registry  /  vde-monitor  /  0.9.8

vde-monitor@0.9.8

Monitor tmux sessions with a web UI.

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 302 file(s), 10.8 MB of source, external domains: api.anthropic.com, fb.me, github.com, json-schema.org, platform.claude.com, radix-ui.com, raw.githubusercontent.com, react.dev, tanstack.com, www.w3.org

Source & flagged code

2 flagged · loading source
dist/web/assets/codeql-DsOJ9woJ.jsView file
1const e=Object.freeze(JSON.parse('{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/codeql-DsOJ9woJ.jsView on unpkg · L1
dist/index.jsView file
10import webpush from "web-push"; L11: import { execa, execaSync } from "execa"; L12: import { spawn } from "node:child_process"; ... L21: import { streamSSE } from "hono/streaming"; L22: import { createServer } from "node:net"; L23: import { createInterface as createInterface$1 } from "node:readline/promises"; ... L578: if (path.extname(configPath).toLowerCase() === ".json") try { L579: return JSON.parse(raw); L580: } catch { ... L767: const getTokenDir = () => { L768: return path.join(os.homedir(), ".vde-monitor"); L769: };
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L10

Findings

4 Medium6 Low
MediumDynamic Requiredist/web/assets/codeql-DsOJ9woJ.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/index.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings