Static Scan Results
scanned 12d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
1 flagged · loading sourcedist/safety.jsView file
36'chmod -R', 'chown -R', 'chgrp -R',
L37: // PowerShell (Windows)
L38: 'powershell', 'pwsh', 'Invoke-Expression', 'IEX',
...
L83: // Skip flags (starting with - or /flag on Windows)
L84: if (arg.startsWith('-') || (process.platform === 'win32' && arg.startsWith('/'))) {
L85: continue;
...
L113: });
L114: return { success: true, stdout: output };
L115: }
...
L134: template: templateName,
L135: user: os.userInfo().username,
L136: result,
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/safety.jsView on unpkg · L36Findings
2 Medium6 Low
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/safety.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings