n8n-nodes-zalo-lengan: Clean npm security report (Allow)

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 136 KB of source, external domains: 127.0.0.1, bot-api.zaloplatforms.com, bot.zapps.me, developers.zalo.me

Source & flagged code

1 flagged

package.jsonView file

Lines 9-49json

9 "tools",

10 "n8n"

11 ],

12 "license": "MIT",

13 "homepage": "https://github.com/thelengan/zalo-node-lengan",

14 "author": {

15 "name": "lengan",

16 "email": "lengan@example.com"

17 },

18 "repository": {

19 "type": "git",

20 "url": "https://github.com/thelengan/zalo-node-lengan.git"

21 },

22 "engines": {

23 "node": ">=18.10",

24 "pnpm": ">=9.1"

25 },

26 "packageManager": "pnpm@9.1.4",

27 "main": "index.js",

28 "scripts": {

29 "preinstall": "npx only-allow pnpm",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

30 "build": "tsc && gulp build:icons",

31 "dev": "tsc --watch",

32 "format": "prettier nodes --write",

33 "lint": "eslint nodes package.json",

34 "lintfix": "eslint nodes package.json --fix",

35 "prepublishOnly": "pnpm build && pnpm lint -c .eslintrc.prepublish.js nodes credentials package.json",

36 "watch": "concurrently \"pnpm run watch\" \"pnpm run start:n8n\"",

37 "start:n8n": "nodemon --watch dist --exec \"npx n8n start\""

38 },

39 "files": [

40 "dist"

41 ],

42 "n8n": {

43 "n8nNodesApiVersion": 1,

44 "credentials": [

45 "dist/credentials/N8nZaloApi.credentials.js",

46 "dist/credentials/ZaloApi.credentials.js",

47 "dist/credentials/ZaloBotApi.credentials.js"

48 ],

49 "nodes": [

Source & flagged code

1 flagged · loading source

package.jsonView file

•scripts.preinstall = npx only-allow pnpm

High

n8n-nodes-zalo-lengan@0.9.8

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code