registry / @nebulacomponents/citable / 1.3.1

@nebulacomponents/citable@1.3.1

Production-grade SEO, AEO, and GEO agent skill with auditable detection, claim governance, evidence validation, and multi-agent installation.

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 43 file(s), 319 KB of source, external domains: agenticcommerce.dev, blog.cloudflare.com, developers.cloudflare.com, example.test, fonts.gstatic.com, google.github.io, invalid.test, llmstxt.org, modelcontextprotocol.io, mpp.dev, registry.npmjs.org, schema.org, ucp.dev, www.x402.org

Source & flagged code

1 flagged

src/commands/selfUpgrade.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @nebulacomponents/citable@1.2.0 matchedIdentity = npm:[redacted]:1.2.0 similarity = 0.738 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/commands/selfUpgrade.jsView on unpkg

Source & flagged code

1 flagged · loading source

src/commands/selfUpgrade.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code