registry  /  @antseed/node  /  0.2.97

@antseed/node@0.2.97

Broken dependency pin: published against @antseed/api-adapter 0.1.39 while requiring newer streaming adapter exports. Use @antseed/node >=0.2.98.

Antseed Network protocol SDK — P2P inference marketplace

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 122 file(s), 787 KB of source, external domains: 127.0.0.1, base.drpc.org, base.llamarpc.com, base.publicnode.com, github.com, mainnet.base.org, network.antseed.com, raw.githubusercontent.com, sepolia.base.org

Source & flagged code

3 flagged · loading source
package.jsonView file
•scripts.postinstall = node scripts/patch-ethers.js
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
dist/config/plugin-loader.jsView file
5export async function loadPluginModule(packageName, pluginsDir) { L6: const { join, resolve } = await import('node:path'); L7: const { pathToFileURL } = await import('node:url');
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/config/plugin-loader.jsView on unpkg · L5
dist/discovery/dht-node.jsView file
213return; L214: if (!this.config.allowPrivateIPs && !isPublicIP(peer.host)) L215: return;
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/discovery/dht-node.jsView on unpkg · L213

Findings

1 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumDynamic Requiredist/config/plugin-loader.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/discovery/dht-node.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License