registry / @viziouz/cc-statusline / 0.2.5

@viziouz/cc-statusline@0.2.5

Installer for the claude-statusline status line for Claude Code — model, effort, context, rate limits, cache efficiency.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 12.7 KB of source

Source & flagged code

3 flagged

package.jsonView file

Lines 11-51json

11 "exports": {

12 ".": {

13 "require": "./index.cjs",

14 "import": "./index.mjs"

15 },

16 "./package.json": "./package.json"

17 },

18 "files": [

19 "bin/cc-statusline.cjs",

20 "scripts/statusline.sh",

21 "scripts/statusline.ps1",

22 "scripts/postinstall.cjs",

23 "index.cjs",

24 "index.mjs",

25 "README.md"

26 ],

27 "scripts": {

28 "fetch-source": "node scripts/fetch-source.js",

29 "prepack": "node scripts/fetch-source.js",

30 "prepublishOnly": "node scripts/fetch-source.js",

31 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 "test": "node scripts/fetch-source.js && node bin/cc-statusline.cjs render < test/sample.json"

33 },

34 "engines": {

35 "node": ">=14.14"

36 },

37 "keywords": [

38 "claude",

39 "claude-code",

40 "claude-statusline",

41 "statusline",

42 "cli",

43 "npx"

44 ],

45 "license": "MIT",

46 "author": "vizi0uz <xwolf.live@gmail.com>",

47 "repository": {

48 "type": "git",

49 "url": "git+https://github.com/vizi0uz/cc-statusline.git"

50 }

51}

scripts/statusline.ps1View file

•path = scripts/statusline.ps1 kind = build_helper sizeBytes = 20076 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/statusline.ps1View on unpkg

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.json

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code