仓库静态检查
- 检查 Commit
5c30dde7966c- 证据分
- 66/100
- 静态风险
- 高风险
- 扫描文件
- 18
- 检查发现
- 105
证据分项
兼容性置信度: 有限
安装期脚本 (4)
cocode-gui/package.json#preparehuskycocode-tui/package.json#prepacknode scripts/publishable-manifest.mjs applycocode-gui/package.json#postinstallnode scripts/harden-electron-default-app.mjscocode-host-supervisor/package.json#prepackpnpm run build
检查发现 (105)
- 高
install.scriptcocode-gui/package.jsoninstall-time"postinstall": "node scripts/harden-electron-default-app.mjs" - 高
install.scriptcocode-gui/package.jsoninstall-time"prepare": "husky" - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-account/package.json:37dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-appearance/package.json:37dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-brand/package.json:38dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-desktop/package.json:39dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-dsml/package.json:20dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-input-history/package.json:33dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-message-feedback/package.json:36dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-models/package.json:37dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-shortcuts/package.json:42dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
shell.rm-rfcocode-gui/packages/cocode/cocode-workbench/package.json:46dangerous-shell"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown", - 高
install.scriptcocode-host-supervisor/package.jsoninstall-time"prepack": "pnpm run build" - 高
install.scriptcocode-tui/package.jsoninstall-time"prepack": "node scripts/publishable-manifest.mjs apply" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-ui-primitives": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-commands": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-compaction": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-code-runtime": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-store": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-modules": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-web": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-attachment": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-api-remotes": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-api-gateway": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-agent": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cosmokit": "1.8.2" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis-plugin-loader": "1.0.3" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis-plugin-include": "1.0.7" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis-plugin-hmr": "1.0.17" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/cordis": "4.0.2" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-agent-default-model": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/schemastery": "3.18.2" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-web-app": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-typert-registry": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-user-approval": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-system-prompt": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-subagent": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-storage-domain": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-storage": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-skill": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-scope": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-shell": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-shell-env": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-sandbox": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-title": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-query": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-projection-cache": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-projection": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-output-retention": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-jobs": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-home-paths": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-invariants": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-ui-slots": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-gui/package.jsondependencies"@deepseek-ai/dsh-client-ui-renderer": "0.1.2-alpha.5" - 中
obfuscation.child-processcocode-gui/scripts/harden-electron-default-app.mjs:1obfuscationimport { spawn } from "node:child_process" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-anonymous-user-id": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-workflow": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/cordis-plugin-group": "1.0.2" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-api-gateway": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-agent": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-typert-registry": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-typert-loader": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-tools": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-system-prompt": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-subprocess-local": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-subagent-in-process-driver": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-subagent": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-settings": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-spill": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-shell": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-scope": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-sandbox": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-title-llm": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-telemetry-otel": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-telemetry": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-query-sqlite": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-query": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-projection-cache": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-persistence-jsonl": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-session": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-output-retention": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-llm-pi-ai": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-llm-deepseek": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-llm": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-jobs": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-host-webserver": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-host-frontend-static": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-fs": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-credentials-local": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-compaction": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-code-runtime": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-bash-local": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-attachment-local": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/package.jsondependencies"@deepseek-ai/dsh-authorization": "0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/schemastery": "^3.18.2" - 中
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-timeout": "^0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-brand": "^0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-util-values": "^0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-typert-protocol": "^0.1.2-alpha.5" - 中
deps.core-package-installedcocode-host-supervisor/packages/host-supervisor/package.jsondependencies"@deepseek-ai/dsh-util-crypto": "^0.1.2-alpha.5"
- 依赖漏洞数据库扫描
- 实际安装测试
- 运行时行为验证
扫描器 1.0.0 · 评分器 1.0.0
