registry / easypng / 1.1.0

easypng@1.1.0

Static Scan Results

scanned 7h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

public snapshot

Behavioral surface

Source

Filesystem

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 12.5 KB of source, external domains: amanghuman.com

1 flagged

bin/easypng.jsView file

114package = easypng; repositoryIdentity = amanghuman; dependency = sharp L114: try { L115: require('sharp'); L116: } catch (err) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

1 flagged · loading source

bin/easypng.jsView file

114package = easypng; repositoryIdentity = amanghuman; dependency = sharp L114: try { L115: require('sharp'); L116: } catch (err) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

1 High1 Medium2 Low

HighCopied Package Dependency Bridgebin/easypng.js

MediumStructural Risk Force Deep Review

LowFilesystem

LowUrl Strings