registry / @ownmail/app / 0.1.1
@ownmail/app@0.1.1
The OwnMail mailbox and calendar app (TanStack Start on Cloudflare Workers)
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
Source & flagged code
2 flaggedscripts/serve-node.mjsView file
11const root = join(dirname(fileURLToPath(import.meta.url)), '..')
L12: const { default: server } = await import(pathToFileURL(join(root, 'dist-vercel', 'server', 'server.js')).href)
L13:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
scripts/serve-node.mjsView on unpkg · L11dist/client/fonts/manrope-latin.woff2View file
•path = dist/client/fonts/manrope-latin.woff2
kind = high_entropy_blob
sizeBytes = 24576
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dist/client/fonts/manrope-latin.woff2View on unpkgFindings
1 High4 Medium6 Low
HighShips High Entropy Blobdist/client/fonts/manrope-latin.woff2
MediumDynamic Requirescripts/serve-node.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @ownmail/app@0.1.1.
See all versions of @ownmail/app for other recorded verdicts.
- Review the evidence and your use of @ownmail/app@0.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.