registry  /  @storyteller-platform/align  /  0.1.50

@storyteller-platform/align@0.1.50

A library and CLI for automatically aligning audiobooks and EPUBs to produce Media Overlays

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsShell
Supply chain
UrlStrings
ManifestNo manifest risk signals triggered.
scanned 103 file(s), 495 KB of source, external domains: readium.org, www.idpf.org, www.w3.org

Source & flagged code

4 flagged · loading source
package.jsonView file
•scripts.install = node-gyp-build
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
dist/upgradeEpub/upgradeEpub.cjsView file
68package = @storyteller-platform/align; repositoryIdentity = storyteller; dependency = @storyteller-platform/epub L68: module.exports = __toCommonJS(upgradeEpub_exports); L69: var import_epub = require("@storyteller-platform/epub"); L70: async function upgradeEpub(input, output, { removeNcx = false }) {
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/upgradeEpub/upgradeEpub.cjsView on unpkg · L68
prebuilds/linux-arm64/@storyteller-platform+align.nodeView file
•path = prebuilds/linux-arm64/@storyteller-platform+align.node kind = native_binary sizeBytes = 158064 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

prebuilds/linux-arm64/@storyteller-platform+align.nodeView on unpkg
binding.gypView file
•path = binding.gyp kind = build_helper sizeBytes = 664 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

binding.gypView on unpkg

Findings

2 High4 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighCopied Package Dependency Bridgedist/upgradeEpub/upgradeEpub.cjs
MediumEnvironment Vars
MediumShips Native Binaryprebuilds/linux-arm64/@storyteller-platform+align.node
MediumShips Build Helperbinding.gyp
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowUrl Strings