Static repository check
- Checked commit
5b2db966a6ef- Evidence Score
- 85/100
- Static risk
- High risk
- Files scanned
- 4
- Findings
- 4
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance18/20
Compatibility evidence14/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (1)
plugin/package.json#prepacknode scripts/verify-client-boundary.mjs
Findings (4)
- High
install.scriptplugin/package.jsoninstall-time"prepack": "node scripts/verify-client-boundary.mjs" - High
obfuscation.function-constructorplugin/scripts/verify-client-boundary.mjs:140obfuscationnew Function('window', code)(windowSink.window) - Medium
obfuscation.child-processplugin/scripts/verify-client-boundary.mjs:20obfuscation* exemption. `fs`/`path`/`child_process`/`os`/`util`/`zlib`/... all fail. - Medium
obfuscation.child-processplugin/scripts/verify-client-boundary.mjs:55obfuscation'fs', 'node:fs', 'path', 'node:path', 'child_process', 'node:child_process',
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
