// npm package
@antv/webgpu-graph
provide common graph algorithms implemented with WebGPU
versions
2
maintainers
51
license
MIT
first publish
2022-02-17
publisher
panyuqi
tarball
3,028,147 B
AUTO-PUBLISHED·1 version indexed·latest published 2022-03-22
// publisher campaignby panyuqi
9 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 8 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.0.0· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @1.0.0··AUTO-PUBLISHED·publisher: panyuqiheuristic 75/100static flags 0llm benign (0.85) via ollamaosv-flagged:MAL-2026-4095
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/webgpu-graph", "version": "1.0.0", "description": "provide common graph algorithms implemented with WebGPU", "keywords": [ "webgpu", "graph", "algorithm", "antv", "G6" ], "publishConfig": { "access": "public" }, "files": [ "package.json", "es", "lib", "dist", "LICENSE", "README.md", "README-zh_CN.md" ], "main": "lib/index.js", "module": "es/index.js", "types": "lib/index.d.ts", "unpkg": "dist/index.min.js", "scripts": { "build": "npm run clean && father build && npm run build:umd", "build:umd": "webpack --config webpack.config.js --mode production", "dev:umd": "webpack --config webpack.dev.config.js --mode development", "ci": "npm run build && npm run coverage", "clean": "rimraf es lib dist", "coverage": "jest --coverage", "lint": "eslint --ext .js,.jsx,.ts,.tsx --format=pretty \"./\"", "lint:src": "eslint --ext .ts --format=pretty \"./src\"", "prettier": "prettier -c --write \"**/*\"", "test": "npm run build:umd && jest", "test-live": "npm run build:umd && DEBUG_MODE=1 jest --watch ./tests/unit/louvain-spec.ts", "test-live:async": "npm ru --- index.js (entry) --- "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); var _WebGPUGraph = require("./WebGPUGraph"); Object.keys(_WebGPUGraph).forEach(function (key) { if (key === "default" || key === "__esModule") return; if (key in exports && exports[key] === _WebGPUGraph[key]) return; Object.defineProperty(exports, key, { enumerable: true, get: function get() { return _WebGPUGraph[key]; } }); }); var _linkAnalysis = require("./link-analysis"); Object.keys(_linkAnalysis).forEach(function (key) { if (key === "default" || key === "__esModule") return; if (key in exports && exports[key] === _linkAnalysis[key]) return; Object.defineProperty(exports, key, { enumerable: true, get: function get() { return _linkAnalysis[key]; } }); }); var _traversal = require("./traversal"); Object.keys(_traversal).forEach(function (key) { if (key === "default" || key === "__esModule") return; if (key in exports && exports[key] === _traversal[key]) return; Object.defineProperty(exports, key, { enumerable: true, get: function get() { return _traversal[key]; } }); }); --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/index.min.js (bundled) --- /*! For license information please see index.min.js.LICENSE.txt */ !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.WebGPUGraph=t():e.WebGPUGraph=t()}(this,(function(){return(()=>{var e={2640:(e,t,n)=>{"use strict";function r(e,t){return r=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e},r(e,t)}var i=n(7839),o=function(e){var t,n;function i(){return e.apply(this,arguments)||this}return n=e,(t=i).prototype=Object.create(n.prototype),t.prototype.constructor=t,r(t,n),i.prototype.content=function(e){var t=e.onError,n=e.onResult,r=e.onDone,i="";return i+="var _results = new Array("+this.options.taps.length+");\n",i+="var _checkDone = function() {\n",i+="for(var i = 0; i < _results.length; i++) {\n",i+="var item = _results[i];\n",i+="if(item === undefined) return false;\n",i+="if(item.result !== undefined) {\n",i+=n("item.result"),i+="return true;\n",i+="}\n",i+="if(item.error) {\n",i+=t("item.error"),i+="return true;\n",i+="}\n",i+="}\n",i+="return false;\n",(i+="}\n")+this.callTapsParallel({onError:function(e,t,n,r){var i="";return i+="if("+e+" < _results.length && ((_results.length = "+(e+1)+"), (_results["+e+"] = { error: "+t+" }), _checkDone())) {\n",i+=r(!0),i+="} else {\n",(i+=n())+"}\n"},onResult:function(e,t,n,r){var i="";return i+="if("+e+" < _results.length && ("+t+" !== undefined && (_results.length = "+(e+1)+"), (_results["+e+"] = { result: "+t+" }), _checkDone())) {\n",i+=r(!0),i+="} else {\n",(i+=n())+"}\n"},onTap:function(e,t,n,r){var i="";return e>0&&(i+="if("+e+" >= _results.length) {\n",i+=n(),i+="} else {\n"),i+=t(),e>0&&(i+="}\n"),i},onDone:r})},i}(n(8904)),a=new o,s=function(e){return a.setup(this,e),a.create(e)};function u(e,t){void 0===e&&(e=[]),void 0===t&&(t=void 0);var n=new i(e,t);return n.constructor=u,n.compile=s,n._call=void 0,n.call=void 0,n}u.prototype=null,e.exports=u},110:(e,t,n)=>{"use strict";function r(e,t
