仓库静态检查
- 检查 Commit
de8069428a92- 证据分
- 82/100
- 静态风险
- 高风险
- 扫描文件
- 12
- 检查发现
- 12
证据分项
来源溯源22/25
安装文档25/25
维护状况18/20
兼容性证据14/20
安全信号3/10
兼容性置信度: 有限
安装期脚本 (4)
apps/memos-local-plugin/package.json#prepacknpm run check:hermes-version && npm run build:packageapps/memos-local-plugin/package.json#postinstallnode scripts/postinstall.cjsapps/memos-local-openclaw/package.json#postinstallnode scripts/postinstall.cjsapps/openwork-memos-integration/apps/desktop/package.json#postinstallelectron-rebuild && npm --prefix skills/dev-browser install && npm --prefix skills/file-permission install && npm --prefix skills/ask-user-question install
检查发现 (12)
- 高
install.scriptapps/memos-local-openclaw/package.jsoninstall-time"postinstall": "node scripts/postinstall.cjs" - 高
install.scriptapps/memos-local-plugin/package.jsoninstall-time"postinstall": "node scripts/postinstall.cjs" - 高
install.scriptapps/memos-local-plugin/package.jsoninstall-time"prepack": "npm run check:hermes-version && npm run build:package" - 高
install.scriptapps/openwork-memos-integration/apps/desktop/package.jsoninstall-time"postinstall": "electron-rebuild && npm --prefix skills/dev-browser install && npm --prefix skills/file-permission install && npm --prefix skills/ask-user-question install" - 高
shell.rm-rfapps/openwork-memos-integration/apps/desktop/package.json:10dangerous-shell"dev": "node scripts/patch-electron-name.cjs && rm -rf dist-electron && vite", - 高
shell.rm-rfapps/openwork-memos-integration/apps/desktop/package.json:22dangerous-shell"clean": "rm -rf dist dist-electron release", - 高
shell.rm-rfapps/openwork-memos-integration/package.json:18dangerous-shell"clean": "pnpm -r clean && rm -rf node_modules" - 高
shell.rm-rfapps/openwork-memos-integration/packages/shared/package.json:13dangerous-shell"clean": "rm -rf dist" - 中
obfuscation.child-processapps/memos-local-openclaw/scripts/postinstall.cjs:4obfuscationconst { spawnSync } = require("child_process"); - 中
obfuscation.child-processapps/memos-local-openclaw/scripts/postinstall.cjs:161obfuscationconst result = spawnSync(npmCmd, ["install", "--omit=dev"], { - 中
obfuscation.child-processapps/memos-local-openclaw/scripts/postinstall.cjs:428obfuscationconst result = spawnSync(npmCmd, ["rebuild", "better-sqlite3"], { - 中
shell.sudoapps/memos-local-openclaw/scripts/postinstall.cjs:456dangerous-shell${YELLOW} ║${RESET} ${CYAN}Ubuntu:${RESET} sudo apt install build-essential python3 ${YELLOW}║${RESET}
未执行的检查
- 依赖漏洞数据库扫描
- 实际安装测试
- 运行时行为验证
扫描器 1.0.0 · 评分器 1.0.0