// npm package
@antv/li-sdk
sdk for location insight
weekly
119
monthly
488
versions
57
maintainers
51
license
Apache-2.0
first publish
2022-12-29
publisher
lvisei
tarball
824,500 B
AUTO-PUBLISHED·1 version indexed·latest published 2025-04-30
// publisher campaignby lvisei
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.5.1· 1 file flagged
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
- @1.5.1··AUTO-PUBLISHED·publisher: lviseiheuristic 75/100static flags 1llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-4065public-github-push
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).
// offending code· 1 file flaggedpatterns: 1
--- package/package.json (excerpt) --- { "name": "@antv/li-sdk", "version": "1.5.1", "description": "sdk for location insight", "keywords": [ "sdk", "li" ], "homepage": "https://locationinsight.antv.antgroup.com", "repository": { "type": "git", "url": "https://github.com/antvis/L7VP.git" }, "license": "Apache-2.0", "author": "https://github.com/orgs/antvis/people", "main": "dist/cjs/index.js", "jsdelivr": "dist/umd/li-sdk.min.js", "unpkg": "dist/umd/li-sdk.min.js", "module": "dist/esm/index.js", "typings": "dist/esm/index.d.ts", "files": [ "dist", "README.md", "!dist/umd/report.html" ], "scripts": { "build": "npm run clean && father build", "bundle": "cross-env BUNDLE_ENV=bundle npm run build", "clean": "rimraf dist", "dev": "father dev", "docs:build": "dumi build", "docs:build-analyze": "ANALYZE=1 dumi build", "doctor": "father doctor", "ci": "npm run doctor", "prettier": "prettier --write \"src/*.{tsx,ts,less,md,json}\"", "start": "dumi dev" }, "dependencies": { "@antv/event-emitter": "^0.1.3", "@tanstack/query-core": "^5.0.0", "@tanstack/react-query": "^5.0.0", "ahooks": "^3.7.0", "classnames": "^2.3.1", "dayjs": "^1.11.7", "h3-js": "^4.1.0", "immer": "^10.0.3", "lodash-es": "^4.17.21", "wkt": "^0.1.1" }, "devDependencies": { "@ant-design/icons": "^5.0.1", "@antv/l7": "^2.17.2", "@antv/larkmap": "^1.4.11", "@formily/json-schema": "^2.2.4", "@ --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/umd/li-sdk.min.js (bundled) --- !function(A,e){"object"==typeof exports&&"object"==typeof module?module.exports=e(require("LarkMap"),require("React"),require("_")):"function"==typeof define&&define.amd?define(["LarkMap","React","_"],e):"object"==typeof exports?exports.LISDK=e(require("LarkMap"),require("React"),require("_")):A.LISDK=e(A.LarkMap,A.React,A._)}(self,(function(A,e,t){return function(){var r={6986:function(A,e,t){"use strict";t.d(e,{h:function(){return U}});var r=t(624),n=t.n(r),i=t(1728),o=t.n(i),a=t(52),u=t.n(a),s=t(9124),c=t(3113),f=t.n(c),l=t(1024),d=t.n(l),h=t(9746),v=t(8881),p=t.n(v),g=t(9479),y=t(9015),b=t(9931),w=function(A,e){var t=e.datasetId,r=(0,y.p)(t),n=u()(r,1)[0];return(0,l.useMemo)((function(){if(e.datasetId&&n){var t=function(A,e){if((0,b.mi)(A)){var t=(0,g.omit)(e,["datasetId","parser"]);return p()({data:A.data,parser:p()({type:"json"},null==e?void 0:e.parser)},t)}var r=A.properties,n=(0,g.omit)(r,["type","url"]),i=(0,g.omit)(e,["datasetId","parser"]);return p()({data:A.properties.url,parser:p()(p()({},n),e.parser)},i)}(n,e);return p()(p()({},A),{},{source:t})}return A}),[A,e,n])},m=function(A){var e=A.layer,t=e.id,r=e.type,i=e.metadata,o=e.visConfig,a=e.sourceConfig,u=(0,h.LF)().getLayer(r).component,s=w(o,a);return d().createElement(u,n()({id:t,name:i.name},s))},D=(0,l.memo)(m),k=function(A){var e=(0,h.qf)(),t=u()(e,1)[0];return d().createElement(d().Fragment,null,t.map((function(A){return d().createElement(D,{key:A.id,layer:A})})))},E=(0,l.memo)(k),B=t(2546),M=t.n(B),C=t(5806),_=t.n(C),x=t(9790),Q=t.n(x),F=t(4218),P=t.n(F),S=t(6069),T=t.n(S),O=t(7783),L=t.n(O),I=t(1754),R={};R.styleTagTransform=L(),R.setAttributes=P(),R.insert=Q().bind(null,"head"),R.domAPI=_(),R.insertStyleElement=T();M()(I.Z,R),I.Z&&I.Z.locals&&I.Z.locals;var Y=["basemap","config"],G=function(A){var e,t,r,i,a=A.className,c=A.style,v=A.onSceneLoaded,p=A.slotsElements,y=A.children,b=(0,h.Ln)(),w=u()(b,2),m=w[0],D=w[1],k=D.setScene,B=D.setLayerManager,M=m.basemap,C=m.config,_=o()(m,Y),x=(e=m.basema --- dist/esm/index.d.ts (bundled) --- export { MapContainer } from './components'; export type { MapContainerProps } from './components'; export * from './constants'; export * from './hooks'; export { LIRuntimeApp, LocationInsightApp } from './render'; export type { LIRuntimeAppOptions, LocationInsightAppProps } from './render'; export * from './specs'; export * from './types'; export { implementWidget } from './utils/widget'; export { implementLayer } from './utils/layer'; export { implementService, queryServiceClient, QueryClient, QueryObserver, Subscribable } from './utils/service'; export * from './utils/register-form'; export * from './utils/helper'; export * from './utils/dataset'; export * from './utils/asset'; export * from './utils/operations'; export * from './utils/filters'; export * from './utils/dataset-parser'; export * from './utils/expression'; --- dist/esm/index.js (bundled) --- // organize-imports-ignore export { MapContainer } from "./components"; export * from "./constants"; export * from "./hooks"; export { LIRuntimeApp, LocationInsightApp } from "./render"; export * from "./specs"; export * from "./types"; export { implementWidget } from "./utils/widget"; export { implementLayer } from "./utils/layer"; export { implementService, queryServiceClient, QueryClient, QueryObserver, Subscribable } from "./utils/service"; export * from "./utils/register-form"; export * from "./utils/helper"; export * from "./utils/dataset"; export * from "./utils/asset"; export * from "./utils/operations"; export * from "./utils/filters"; export * from "./utils/dataset-parser"; export * from "./utils/expression"; --- dist/esm/workers/index.worker.d.ts (bundled) --- import { applyDatasetFilter } from '../utils/filters'; export { applyDatasetFilter }; --- dist/esm/workers/index.worker.js (bundled) --- import { applyDatasetFilter } from "../utils/filters"; export { applyDatasetFilter }; --- dist/esm/utils/asset.d.ts (bundled) --- import type { AssetPackage, AssetPackageSpec, LoadAssetPackageSpecOptions } from '../types'; /** * 解析 window 上挂载资产 */ export declare const parseAssetPackage: (globalName: string) => AssetPackage | undefined; /** * 解析资产 CDN 包 */ export declare const loadAssetPackages: (assetPackagesSpec: AssetPackageSpec[], options?: LoadAssetPackageSpecOptions) => Promise<AssetPackage[]>; --- dist/esm/utils/asset.js (bundled) --- function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); } function _regeneratorRuntime() { "use strict"; /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */ _regeneratorRuntime = function _regeneratorRuntime() { return e; }; var t, e = {}, r = Object.prototype, n = r.hasOwnProperty, o = Object.defineProperty || function (t, e, r) { t[e] = r.value; }, i = "function" == typeof Symbol ? Symbol : {}, a = i.iterator || "@@iterator", c = i.asyncIterator || "@@asyncIterator", u = i.toStringTag || "@@toStringTag"; function define(t, e, r) { return Object.defineProperty(t, e, { value: r, enumerable: !0, configurable: !0, writable: !0 }), t[e]; } try { define({}, ""); } catch (t) { define = function define(t, e, r) { return t[e] = r; }; } function wrap(t, e, r, n) { var i = e && e.prototype instanceof Generator ? e : Generator, a = Object.create(i.prototype), c = new Context(n || []); return o(a, "_invoke", { value: makeInvokeMethod(t, r, c) }), a; } function tryCatch(t, e, r) { try { return { type: "normal", arg: t.call(e, r) }; } catch (t) { return { type: "throw", arg: t }; } } e.wrap = wrap; var h = "suspendedStart", l = "suspendedYield", f = "executing", s = "completed", y = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} var p = {}; define(p, a, function () { return this; }); var d = Object.getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEach(function (e) { define(t, e, function ( --- dist/esm/utils/dataset.d.ts (bundled) --- import type { DatasetSchema, LocalDatasetSchema, RemoteDatasetSchema } from '../specs'; import type { Dataset, LocalDataset, RemoteDataset } from '../types'; /** * 判断 dataset 是否为 local 类型 */ export declare function isLocalDataset(dataset: Dataset): dataset is LocalDataset; /** * 判断 dataset 是否为 remote 类型 */ export declare function isRemoteDataset(dataset: Dataset): dataset is RemoteDataset; /** * 判断当前数据源是否是常规数据源,或者说是否包含常规数据 */ export declare function isLocalOrRemoteDataset(dataset: Dataset): dataset is LocalDataset | RemoteDataset; /** * 判断 dataset 是否为 local 类型 */ export declare function isLocalDatasetSchema(dataset: DatasetSchema): dataset is LocalDatasetSchema; /** * 判断 dataset 是否为 remote 类型 */ export declare function isRemoteDatasetSchema(dataset: DatasetSchema): dataset is RemoteDatasetSchema; /** * 判断当前数据源是否是常规数据源,或者说是否包含常规数据 */ export declare function isLocalOrRemoteDatasetSchema(datasetSchema: DatasetSchema): datasetSchema is LocalDatasetSchema | RemoteDatasetSchema; --- dist/esm/utils/dataset.js (bundled) --- /** * 判断 dataset 是否为 local 类型 */ export function isLocalDataset(dataset) { return ['json', 'local'].includes(dataset.type); } /** * 判断 dataset 是否为 remote 类型 */ export function isRemoteDataset(dataset) { return dataset.type === 'remote'; } /** * 判断当前数据源是否是常规数据源,或者说是否包含常规数据 */ export function isLocalOrRemoteDataset(dataset) { return isLocalDataset(dataset) || isRemoteDataset(dataset); } /** * 判断 dataset 是否为 local 类型 */ export function isLocalDatasetSchema(dataset) { retu
