Static repository check
- Checked commit
772040f6f4ac- Evidence Score
- 81/100
- Static risk
- High risk
- Files scanned
- 3
- Findings
- 5
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance17/20
Compatibility evidence11/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (1)
prepacknode scripts/prepack.mjs
Findings (5)
- High
install.scriptpackage.jsoninstall-time"prepack": "node scripts/prepack.mjs" - High
shell.rm-rfpackage.json:45dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.json && tsdown", - High
shell.rm-rfpackage.json:47dangerous-shell"check": "rm -rf lib && tsc -p tsconfig.json && vitest run && tsdown", - Medium
obfuscation.child-processscripts/prepack.mjs:2obfuscationimport { spawnSync } from 'node:child_process' - Medium
obfuscation.child-processscripts/prepack.mjs:5obfuscationconst result = spawnSync(command, ['run', 'build'], {
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
