“internal utils shared across @vue packages”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmDb₃)Md₂(LiPa₄)
Referenced by 3 samples
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 92% confident.
data/control-flow
CommonJS module re-exports required package
notable severity, 85% confident.
data/serialize
Serializes an identifier as JSON
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
component severity, 95% confident.
communications/url
Encoded URL references MDN documentation
component severity, 78% confident.
ui/window/manage
References an iframe HTML element
Metadata
notable severity, 99% confident.
library
Vue shared bundle version banner
notable severity, 95% confident.
package/files
JavaScript file under dist directory
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 85% confident.
build
JavaScript transpiler or minifier markers
baseline severity, 85% confident.
file
Source has multiple lines over 1000 characters
baseline severity, 80% confident.
file/profile
Sequential source identifier names
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 7f5b0adc0fc6d19a12ad40b3f98c5f86ca5fe7e7d692ca39b9ec149abc43fab7 |
|---|---|
| Canonical SHA-256 | 22aeabedc1f2782f67b05c54df4382d4e52a0e0c384ff02349372e2acd9974ed |
| Filename | [email protected] |
| Package | @vue/shared |
| Version | 3.5.12 |
| PURL | pkg:npm/@vue/[email protected] |
Origin
| Source | x |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@vue/shared/-/shared-3.5.12.tgz |
Timeline
| First seen | 12 Aug 2026 14:31 UTC |
|---|---|
| First analyzed | 12 Aug 2026 14:01 UTC |
| Last analyzed | 24 Aug 2026 21:57 UTC |
| Last updated | 24 Aug 2026 21:59 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 73866 |
Not seeing what you expected? Let us know