registry / @oranlens/oranleads / 0.7.12
@oranlens/oranleads@0.7.12
⚠ Under review橙客 OranLeads：社媒评论区 AI 获客工作台（DSH 插件）
Static Scan Results
scanned 11d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
2 flaggedhost/index.jsView file
1"use strict";var ln=Object.create;var Bt=Object.defineProperty;var un=Object.getOwnPropertyDescriptor;var mn=Object.getOwnPropertyNames;var dn=Object.getPrototypeOf,fn=Object.proto...
L2: `;try{(0,he.appendFileSync)(t(),l)}catch{}};return(()=>{try{let o=Date.now()-12096e5;for(let n of(0,he.readdirSync)(e))n.endsWith(".log")&&Date.parse(n.slice(0,10)+"T00:00:00Z")<o&...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
host/index.jsView on unpkg · L1native/bin/win32-arm64/oranleads-core.nodeView file
•path = native/bin/win32-arm64/oranleads-core.node
kind = native_binary
sizeBytes = 6557184
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
native/bin/win32-arm64/oranleads-core.nodeView on unpkgFindings
5 Medium6 Low
MediumDynamic Requirehost/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarynative/bin/win32-arm64/oranleads-core.node
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @oranlens/oranleads@0.7.12.
See all versions of @oranlens/oranleads for other recorded verdicts.
- Review the evidence and your use of @oranlens/oranleads@0.7.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.