Static repository check
- Checked commit
03222eed20dd- Evidence Score
- 70/100
- Static risk
- High risk
- Files scanned
- 8
- Findings
- 5
Evidence breakdown
Compatibility confidence: Limited
Install-time scripts (3)
packages/approval/package.json#prepackpnpm run build && node ../../scripts/verify-package-notices.mjspackages/execpolicy/package.json#prepacknode ../../scripts/verify-package-notices.mjspackages/apply-patch-engine/package.json#prepackpnpm run build && node scripts/verify-native.mjs && node ../../scripts/verify-package-notices.mjs
Findings (5)
- High
install.scriptpackages/apply-patch-engine/package.jsoninstall-time"prepack": "pnpm run build && node scripts/verify-native.mjs && node ../../scripts/verify-package-notices.mjs" - High
install.scriptpackages/approval/package.jsoninstall-time"prepack": "pnpm run build && node ../../scripts/verify-package-notices.mjs" - High
install.scriptpackages/execpolicy/package.jsoninstall-time"prepack": "node ../../scripts/verify-package-notices.mjs" - Medium
deps.core-package-installedpackages/apply-patch-engine/package.jsondependencies"@deepseek-ai/schemastery": "3.18.1" - Medium
deps.core-package-installedpackages/execpolicy/package.jsondependencies"@deepseek-ai/schemastery": "3.18.1"
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0