registry  /  sibyl-test  /  1.0.9

sibyl-test@1.0.9

A lightweight, zero-dependency browser testing framework built on Web Components

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 5 file(s), 46.2 KB of source, external domains: cdn.jsdelivr.net

Source & flagged code

4 flagged · loading source
bin/sb-test.jsView file
3import { program } from "commander"; L4: import { spawn } from "child_process"; L5: import path from "path";
High
Child Process

Package source references child process execution.

bin/sb-test.jsView on unpkg · L3
19stdio: "inherit", L20: shell: true L21: });
High
Shell

Package source references shell execution.

bin/sb-test.jsView on unpkg · L19
17return new Promise((resolve, reject) => { L18: const child = spawn("npx", ["playwright", "install", "webkit", "chromium"], { L19: stdio: "inherit",
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/sb-test.jsView on unpkg · L17
10L11: const require = createRequire(import.meta.url); L12: const pkg = require("../package.json");
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/sb-test.jsView on unpkg · L10

Findings

3 High4 Medium4 Low
HighChild Processbin/sb-test.js
HighShellbin/sb-test.js
HighRuntime Package Installbin/sb-test.js
MediumDynamic Requirebin/sb-test.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings