Static Scan Results
scanned 17h ago · by rust-scannerStatic analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
1 flagged · loading sourcebin/gate-fuzzing.mjsView file
4package = @adlc/gate-fuzzing; repositoryIdentity = adlc; dependency = @adlc/core
L4:
L5: import { parseArgs, opError, pass, gateFail, printJson } from '@adlc/core';
L6: import { detectProvider, PROVIDER_NAMES } from '@adlc/core';
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
bin/gate-fuzzing.mjsView on unpkg · L4Findings
1 High2 Medium3 Low
HighCopied Package Dependency Bridgebin/gate-fuzzing.mjs
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings