import { clamp, isString, isNil } from '@antv/util'; import { mat3, vec3, quat, mat4 } from 'gl-matrix'; import _toConsumableArray from '@babel/runtime/helpers/toConsumableArray'; import require$$0 from 'path'; import require$$1 from 'fs'; var CircleRenderer = /*#__PURE__*/function () { function CircleRenderer() { _classCallCheck(this, CircleRenderer); } return _createClass(CircleRenderer, [{ key: "render", value: function render(object, context) { var canvas = context.canvas, strokePaint = context.strokePaint, fillPaint = context.fillPaint, shadowFillPaint = co --- dist/index.js (bundled) --- /*! * @antv/g-canvaskit * @description A renderer implemented by CanvasKit * @version 1.1.1 * @date 12/24/2025, 11:57:15 AM * @author AntVis * @docs https://g.antv.antgroup.com/ */ 'use strict'; var _createClass = require('@babel/runtime/helpers/createClass'); var _classCallCheck = require('@babel/runtime/helpers/classCallCheck'); var _callSuper = require('@babel/runtime/helpers/callSuper'); var _inherits = require('@babel/runtime/helpers/inherits'); var gLite = require('@antv/g-lite'); var gCanvas = require('@antv/g-canvas'); var _defineProperty = require('@babel/runtime/helpers/defineProperty'); var _objectSpread = require('@babel/runtime/helpers/objectSpread2'); var _slicedToArray = require('@babel/runtime/helpers/slicedToArray'); var _regeneratorRuntime = require('@babel/runtime/helpers/regeneratorRuntime'); var _asyncToGenerator = require('@babel/runtime/helpers/asyncToGenerator'); var util = require('@antv/util'); var glMatrix = require('gl-matrix'); var _toConsumableArray = require('@babel/runtime/helpers/toConsumableArray'); var require$$0 = require('path'); var require$$1 = require('fs'); var CircleRenderer = /*#__PURE__*/function () { function CircleRenderer() { _classCallCheck(this, CircleRenderer); } return _createClass(CircleRenderer, [{ key: "render", value: function render(object, context) { var canvas = context.canvas, strokePaint = context.strokePaint, fillPaint = context.fillPaint, shadowFillPaint = context.shadowFillPaint, shadowStrokePaint = context.shadowStrokePaint; var _ref = object.parsedStyle, cx = _ref.cx, cy = _ref.cy, r = _ref.r, shadowOffsetX = _ref.shadowOffsetX, shadowOffsetY = _ref.shadowOffsetY; if (shadowFillPaint || shadowStrokePaint) { canvas.drawCircle(cx + (shadowOffsetX || 0) / 2, cy + (shadowOffsetY || 0) / 2, r, shadowFillPaint || shadowStrokePaint); } if (fillPaint) { canvas.drawCir --- dist/index.umd.min.js (bundled) --- /*! * @antv/g-canvaskit * @description A renderer implemented by CanvasKit * @version 1.1.1 * @date 12/24/2025, 11:57:15 AM * @author AntVis * @docs https://g.antv.antgroup.com/ */ !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("@antv/g-lite"),require("path"),require("fs")):"function"==typeof define&&define.amd?define(["exports","@antv/g-lite","path","fs"],t):t(((e="undefined"!=typeof globalThis?globalThis:e||self).G=e.G||{},e.G.CanvasKit={}),e.window.G,e.require$$0,e.require$$1)}(this,function(e,t,r,n){"use strict";function a(e){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},a(e)}function i(e){var t=function(e,t){if("object"!=a(e)||!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,t||"default");if("object"!=a(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==a(t)?t:t+""}function o(e,t){for(var r=0;t.length>r;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,i(n.key),n)}}function s(e,t,r){return t&&o(e.prototype,t),r&&o(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function u(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function l(e){return l=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(e){return e.__proto__||Object.getPrototypeOf(e)},l(e)}function c(){try{var e=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){}))}catch(e){}return(c=function(){return!!e})()}function f(e,t){if(t&&("object"==a(t)||"function"==typeof t))return t;if(void 0!==t)throw new TypeError("Derived constructors may only return object or undefined");return function(e){if(void 0===e)throw new ReferenceError("this hasn't been
