registry  /  @amityco/social-plus-vise  /  1.5.0

@amityco/social-plus-vise@1.5.0

Skill-guided deterministic CLI for social.plus SDK integration assistance.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 37 file(s), 1.26 MB of source, external domains: github.com, learn.social.plus, registry.npmjs.org

Source & flagged code

2 flagged · loading source
package.jsonView file
•scripts registry_only=bench,bench:audit-boundaries,bench:experience-calibration,bench:experience-calibration:advisory-seeds,bench:experience-calibration:conditional-feasibility,bench:experience-calibration:dogfood-preview,bench:experience-calibration:dogfood-summary,bench:experience-calibration:gate3-advisory-quality; devDependencies registry_only=@amityco/social-plus-schemas,@types/node,ajv,typescript
Critical
Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg
dist/tools/debug.jsView file
•matchType = previous_version_dangerous_delta matchedPackage = @amityco/social-plus-vise@1.4.6 matchedIdentity = npm:[redacted]:1.4.6 similarity = 0.730 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tools/debug.jsView on unpkg

Findings

1 Critical1 High2 Medium5 Low
CriticalManifest Confusionpackage.json
HighPrevious Version Dangerous Deltadist/tools/debug.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License