Static repository check
- Checked commit
e1ff8c1e4001- Evidence Score
- 82/100
- Static risk
- High risk
- Files scanned
- 5
- Findings
- 7
Evidence breakdown
Source provenance22/25
Install documentation25/25
Maintenance18/20
Compatibility evidence14/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (2)
dsh-pet/package.json#prepacknpm run types && npm run typecheck && npm run lint && npm run format:check && node scripts/prepack-check.jsdsh-pet/package.json#preparenode scripts/prepare.js
Findings (7)
- High
install.scriptdsh-pet/package.jsoninstall-time"prepare": "node scripts/prepare.js" - High
install.scriptdsh-pet/package.jsoninstall-time"prepack": "npm run types && npm run typecheck && npm run lint && npm run format:check && node scripts/prepack-check.js" - Medium
obfuscation.child-processdsh-pet/scripts/prepare.js:22obfuscationimport { spawnSync } from 'node:child_process'; - Medium
obfuscation.child-processdsh-pet/scripts/prepare.js:31obfuscation// Windows 下 npm 是 npm.cmd,spawnSync 无法直接执行 .cmd;用 cmd /c 跑整条命令 - Medium
obfuscation.child-processdsh-pet/scripts/prepare.js:35obfuscationconst build = spawnSync(npmRun, { cwd: ROOT, stdio: 'inherit', shell: true }); - Medium
obfuscation.child-processdsh-pet/scripts/prepare.js:44obfuscationconst buildCore = spawnSync(coreRun, { cwd: ROOT, stdio: 'inherit', shell: true }); - Medium
obfuscation.child-processdsh-pet/scripts/prepare.js:53obfuscationconst buildTypes = spawnSync(typesRun, { cwd: ROOT, stdio: 'inherit', shell: true });
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
