registry  /  timestretcher  /  3.0.0

timestretcher@3.0.0

Offline time-stretching and pitch-shifting with Rubber Band, returning an AudioBuffer

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
FilesystemNetwork
Supply chain
HighEntropyStringsMinified
Manifest
CopyleftLicense
scanned 4 file(s), 462 KB of source

Source & flagged code

4 flagged · loading source
build/timestretcher.bundled.jsView file
3patternName = aws_access_key severity = critical line = 3 matchedText = var INLI...ull;
Critical
Critical Secret

Package contains a critical-looking secret pattern.

build/timestretcher.bundled.jsView on unpkg · L3
3patternName = aws_access_key severity = critical line = 3 matchedText = var INLI...ull;
Critical
Secret Pattern

AWS access key ID in build/timestretcher.bundled.js

build/timestretcher.bundled.jsView on unpkg · L3
build/rubberband-wasm.wasmView file
•path = build/rubberband-wasm.wasm kind = wasm_module sizeBytes = 337308 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

build/rubberband-wasm.wasmView on unpkg
build.shView file
•path = build.sh kind = build_helper sizeBytes = 859 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

build.shView on unpkg

Findings

2 Critical4 Medium4 Low
CriticalCritical Secretbuild/timestretcher.bundled.js
CriticalSecret Patternbuild/timestretcher.bundled.js
MediumNetwork
MediumShips Wasm Modulebuild/rubberband-wasm.wasm
MediumShips Build Helperbuild.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowCopyleft License