Static repository check
- Checked commit
8434ece29896- Evidence Score
- 87/100
- Static risk
- High risk
- Files scanned
- 3
- Findings
- 5
Evidence breakdown
Compatibility confidence: Medium
Install-time scripts (1)
plugin/dsh-voice-mode/package.json#prepacknode build.mjs
Findings (5)
- High
install.scriptplugin/dsh-voice-mode/package.jsoninstall-time"prepack": "node build.mjs" - Medium
obfuscation.child-processplugin/dsh-voice-mode/build.mjs:7obfuscationimport { execSync } from 'node:child_process' - Medium
obfuscation.child-processplugin/dsh-voice-mode/build.mjs:15obfuscationBUILD_TAG = execSync('git rev-parse --short HEAD', { encoding: 'utf8' }).trim() - Medium
obfuscation.child-processplugin/dsh-voice-mode/build.mjs:93obfuscation// --- 本地 TTS 合成子进程(child_process.fork,CJS 以获得 IPC 通道)--- - Medium
deps.core-package-installedplugin/dsh-voice-mode/package.jsondependencies"@deepseek-ai/schemastery": "^3.18.1"
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
