// npm package
@antv/g6-alipay
支付宝小程序g6组件
versions
1
maintainers
51
license
MIT
first publish
2021-05-18
publisher
openwayne
tarball
8,536 B
AUTO-PUBLISHED·1 version indexed·latest published 2021-05-18
// publisher campaignby openwayne
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @0.0.1· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @0.0.1··AUTO-PUBLISHED·publisher: openwayneheuristic 75/100static flags 0llm benign (0.85) via ollamafirst-version-of-packageosv-flagged:MAL-2026-3983
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/g6-alipay", "version": "0.0.1", "description": "支付宝小程序g6组件", "files": ["es"], "keywords": ["G6", "G6Mobile", "Wechat"], "license": "MIT", "miniprogram": "es", "devDependencies": { "@babel/runtime": "^7.11.2", "@babel/core": "^7.6.4", "@babel/plugin-syntax-dynamic-import": "^7.0.0", "@babel/plugin-transform-runtime": "^7.11.5", "@babel/preset-env": "^7.6.3", "@babel/preset-typescript": "^7.6.0", "@typescript-eslint/parser": "^2.17.0", "alipay-style": "^0.1.0", "eslint": "^5.16.0", "eslint-config-ali": "^3.1.0", "eslint-plugin-import": "^2.11.0", "eslint-plugin-typescript": "^0.14.0", "gulp": "^4.0.0", "gulp-babel": "^8.0.0", "gulp-clean-css": "^4.0.0", "gulp-if": "^2.0.2", "gulp-inject-envs": "^1.1.1", "gulp-less": "^4.0.1", "gulp-rename": "^1.2.3", "lint-staged": "^8.2.0", "mini-types": "^0.0.1", "pre-commit": "^1.2.2", "stylelint": "^10.1.0", "stylelint-config-standard": "^18.2.0", "typescript": "^3.6.4" }, "dependencies": {}, "scripts": { "lint-staged": "lint-staged", "build": "NODE_ENV=production node scripts/compiler.js", "pub": --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- es/g6-component/g6-component.js (bundled) --- import _extends from "@babel/runtime/helpers/extends"; Component({ data: { supportNative: !!my._createCanvas }, props: { style: '', width: 100, height: 100, forceMini: false, pixelRatio: 1, onTouchEvent: function onTouchEvent() {}, onInit: function onInit() {}, onError: function onError() {} }, didMount: function didMount() { if (!this.data.supportNative || this.props.forceMini) { this.onCanvasReady(); } }, methods: { onCanvasReady: function onCanvasReady() { var _this = this; my.createSelectorQuery().select('#canvas').boundingClientRect().exec(function (ret) { if (ret && ret[0]) { _this.rect = ret[0]; } else { _this.rect = { bottom: 0, height: 0, left: 0, right: 0, top: 0, width: 0 }; _this.props.onError && _this.props.onError(ret); } if (_this.data.supportNative && !_this.props.forceMini) { console.log('native support'); my._createCanvas({ id: 'canvas', success: function success(canvas) { _this.ctx = canvas.getContext('2d'); _this.ctx.scale(_this.props.pixelRatio, _this.props.pixelRatio); _this.props.onInit(_this.ctx, ret[0], canvas, 'mini-native'); } }); } else { console.log('web support'); _this.ctx = my.createCanvasContext('canvas'); _this.ctx.scale(_this.props.pixelRatio, _this.props.pixelRatio); _this.props.onInit(_this.ctx, ret[0], null, 'mini'); } }); }, ontouch: function ontouch(e) { var _this2 = this; var target = e.target; var ev = _extends({}, e, { changedTouches: [], touches: [] }); e.touches.forEach(function (touchEvent) { ev.touches.push(modifyEvent(touchEvent, target, _this2.rect)); });
