Static repository check
- Checked commit
5ddd3bafffde- Evidence Score
- 67/100
- Static risk
- High risk
- Files scanned
- 4
- Findings
- 7
Evidence breakdown
Compatibility confidence: Limited
Install-time scripts (2)
prepackpnpm run build:allpreparepnpm run build:all
Findings (7)
- High
install.scriptpackage.jsoninstall-time"prepack": "pnpm run build:all" - High
install.scriptpackage.jsoninstall-time"prepare": "pnpm run build:all" - Medium
credentials.env-secretcordis.patch.yml:388credential-accesstoken: !!js "process.env.TELEGRAM_BOT_TOKEN ?? ''" - Medium
deps.core-package-installedscripts/spike/intercept/package.jsondependencies"@deepseek-ai/dsh-host-webserver": "0.1.0-rc.8" - Medium
deps.core-package-installedscripts/spike/intercept/package.jsondependencies"@deepseek-ai/dsh-client-connection": "0.1.0-rc.8" - Medium
deps.core-package-installedscripts/spike/intercept/package.jsondependencies"@deepseek-ai/dsh-host-frontend-static": "0.1.0-rc.8" - Medium
deps.core-package-installedscripts/spike/intercept/package.jsondependencies"@deepseek-ai/cordis": "4.0.1"
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0