// npm package

@antv/x6-components

React components for building x6 editors

npmjs.com tarball repo homepage

versions

maintainers

license

MIT

first publish

2019-12-01

publisher

bubkoo

tarball

548,660 B

AUTO-PUBLISHED·1 version indexed·latest published 2020-09-09

// publisher campaignby bubkoo

3 caught packages from this account

This is not an isolated catch. The same publisher has shipped 2 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.

// offending code· @0.10.7· no static-pattern hits

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@0.10.7·2020-09-09·AUTO-PUBLISHED·publisher: bubkoo

heuristic 75/100

static flags 0

llm benign (0.85) via ollama

mature-packageosv-flagged:MAL-2026-4100

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

// offending code· no static-pattern hits

--- install scripts ---
### prepare
yarn build



--- package.json (entry) ---
{
  "name": "@antv/x6-components",
  "version": "0.10.7",
  "description": "React components for building x6 editors",
  "main": "lib/index.js",
  "module": "es/index.js",
  "unpkg": "dist/x6-components.min.js",
  "types": "lib/index.d.ts",
  "files": [
    "dist",
    "es",
    "lib"
  ],
  "sideEffects": [
    "es/**/style/*",
    "lib/**/style/*",
    "*.less"
  ],
  "scripts": {
    "clean": "rimraf dist es lib",
    "lint": "run-s lint:ts lint:es lint:style",
    "lint:es": "eslint --ext .js scripts --fix",
    "lint:ts": "tslint -c tslint.json -p tsconfig.json --fix",
    "lint:style": "stylelint 'src/**/*.less' --syntax less --fix",
    "build:esm": "tsc --module esnext --target es2015 --outDir ./es",
    "build:cjs": "tsc --module commonjs --target es5 --outDir ./lib",
    "build:ts": "run-p build:cjs build:esm",
    "build:less": "node ./scripts/less.js",
    "build": "run-s build:ts build:less",
    "prebuild": "run-s lint clean",
    "watch": "watch 'yarn build' ./src",
    "prepare": "yarn build",
    "precommit": "lint-staged"
  },
  "keywords": [
    "component",
    "components",
    "react-components",
    "x6",
    "x6-editor",
    "editor",
    "ui",
    "antv"
  

--- index.js (entry) ---
"use strict";
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
}) : (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    o[k2] = m[k];
}));
var __exportStar = (this && this.__exportStar) || function(m, exports) {
    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
};
Object.defineProperty(exports, "__esModule", { value: true });
__exportStar(require("./menu"), exports);
__exportStar(require("./menubar"), exports);
__exportStar(require("./dropdown"), exports);
__exportStar(require("./toolbar"), exports);
__exportStar(require("./context-menu"), exports);
__exportStar(require("./color-picker"), exports);
__exportStar(require("./scrollbar"), exports);
__exportStar(require("./scroll-box"), exports);
__exportStar(require("./auto-scroll-box"), exports);
__exportStar(require("./split-box"), exports);
//# sourceMappingURL=index.js.map