registry  /  vibebeauty-workshop-kit  /  0.1.7

vibebeauty-workshop-kit@0.1.7

VibeBeauty Web Designing workshop kit for data-driven AI prototyping.

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 3 file(s), 27.2 KB of source, external domains: 127.0.0.1

Source & flagged code

2 flagged · loading source
kit/starter/start-workshop.jsView file
5const path = require("path"); L6: const { spawn } = require("child_process"); L7:
High
Child Process

Package source references child process execution.

kit/starter/start-workshop.jsView on unpkg · L5
3const fs = require("fs"); L4: const http = require("http"); L5: const path = require("path"); L6: const { spawn } = require("child_process"); L7: L8: const workspaceDir = path.resolve(getArg("--root") || __dirname); L9: const startPort = Number(process.env.PORT || getArg("--port") || 8000); L10: const shouldOpen = !hasFlag("--no-open");
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

kit/starter/start-workshop.jsView on unpkg · L3

Findings

2 High2 Medium5 Low
HighChild Processkit/starter/start-workshop.js
HighSame File Env Network Executionkit/starter/start-workshop.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License