registry  /  @super-line/plugin-inspector  /  0.2.1

@super-line/plugin-inspector@0.2.1

Control Center inspector for super-line, packaged as a plugin — taps + a plugin-owned CC connection.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 14.0 KB of source

Source & flagged code

1 flagged · loading source
dist/index.jsView file
16package = @super-line/plugin-inspector; repositoryIdentity = super-line; dependency = @standard-community/standard-json L16: try { L17: const mod = await import("@standard-community/standard-json"); L18: return mod.toJsonSchema;
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L16

Findings

1 High1 Medium1 Low
HighCopied Package Dependency Bridgedist/index.js
MediumStructural Risk Force Deep Review
LowScripts Present