Static repository check
- Checked commit
c4c76c2a2a69- Evidence Score
- 85/100
- Static risk
- Medium risk
- Files scanned
- 2
- Findings
- 3
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance17/20
Compatibility evidence8/20
Security signals10/10
Compatibility confidence: Limited
Findings (3)
- Medium
credentials.env-secretcordis.patch.yml:21credential-accessvisionApiKeyEnv: !!js process.env.DSH_VISION_API_KEY_ENV?.trim() || 'VISION_OPENAI_API_KEY' - Medium
credentials.env-secretcordis.patch.yml:23credential-accessvisionMaxTokens: !!js Number(process.env.DSH_VISION_MAX_TOKENS?.trim() || 4096) - Low
network.external-hostcordis.patch.yml:18networkvisionBaseURL: !!js process.env.DSH_VISION_BASE_URL?.trim() || 'https://api.openai.com/v1'
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
