teardown
Warn
Audited by Socket on Oct 25, 2026
1 alert found:
AnomalyAnomalyassets/projection.js
LOWAnomalyLOW
assets/projection.js
This module renders caller-supplied technical geometry as SVG and contains no evident malware behavior. A part line role is interpolated unescaped into the SVG data-line-role attribute, enabling SVG/HTML markup injection if untrusted part data is rendered and the result is inserted into a document. This is a conditional input-validation/XSS risk; no suspicious domains, URLs, IPs, credentials, environment variables, or file paths are present.
Confidence: 98%Severity: 53%
Audit Metadata