Static repository check
- Checked commit
8c5d3c86f012- Evidence Score
- 79/100
- Static risk
- High risk
- Files scanned
- 6
- Findings
- 7
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance12/20
Compatibility evidence14/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (1)
prepacknode scripts/build-client.js && node scripts/check-client-stale.js
Findings (7)
- High
install.scriptpackage.jsoninstall-time"prepack": "node scripts/build-client.js && node scripts/check-client-stale.js" - Medium
obfuscation.child-processscripts/build-client.js:1obfuscationimport { spawnSync } from 'node:child_process' - Medium
obfuscation.child-processscripts/build-client.js:13obfuscationconst derive = spawnSync(process.execPath, [resolve(root, 'scripts/build-typert.js')], { - Medium
obfuscation.child-processscripts/build-client.js:27obfuscationconst result = spawnSync(process.execPath, [tsdownRun, '--config', 'tsdown.config.mjs'], { - Medium
obfuscation.child-processscripts/check-client-stale.js:3obfuscationimport { spawnSync } from 'node:child_process' - Medium
obfuscation.child-processscripts/check-client-stale.js:13obfuscationconst derive = spawnSync(process.execPath, [resolve(ROOT, 'scripts/build-typert.js')], { - Medium
obfuscation.child-processscripts/check-client-stale.js:32obfuscationconst result = spawnSync(process.execPath, [resolve(ROOT, 'node_modules/tsdown/dist/run.mjs'), '--config', 'tsdown.config.mjs'], {
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0