Static repository check
- Checked commit
b6d9f8fb4a2e- Evidence Score
- 90/100
- Static risk
- High risk
- Files scanned
- 5
- Findings
- 2
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance17/20
Compatibility evidence20/20
Security signals3/10
Compatibility confidence: Medium
Install-time scripts (1)
packages/bundle/package.json#prepacknode ../../scripts/build-bundle.mjs
Findings (2)
- High
install.scriptpackages/bundle/package.jsoninstall-time"prepack": "node ../../scripts/build-bundle.mjs" - Low
network.external-hostpackages/ui/package.json:37network"xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
