registry / unbrowse / 12.0.1

unbrowse@12.0.1

Call websites as APIs: a thin CLI over the Unbrowse API.

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 20.5 KB of source, external domains: 127.0.0.1, unbrowse.ai

Source & flagged code

2 flagged

dist/cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3// src/cli.ts

4import { spawn } from "node:child_process";

5import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L3

6import { readFileSync as readFileSync2 } from "node:fs";

8// src/auth.ts

9import { createHash, randomBytes } from "node:crypto";

10import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

11import { createServer } from "node:http";

12import { homedir } from "node:os";

13import { dirname, join } from "node:path";

14function configPath() {

15 const root = process.env.UNBROWSE_CONFIG_DIR ?? join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"), "unbrowse");

16 return join(root, "cli.json");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L3

17}

18function load() {

19 const path = configPath();

20 if (!existsSync(path))

21 return {};

22 try {

23 return JSON.parse(readFileSync(path, "utf8"));

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

3// src/cli.ts L4: import { spawn } from "node:child_process"; L5: import { randomUUID } from "node:crypto";

unbrowse@12.0.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code