Static Scan Results
scanned 2d ago · by rust-scannerStatic analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Oversized source lightweight scan
bin/cli.js7.83 MB file, sampled 256 KB
FilesystemChildProcessEnvironmentVarsHighEntropyStringsMinified
Source & flagged code
4 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node scripts/ensure-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgscripts/release-local.shView file
•path = scripts/release-local.sh
kind = build_helper
sizeBytes = 3031
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
scripts/release-local.shView on unpkgbin/cli.jsView file
•path = bin/cli.js
kind = oversized_source_file
sizeBytes = 8212194
magicHex = [redacted]
High
Oversized Source File
Package contains source files above the static scanner size ceiling.
bin/cli.jsView on unpkg•path = bin/cli.js
kind = oversized_cli_entrypoint
sizeBytes = 8212194
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
bin/cli.jsView on unpkgFindings
2 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighOversized Source Filebin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/release-local.sh
MediumOversized Cli Entrypointbin/cli.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings