registry  /  @shumai-one/shumai-transcode  /  0.1.5

@shumai-one/shumai-transcode@0.1.5

Media transcoding worker for the shumai media workspace

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 261 KB of source, external domains: api.x.ai, api.xiaomimimo.com, api.z.ai, dotenvx.com, github.com, open.bigmodel.cn, token-plan-ams.xiaomimimo.com, token-plan-cn.xiaomimimo.com, token-plan-sgp.xiaomimimo.com
Oversized source lightweight scan
bin/shumai-transcode-app.js2.89 MB file, sampled 256 KB
FilesystemChildProcessEnvironmentVarsCryptoHighEntropyStringsMinifiedUrlStringsapi.x.aiapi.xiaomimimo.comapi.z.aidotenvx.comgithub.comopen.bigmodel.cntoken-plan-ams.xiaomimimo.comtoken-plan-cn.xiaomimimo.comtoken-plan-sgp.xiaomimimo.com

Source & flagged code

2 flagged · loading source
bin/shumai-transcode-app.jsView file
•path = bin/shumai-transcode-app.js kind = oversized_source_file sizeBytes = 3029177 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/shumai-transcode-app.jsView on unpkg
•path = bin/shumai-transcode-app.js kind = oversized_cli_entrypoint sizeBytes = 3029177 magicHex = [redacted]
Medium
Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/shumai-transcode-app.jsView on unpkg

Findings

1 High3 Medium4 Low
HighOversized Source Filebin/shumai-transcode-app.js
MediumEnvironment Vars
MediumOversized Cli Entrypointbin/shumai-transcode-app.js
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License