“A simple utility for conditionally joining classNames together”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(CmDbPo)Md(Pa)
Referenced by 10 samples
- benign github.com-box-box-ui-elements-v19.0.0-beta.10+incompatible.zip fetched
- benign github.com-doug-martin-nestjs-query-v0.25.1.zip fetched
- benign @corva-ui-3.71.1.tgz fetched
- hostile github.com-sorbet-sorbet-v0.0.0-20260817233825-00e837aa983e.zip fetched
- hostile libEGL.7z fetched
- benign github.com-stoplightio-json-schema-viewer-v4.4.0+incompatible.zip fetched
- benign react-dev-overlay-10.2.3.tgz fetched
- benign github.com-dequelabs-cauldron-v5.1.0+incompatible.zip fetched
- benign github.com-coveo-ui-kit-v0.11.0-alpha.4.zip fetched
- hostile github.com-coveo-ui-kit-v0.10.0-alpha.20.zip fetched
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
baseline severity, 80% confident.
data/string
JavaScript split with variable delimiter
component severity, 90% confident.
communications/url
JavaScript comment contains a URL
Metadata
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 90% confident.
package/dependencies
npm manifest omits dependencies field
baseline severity, 95% confident.
package/files
Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
JavaScript source filename extension
Identity
| SHA-256 | c62acfbae541ca647319d57965b58aa94da3d29806dc394cb9da778a112ccd7e |
|---|---|
| Canonical SHA-256 | 4aff3523111d27d7b64cf79d29e464aa4683fb5bf2449a7b0f725ed71eb43051 |
| Filename | [email protected] |
| Package | classnames |
| Version | 2.2.6 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/classnames/-/classnames-2.2.6.tgz |
Timeline
| First seen | 2 Aug 2026 03:59 UTC |
|---|---|
| First analyzed | 2 Aug 2026 04:00 UTC |
| Last analyzed | 17 Aug 2026 00:42 UTC |
| Last updated | 17 Aug 2026 00:41 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 298c2 |
Not seeing what you expected? Let us know