Manifest
    by Manifold
    Back to Results
    1.23.0

    Application Wizard

    Provides rich user experience for Yeoman generators.

    Other
    Rank#809
    Publisher SAesPOSRegistry openvsx267,164Last scanned Aug 27, 2026, 05:45 PMRegistryHomepageGitHub

    Security Findings

    4

    Package registry name mismatch

    SuspiciousLineage

    npm name 'root' != repo 'yeoman-ui'

    Publisher cannot be tied to the declared repo

    SuspiciousLineage

    The declared source repository could not be tied to this publisher: the registry namespace does not match the repo owner, the namespace is not verified, and no Marketplace twin corroborates it. Repo lineage is not shown, because it would describe a repository this publisher may not own.

    Hardcoded secrets/API keys

    SuspiciousScanner

    AWS Access Key: ABIAR...****

    dist/extension.js

    OWASP-AST04

    Transitive delivery to an unrelated extension

    SuspiciousScanner

    Pulls unrelated extension(s) via extensionPack/Dependencies (payload lives in the target): SAPOSS.app-studio-toolkit

    OWASP-AST02