registry / @superdoc/cli-darwin-x64 / 0.47.0
@superdoc/cli-darwin-x64@0.47.0
⚠ Under reviewSuperDoc CLI binary for macOS x64. Selected automatically by @superdoc/cli; do not install it directly.
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe manifest maps the CLI command to a Mach-O executable, and the available analysis explicitly leaves native behavior unresolved. With no supported executable analysis and no separate verified attack evidence, the source does not support a clean or malicious verdict.
Static reason
No blocking static signals were detected.
Trigger
A user invokes the installed superdoc command.
Impact
Unknown until the native executable is analyzed with supported methods.
Mechanism
The command launches bin/superdoc; the inspected analysis does not establish the executable's full behavior or reachability.
AI rationale
The manifest maps the CLI command to a Mach-O executable, and the available analysis explicitly leaves native behavior unresolved. With no supported executable analysis and no separate verified attack evidence, the source does not support a clean or malicious verdict.
Evidence
bin/superdoc.lpm-inspection-8e7O2D/0-dba6708872cc.txt
Decision evidence
public snapshotAI called this Manual Review at 96.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json maps the superdoc command to the native executable at bin/superdoc.
- The available native analysis covers only bounded embedded source windows and does not resolve loader reachability or other native behavior.
- The blank.docx analysis identifies a DOCX archive with no reported inspection limitations.
Evidence against
- No concrete attack behavior was established by the inspected excerpts.
Behavioral surface
CopyleftLicense
Source & flagged code
7 flaggedbin/superdocView file
•path = bin/superdoc
kind = native_binary
sizeBytes = 88817456
magicHex = [redacted]
Medium
bin/assets/blank.docxView file
•path = bin/assets/blank.docx
kind = high_entropy_blob
sizeBytes = 12520
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
bin/assets/blank.docxView on unpkg•path = bin/assets/blank.docx
kind = compressed_blob
sizeBytes = 12520
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
bin/assets/blank.docxView on unpkgFindings
1 High3 Medium5 Low
HighShips High Entropy Blobbin/assets/blank.docx
MediumShips Native Binarybin/superdoc
MediumShips Compressed Blobbin/assets/blank.docx
MediumStructural Risk Force Deep Review
LowNested Archive Needs Inspectionbin/assets/blank.docx
LowCopyleft License
LowAi Review Evidencepackage.json
LowAi Review Evidence.lpm-inspection-8e7O2D/0-dba6708872cc.txt
LowAi Review Evidence.lpm-inspection-8e7O2D/1-03a03d8d313d.txt
Affected versions and remediation
This report applies to @superdoc/cli-darwin-x64@0.47.0.
See all versions of @superdoc/cli-darwin-x64 for other recorded verdicts.
- Review the evidence and your use of @superdoc/cli-darwin-x64@0.47.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.