Static repository check
- Checked commit
df3c48a1dff7- Evidence Score
- 94/100
- Static risk
- Medium risk
- Files scanned
- 2
- Findings
- 3
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance17/20
Compatibility evidence17/20
Security signals10/10
Compatibility confidence: Medium
Findings (3)
- Medium
credentials.env-secretcordis.patch.yml:14credential-accessapiKeyEnv: !!js process.env.DSH_VISION_API_KEY_ENV ?? 'SILICONFLOW_API_KEY' - Medium
credentials.env-secretcordis.patch.yml:16credential-accessmaxTokens: !!js Number(process.env.DSH_VISION_MAX_TOKENS ?? 4096) - Low
network.external-hostcordis.patch.yml:11networkvisionBaseURL: !!js process.env.DSH_VISION_BASE_URL ?? 'https://api.siliconflow.cn/v1'
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0