registry  /  @cristianormazabal/triton-latex  /  0.1.2

@cristianormazabal/triton-latex@0.1.2

LaTeX integration for Triton — render diagrams to vector PDF for \includegraphics.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessFilesystem
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 1.26 MB of source, external domains: www.w3.org

Source & flagged code

1 flagged · loading source
dist/cli.cjsView file
43316package = @cristianormazabal/triton-latex; repositoryIdentity = triton; dependency = pdfkit L43316: // src/pdf.ts L43317: var import_pdfkit = __toESM(require("pdfkit")); L43318: var import_svg_to_pdfkit = __toESM(require("svg-to-pdfkit"));
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cli.cjsView on unpkg · L43316

Findings

1 High1 Medium5 Low
HighCopied Package Dependency Bridgedist/cli.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings