registry / slugsocial / 0.0.68

slugsocial@0.0.68

Slug Social CLI shim (execs bundled Rust slugsocial) — npx-friendly

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 4.76 KB of source

Source & flagged code

1 flagged

package.jsonView file

Lines 1-32json

2 "name": "slugsocial",

3 "version": "0.0.68",

4 "description": "Slug Social CLI shim (execs bundled Rust slugsocial) — npx-friendly",

5 "license": "MIT",

6 "repository": {

7 "type": "git",

8 "url": "git+https://github.com/sortersocial/slug.git"

9 },

10 "bin": {

11 "slugsocial": "bin/slugsocial.js"

12 },

13 "scripts": {

14 "postinstall": "node scripts/ensure-platform.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

15 },

16 "files": [

17 "bin/slugsocial.js",

18 "scripts/ensure-platform.js",

19 "README.md",

20 "package.json"

21 ],

22 "optionalDependencies": {

23 "@sortersocial/slugsocial-darwin-arm64": "0.0.68",

24 "@sortersocial/slugsocial-darwin-x64": "0.0.68",

25 "@sortersocial/slugsocial-linux-arm64": "0.0.68",

26 "@sortersocial/slugsocial-linux-x64": "0.0.68"

27 },

28 "engines": {

29 "node": ">=18"

30 }

31}

Source & flagged code

1 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/ensure-platform.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code