registry / @jjlmoya/landings / 0.5.0

@jjlmoya/landings@0.5.0

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystem

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 22 file(s), 60.0 KB of source

Source & flagged code

2 flagged

package.jsonView file

Lines 1-41json

2 "name": "@jjlmoya/landings",

3 "version": "0.5.0",

4 "type": "module",

5 "main": "./src/index.ts",

6 "types": "./src/index.ts",

7 "exports": {

8 ".": "./src/index.ts",

9 "./entries": "./src/entries.ts",

10 "./team": "./src/landing/team/landing.astro",

11 "./team/entry": "./src/landing/team/entry.ts"

12 },

13 "files": [

14 "src",

15 "scripts"

16 ],

17 "publishConfig": {

18 "access": "public"

19 },

20 "scripts": {

21 "postinstall": "node ./scripts/copy-public-assets.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

22 "dev": "astro dev",

23 "start": "astro dev",

24 "build": "astro build",

25 "preview": "astro preview",

26 "astro": "astro",

27 "lint": "eslint src/ --max-warnings 0 && stylelint \"src/**/*.{css,astro}\"",

28 "check": "astro check",

29 "type-check": "astro check",

30 "test": "vitest run",

31 "preversion": "npm run lint && npm run test",

32 "postversion": "git push && git push --tags",

33 "patch": "npm version patch",

34 "minor": "npm version minor",

35 "major": "npm version major"

36 },

37 "lint-staged": {

38 "*.{ts,tsx,astro}": [

39 "eslint --fix"

40 ]

41 },

src/landing/team/assets/music/bob-techno.mp3View file

•path = [redacted]-techno.mp3 kind = high_entropy_blob sizeBytes = 2130758 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/landing/team/assets/music/bob-techno.mp3View on unpkg

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/copy-public-assets.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/landing/team/assets/music/bob-techno.mp3View file

•path = [redacted]-techno.mp3 kind = high_entropy_blob sizeBytes = 2130758 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/landing/team/assets/music/bob-techno.mp3View on unpkg

Findings

2 High1 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighShips High Entropy Blobsrc/landing/team/assets/music/bob-techno.mp3

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowNo License

Source & flagged code

2 flagged

package.jsonView file

Lines 1-41json

2 "name": "@jjlmoya/landings",

3 "version": "0.5.0",

4 "type": "module",

5 "main": "./src/index.ts",

6 "types": "./src/index.ts",

7 "exports": {

8 ".": "./src/index.ts",

9 "./entries": "./src/entries.ts",

10 "./team": "./src/landing/team/landing.astro",

11 "./team/entry": "./src/landing/team/entry.ts"

12 },

13 "files": [

14 "src",

15 "scripts"

16 ],

17 "publishConfig": {

18 "access": "public"

19 },

20 "scripts": {

21 "postinstall": "node ./scripts/copy-public-assets.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

22 "dev": "astro dev",

23 "start": "astro dev",

24 "build": "astro build",

25 "preview": "astro preview",

26 "astro": "astro",

27 "lint": "eslint src/ --max-warnings 0 && stylelint \"src/**/*.{css,astro}\"",

28 "check": "astro check",

29 "type-check": "astro check",

30 "test": "vitest run",

31 "preversion": "npm run lint && npm run test",

32 "postversion": "git push && git push --tags",

33 "patch": "npm version patch",

34 "minor": "npm version minor",

35 "major": "npm version major"

36 },

37 "lint-staged": {

38 "*.{ts,tsx,astro}": [

39 "eslint --fix"

40 ]

41 },

src/landing/team/assets/music/bob-techno.mp3View file

•path = [redacted]-techno.mp3 kind = high_entropy_blob sizeBytes = 2130758 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/landing/team/assets/music/bob-techno.mp3View on unpkg