registry / open-omni / 1.4.0

open-omni@1.4.0

⚠ Under review

Open Omni — grab any video from YouTube, X, Instagram, Threads & 1800+ sites — right from your terminal. paste. download. done.

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 211 KB of source, external domains: 127.0.0.1, codeberg.org, github.com, igect.link, www.instagram.com, www.youtube.com, youtu.be, youtube.com

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2var __getOwnPropNames = Object.getOwnPropertyNames;

3var __commonJS = (cb, mod) => function __require() {

4 return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

5};

7// package.json

8var require_package = __commonJS({

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L6

9 "package.json"(exports, module) {

10 module.exports = {

11 name: "open-omni",

12 version: "1.4.0",

13 description: "Open Omni \u2014 grab any video from YouTube, X, Instagram, Threads & 1800+ sites \u2014 right from your terminal. paste. download. done.",

14 type: "module",

15 bin: {

16 "open-omni": "dist/cli.js",

17 openomni: "dist/cli.js",

18 omni: "dist/cli.js",

19 oo: "dist/cli.js"

20 },

21 files: [

22 "dist/cli.js"

23 ],

24 engines: {

25 node: ">=20"

26 },

Lines 1164-1204javascript

1164 combined += d.toString();

1165 });

1166 child.on("error", (err) => resolve({ code: -1, output: err.message }));

1167 child.on("close", (code) =>

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

6L7: // package.json L8: var require_package = __commonJS({ ... L37: name: "Igect", L38: url: "https://igect.link/" L39: }, ... L90: import path9 from "path"; L91: import { Box as Box15, Text as Text17, useApp, useInput as useInput3, useStdout as useStdout3 } from "ink"; L92: import Spinner3 from "ink-spinner"; ... L360: if (!isActive || !stdin || !stdout || !process.stdin.isTTY) return; L361: stdout.write(ENABLE); L362: const onData = (data) => {

open-omni@1.4.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code