syncfusion-maui-combobox
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
AnomalyAnomalyreferences/ai-smart-searching.md
LOWAnomalyLOW
references/ai-smart-searching.md
No evidence of intentional malware or sabotage is present. The code implements legitimate AI-assisted search, but it has security and operational weaknesses: client-side exposure of the Azure API key, external transmission of user-entered search text, synchronous secret access, unbounded caching, ignored cancellation, and potentially excessive API requests. Production designs should proxy Azure requests through a trusted backend or use tightly scoped credentials, minimize transmitted data, and add bounded concurrent caching and cancellation.
Confidence: 98%Severity: 62%
Audit Metadata