Static repository check
- Checked commit
dec45bf6132e- Evidence Score
- 76/100
- Static risk
- High risk
- Files scanned
- 3
- Findings
- 19
Evidence breakdown
Source provenance25/25
Install documentation25/25
Maintenance12/20
Compatibility evidence11/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (1)
prepacknode --check lib/index.js
Findings (19)
- High
install.scriptpackage.jsoninstall-time"prepack": "node --check lib/index.js" - Medium
credentials.env-secretlib/index.js:786credential-accessconst secret = config.secret || process.env.DSH_AUTH_SECRET || randomBytes(32).toString("hex"); - Low
network.external-hostlib/index.js:182networkauthorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth", - Low
network.external-hostlib/index.js:183networktokenUrl: "https://oauth2.googleapis.com/token", - Low
network.external-hostlib/index.js:184networkuserInfoUrl: "https://www.googleapis.com/oauth2/v3/userinfo", - Low
network.external-hostlib/index.js:192networkauthorizeUrl: "https://discord.com/oauth2/authorize", - Low
network.external-hostlib/index.js:193networktokenUrl: "https://discord.com/api/oauth2/token", - Low
network.external-hostlib/index.js:194networkuserInfoUrl: "https://discord.com/api/users/@me", - Low
network.external-hostlib/index.js:202networkauthorizeUrl: "https://gitlab.com/oauth/authorize", - Low
network.external-hostlib/index.js:203networktokenUrl: "https://gitlab.com/oauth/token", - Low
network.external-hostlib/index.js:204networkuserInfoUrl: "https://gitlab.com/api/v4/user", - Low
network.external-hostlib/index.js:212networkauthorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize", - Low
network.external-hostlib/index.js:213networktokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token", - Low
network.external-hostlib/index.js:214networkuserInfoUrl: "https://graph.microsoft.com/v1.0/me", - Low
network.external-hostlib/index.js:223networkauthorizeUrl: "https://bitbucket.org/site/oauth2/authorize", - Low
network.external-hostlib/index.js:224networktokenUrl: "https://bitbucket.org/site/oauth2/access_token", - Low
network.external-hostlib/index.js:225networkuserInfoUrl: "https://api.bitbucket.org/2.0/user", - Low
network.external-hostlib/index.js:568networkreturn new URL(req.url ?? "/", "http://dsh.local").pathname; - Low
network.external-hostlib/index.js:1161networkconst url = new URL(req.url, "http://dsh.local");
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0