Static repository check
- Checked commit
2cdf64c7a6d1- Evidence Score
- 72/100
- Static risk
- High risk
- Files scanned
- 13
- Findings
- 3
Evidence breakdown
Source provenance22/25
Install documentation15/25
Maintenance18/20
Compatibility evidence14/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (2)
npm/cli/package.json#postinstallnode bin/postinstall.mjsexamples/openclaw-plugin/package.json#prepacknpm run build
Findings (3)
- High
install.scriptexamples/openclaw-plugin/package.jsoninstall-time"prepack": "npm run build" - High
install.scriptnpm/cli/package.jsoninstall-time"postinstall": "node bin/postinstall.mjs" - Medium
obfuscation.child-processnpm/cli/bin/postinstall.mjs:2obfuscationimport { execFileSync } from "node:child_process";
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0
