registry  /  bmdl-sdk  /  1.5.4

bmdl-sdk@1.5.4

This is a [Next.js](https://nextjs.org) project bootstrapped with [`create-next-app`](https://nextjs.org/docs/app/api-reference/cli/create-next-app).

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemShell
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 10 file(s), 12.6 KB of source

Source & flagged code

4 flagged · loading source
bmdl-sdk-1.5.4.tgzView file
•path = bmdl-sdk-1.5.4.tgz kind = high_entropy_blob sizeBytes = 37699 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bmdl-sdk-1.5.4.tgzView on unpkg
•path = bmdl-sdk-1.5.4.tgz kind = compressed_blob sizeBytes = 37699 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

bmdl-sdk-1.5.4.tgzView on unpkg
•path = bmdl-sdk-1.5.4.tgz kind = nested_archive_needs_inspection sizeBytes = 37699 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

bmdl-sdk-1.5.4.tgzView on unpkg
bin/dev.jsView file
•matchType = previous_version_dangerous_delta matchedPackage = bmdl-sdk@1.5.0 matchedIdentity = npm:Ym1kbC1zZGs:1.5.0 similarity = 0.700 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/dev.jsView on unpkg

Findings

2 High3 Medium3 Low
HighShips High Entropy Blobbmdl-sdk-1.5.4.tgz
HighPrevious Version Dangerous Deltabin/dev.js
MediumEnvironment Vars
MediumShips Compressed Blobbmdl-sdk-1.5.4.tgz
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowNested Archive Needs Inspectionbmdl-sdk-1.5.4.tgz