@slowcook-ai/review-overlay@0.25.6
⚠ Under reviewFloating review overlay for slowcook mock previews — element-anchored comments, screenshot, viewport metadata; submits to the mockup PR via PAT. Mounted into the mock app's root layout. Plate parses the comments back out for amendments.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 9 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Decision evidence
public snapshotSource & flagged code
3 flaggedSource contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/comment-format.jsView on unpkg · L242A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/comment-format.jsView on unpkgFindings
Affected versions and remediation
This report applies to @slowcook-ai/review-overlay@0.25.6.
See all versions of @slowcook-ai/review-overlay for other recorded verdicts.
- Review the evidence and your use of @slowcook-ai/review-overlay@0.25.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.