registry  /  cctally  /  1.58.0

cctally@1.58.0

Claude Code usage tracker and local dashboard for Pro/Max subscription limits - weekly cost-per-percent trend, quota forecasts, threshold alerts. ccusage-compatible.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 892 KB of source, external domains: github.com, reactjs.org, www.w3.org

Source & flagged code

3 flagged · loading source
package.jsonView file
•scripts.postinstall = node ./bin/cctally-npm[redacted]
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
bin/_lib_render.pyView file
•path = bin/_lib_render.py kind = build_helper sizeBytes = 130743 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/_lib_render.pyView on unpkg
dashboard/static/assets/newsreader-latin-500-normal-DFwuUcdu.woffView file
•path = [redacted]-latin-500-normal-DFwuUcdu.woff kind = high_entropy_blob sizeBytes = 29636 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dashboard/static/assets/newsreader-latin-500-normal-DFwuUcdu.woffView on unpkg

Findings

2 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighShips High Entropy Blobdashboard/static/assets/newsreader-latin-500-normal-DFwuUcdu.woff
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/_lib_render.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings