Static repository check
- Checked commit
5c30dde7966c- Evidence Score
- 66/100
- Static risk
- High risk
- Files scanned
- 18
- Findings
- 105
Evidence breakdown
Compatibility confidence: Limited
Install-time scripts (4)
cocode-gui/package.json#preparehuskycocode-tui/package.json#prepacknode scripts/publishable-manifest.mjs applycocode-gui/package.json#postinstallnode scripts/harden-electron-default-app.mjscocode-host-supervisor/package.json#prepackpnpm run build
Findings (105)
- High
install.scriptcocode-gui/package.jsoninstall-time"postinstall": "node scripts/harden-electron-default-app.mjs" - High
install.scriptcocode-gui/package.jsoninstall-time"prepare": "husky" - High
shell.rm-rfcocode-gui/packages/cocode/cocode-account/package.json:37dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-appearance/package.json:37dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-brand/package.json:38dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-desktop/package.json:39dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-dsml/package.json:20dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-input-history/package.json:33dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-message-feedback/package.json:36dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-models/package.json:37dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-shortcuts/package.json:42dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
shell.rm-rfcocode-gui/packages/cocode/cocode-workbench/package.json:46dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - High
install.scriptcocode-host-supervisor/package.jsoninstall-time"prepack": "pnpm run build" - High
install.scriptcocode-tui/package.jsoninstall-time"prepack": "node scripts/publishable-manifest.mjs apply" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-ui-primitives": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-commands": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-compaction": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-code-runtime": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-store": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-modules": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-web": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-attachment": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-api-remotes": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-api-gateway": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-agent": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cosmokit": "1.8.2" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis-plugin-loader": "1.0.3" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis-plugin-include": "1.0.7" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis-plugin-hmr": "1.0.17" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis": "4.0.2" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-agent-default-model": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/schemastery": "3.18.2" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-web-app": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-typert-registry": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-user-approval": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-system-prompt": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-subagent": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-storage-domain": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-storage": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-skill": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-scope": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-shell": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-shell-env": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-sandbox": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-title": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-query": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-projection-cache": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-projection": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-output-retention": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-jobs": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-home-paths": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-invariants": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-ui-slots": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-ui-renderer": "0.1.2-alpha.5" - Medium
obfuscation.child-processcocode-gui/scripts/harden-electron-default-app.mjs:1obfuscationimport { spawn } from "node:child_process" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-anonymous-user-id": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-workflow": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/cordis-plugin-group": "1.0.2" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-api-gateway": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-agent": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-typert-registry": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-typert-loader": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-tools": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-system-prompt": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-subprocess-local": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-subagent-in-process-driver": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-subagent": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-settings": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-spill": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-shell": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-scope": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-sandbox": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-title-llm": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-telemetry-otel": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-telemetry": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-query-sqlite": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-query": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-projection-cache": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-persistence-jsonl": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-output-retention": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-llm-pi-ai": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-llm-deepseek": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-llm": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-jobs": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-host-webserver": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-host-frontend-static": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-fs": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-credentials-local": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-compaction": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-code-runtime": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-bash-local": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-attachment-local": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-authorization": "0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/schemastery": "^3.18.2" - Medium
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-timeout": "^0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-brand": "^0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-util-values": "^0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.5" - Medium
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-util-crypto": "^0.1.2-alpha.5"
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
