Static repository check
- Checked commit
4aee1e7a9ec9- Evidence Score
- 71/100
- Static risk
- High risk
- Files scanned
- 3
- Findings
- 7
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance12/20
Compatibility evidence6/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (1)
preparenode tools/verify-pack.mjs
Findings (7)
- High
install.scriptpackage.jsoninstall-time"prepare": "node tools/verify-pack.mjs" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/schemastery": "^3.18.2" - Medium
obfuscation.child-processtools/verify-pack.mjs:19obfuscationimport { spawnSync } from "node:child_process"; - Medium
obfuscation.child-processtools/verify-pack.mjs:68obfuscationconst result = spawnSync(process.execPath, ["--check", p], { encoding: "utf8" }); - Low
network.external-hostcordis.patch.yml:1network# (c) 2026 Jose AI (https://www.linhut.cn) - Low
network.external-hostpackage.json:5network"author": "Jose AI (https://www.linhut.cn)", - Low
network.external-hosttools/verify-pack.mjs:2network// (c) 2026 Jose AI (https://www.linhut.cn)
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
