registry  /  contentrain  /  0.7.8

contentrain@0.7.8

CLI for Contentrain — AI content governance infrastructure

Static Scan Results

scanned 15h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 92 file(s), 761 KB of source, external domains: 127.0.0.1, ai.contentrain.io, github.com, studio.contentrain.io, vuejs.org, www.w3.org

Source & flagged code

1 flagged · loading source
dist/server-Dn-zy9bv.mjsView file
•matchType = previous_version_dangerous_delta matchedPackage = contentrain@0.7.5 matchedIdentity = npm:Y29udGVudHJhaW4:0.7.5 similarity = 0.978 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server-Dn-zy9bv.mjsView on unpkg

Findings

1 High2 Medium4 Low
HighPrevious Version Dangerous Deltadist/server-Dn-zy9bv.mjs
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings