// npm package
@antv/x6-vue3-shape
X6 shape for rendering vue3 components.
weekly
116
monthly
378
versions
1
maintainers
51
license
MIT
first publish
2021-03-07
publisher
bubkoo
tarball
58,679 B
AUTO-PUBLISHED·1 version indexed·latest published 2021-03-07
// publisher campaignby bubkoo
3 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 2 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.0.0· 1 file flagged
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @1.0.0··AUTO-PUBLISHED·publisher: bubkooheuristic 75/100static flags 1llm benign (0.85) via ollamafirst-version-of-packageosv-flagged:MAL-2026-4117public-github-push
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· 1 file flaggedpatterns: 1
--- install scripts --- ### prepare yarn build --- package/package.json (excerpt) --- { "name": "@antv/x6-vue3-shape", "version": "1.0.0", "description": "X6 shape for rendering vue3 components.", "main": "lib/index.js", "module": "es/index.js", "unpkg": "dist/x6-vue3-shape.js", "jsdelivr": "dist/x6-vue3-shape.js", "types": "lib/index.d.ts", "files": [ "dist", "es", "lib" ], "keywords": [ "shape", "vue3", "vue-next", "render", "x6", "antv" ], "scripts": { "clean": "rimraf dist es lib", "lint": "tslint -c tslint.json -p tsconfig.json --fix", "watch": "watch 'yarn build' ./src", "build:esm": "tsc --module esnext --target es2015 --outDir ./es", "build:cjs": "tsc --module commonjs --target es5 --outDir ./lib", "build:umd": "rollup -c", "build": "run-p build:cjs build:esm build:umd", "prebuild": "run-s lint clean", "prepare": "yarn build", "precommit": "lint-staged" }, "lint-staged": { "src/**/*.ts": [ "tslint -c tslint.json -p ./tsconfig.json --fix" ] }, "peerDependencies": { "@antv/x6": ">=1.0.0", "vue": ">=3.0.0" }, "devDependencies": { "@rollup/plugin-commonjs": "^17.0.0", "@rollup/plugin-node-resolve": "^11.0.0", "@rollup/plugin-replace": "^2.3.4", "@rollup/plugin-typescript": "^8.1.0", "@types/node": "^14.14.14", "lint-staged": "^10.5.3", "npm-run-all": "^4.1.5", "rimraf": "^3.0.0", "rollup": "^2.35.1", "rollup-plugin-auto-external": "^2.0.0", "rollup-plugin-filesize": "^9.1.0", --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- dist/x6-vue-shape.js (bundled) --- !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("@antv/x6"),require("vue")):"function"==typeof define&&define.amd?define(["exports","@antv/x6","vue"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).X6VueShape={},e.X6,e.vue)}(this,(function(e,t,n){"use strict";var o=t.Registry.create({type:"vue3 component"});t.Graph.registerVue3Component=o.register,t.Graph.unregisterVue3Component=o.unregister,t.Graph.Hook.prototype.getVue3Component=function(e){var n=this.options.getVue3Component;if("function"==typeof n){var r=t.FunctionExt.call(n,this.graph,e);if(null!=r)return r}var i=e.getComponent();if("string"==typeof i){var u=o.get(i);if(null==u)return o.onNotFound(i);i=u}return i}; /*! ***************************************************************************** Copyright (c) Microsoft Corporation. Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted. THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. ***************************************************************************** */ var r=function(e,t){return(r=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function i(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var u,p,s=function(){return(s=Object.assign||function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in
