registry  /  joplin-plugin-claude  /  0.3.1

joplin-plugin-claude@0.3.1

Chat with Claude inside Joplin - Claude can read, search, create and edit your notes (powered by your local Claude Code CLI)

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedTrivial
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 28.3 KB of source

Source & flagged code

5 flagged · loading source
publish/index.jsView file
1(()=>{"use strict";var e={317(e){e.exports=require("child_process")},896(e){e.exports=require("fs")},611(e){e.exports=require("http")},928(e){e.exports=require("path")}};const t={}...
High
Child Process

Package source references child process execution.

publish/index.jsView on unpkg · L1
1(()=>{"use strict";var e={317(e){e.exports=require("child_process")},896(e){e.exports=require("fs")},611(e){e.exports=require("http")},928(e){e.exports=require("path")}};const t={}...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

publish/index.jsView on unpkg · L1
1(()=>{"use strict";var e={317(e){e.exports=require("child_process")},896(e){e.exports=require("fs")},611(e){e.exports=require("http")},928(e){e.exports=require("path")}};const t={}...
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

publish/index.jsView on unpkg · L1
publish/plugin.jplView file
•path = publish/plugin.jpl kind = high_entropy_blob sizeBytes = 12115 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

publish/plugin.jplView on unpkg
•path = publish/plugin.jpl kind = compressed_blob sizeBytes = 12115 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

publish/plugin.jplView on unpkg

Findings

4 High4 Medium3 Low
HighChild Processpublish/index.js
HighSame File Env Network Executionpublish/index.js
HighCommand Output Exfiltrationpublish/index.js
HighShips High Entropy Blobpublish/plugin.jpl
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobpublish/plugin.jpl
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings