Static repository check
- Checked commit
17ee0fe777a4- Evidence Score
- 69/100
- Static risk
- High risk
- Files scanned
- 12
- Findings
- 9
Evidence breakdown
Source provenance25/25
Install documentation15/25
Maintenance18/20
Compatibility evidence8/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (1)
integrations/deepseek-harness/package.json#prepacknpm run build
Findings (9)
- High
install.scriptintegrations/deepseek-harness/package.jsoninstall-time"prepack": "npm run build" - Medium
credentials.env-secretintegrations/deepseek-harness/cordis.patch.yml:11credential-accessAuthorization: !!js '`Bearer ${process.env.POLARIS_DSH_TOKEN ?? ""}`' - Medium
credentials.env-secretintegrations/deepseek-harness/cordis.patch.yml:25credential-accesstoken: !!js 'process.env.POLARIS_DSH_TOKEN ?? ""' - Medium
deps.core-package-installedintegrations/deepseek-harness/package.jsondependencies"@deepseek-ai/schemastery": "3.18.1" - Medium
deps.core-package-installedintegrations/deepseek-harness/package.jsondependencies"@deepseek-ai/dsh-mcp-client": "0.1.0-rc.6" - Medium
deps.core-package-installedsrc/kernel/package.jsondependencies"@deepseek-ai/cordis-plugin-loader": "workspace:*" - Medium
deps.core-package-installedsrc/kernel/package.jsondependencies"@deepseek-ai/cordis": "workspace:*" - Medium
deps.core-package-installedsrc/kernel/package.jsondependencies"@deepseek-ai/cosmokit": "workspace:*" - Medium
deps.core-package-installedsrc/kernel/package.jsondependencies"@deepseek-ai/schemastery": "workspace:*"
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0