Static repository check
- Checked commit
8e0cd7fcfaf0- Evidence Score
- 76/100
- Static risk
- High risk
- Files scanned
- 6
- Findings
- 2
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance17/20
Compatibility evidence6/20
Security signals3/10
Compatibility confidence: Unknown
Install-time scripts (1)
packages/dsh-companion/package.json#preparepnpm build
Findings (2)
- High
install.scriptpackages/dsh-companion/package.jsoninstall-time"prepare": "pnpm build" - High
shell.rm-rfpackages/dsh-companion/package.json:22dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && node ../../scripts/copy-styles.mjs && tsdown && node ../../scripts/copy-assets.mjs",
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
