.awcache

00f42a62edcf46f80dd58e007d29809a9bdcf697e1e6b47307b0c8e7198f1f2c42ff30312f0416689c78b8ab91c24e658c0d445b1694a5bc3889346899d77591.json.gzip

04567e310e69831c8a98f22276d10e3dc9749a14d5ed58c46a5445dcb7af53c5b19e6898f78b62ec7be53921c63e0f174c96dd38cd150a76aed8373e5cacede6.json.gzip

06c25db45113cc5a4a8d038477355c472fba027a088e6d2e10d52a3bc6740c6c547f5acbc266448044ae788147c3c6a389befd43737a2a256d90186233d89de6.json.gzip

0707ceda6118c2296e71e79877107a00fd9db0e23a13475c95ace599f3e66331ea59dad2b1f89d7c720eff9f56a49be878f366c1d970932419b4649f98dd2adc.json.gzip

07678136b7d29e04a567faffd105962c4195bc483408d53cfd593c20296fb0771731aca9afd3aa532437d40f99588d49a5213ed03e9724637c804bb427d98aa6.json.gzip

08d4b3d76ba8625b57551c60db4cabdbe4adc96d5b06ce66f78382a3e0043f26befcda20bb312c2ed35f9a70aa0c89956c43c5018e1ee8cdcad402492307d792.json.gzip

0ccb86f8d207e4e5677b0b4b39c07e614505377d4b7f92c42afa81f0636456481bd99c46f417d1aab97b82c311e39bc05ca73563471ca5ea0998169f435259c6.json.gzip

0ed199283584dddd3ad55fef79b1f9015766ea2c2ee61c670cc521b33095b9dcc3cf2e16855283561b26c1b829967539429c8bfe786a2bef84b8a130983d8dcc.json.gzip

14e8b3a8eded5eb75ba567aae87607a4dbeaa4f29b5fc74eaba2e420901f31cd7b269458726d26b9933d74765f2cb844bac83c6d02a348158f708f13c886f883.json.gzip

1a2165bd712bad3b3ef8942b098a009cd3cd8c0d856b2980dacfc639e8a1b485e42dc5555c62f32d710117a0eaef3922f220c8dc41ed25da4d5b48ae82081458.json.gzip

1dbb259df1a6be96ebfc7c53d5ff428d2c92c0fe328ea2eaff8ce2f97e4b2fb20174103c281a38c71730c6bc38381ec6c5c1ccd8a17c8baa03d532a0789fa0da.json.gzip

1e025c6374fde648a3aff48eb7e97be9d26b575eabd1ab87811f63616ce035e91616aceb63c56a2c55783118f204c74a59aee39157d3b17456084eb45d6a5285.json.gzip

243f2ff36189b60bc414f977f4ebe81dd9d4594b5963254a73c03eb61aa00d1bf2625ff305c960faeae266bdfdd0262c3adfd31b5b1c1a451b4a95a07d2e1b26.json.gzip

250194e46f83fb676b944808543207b81d8a44e79523de66ca53328008ac58733b4715bdd2034452893ce124814c48a0746a2ba23c17100c3325a9339c026af0.json.gzip

261870957e54a9d607a35b4757ac9ecdd0f825f90d3baf85751502aa28f4a2a7ab7b1b72d2bec08ac2892187f20213c9795a93cb0f7d0888de16b12f1618728d.json.gzip

27b0c0e7b717a76d683376543112a3de7b63d5fdca3d42a37b549a30b0f16138426aa309fe52bad033963d0b65ca58d0502ed1cf0cc6b3ae67c64f5e2fcbef56.json.gzip

2806d42639256a1935042338e1204267070a5253864ffd88aed8be2e5dc69c6b5802ddbd21eda3e6e95ce74a33beddb3c7f3bd99c72b7bcc3fed54df3908ed66.json.gzip

292fbcda7803a350cd8cb81cb3d2473ca3fc42a8e2bf819c4727710fe31cdd96557347bc5e6f7edf416da3f9e30285214bea0125ae60f9614b63d781b65e488f.json.gzip

29b9e016b11b6deacfa10f95f957aa9388cfe71f475d1d3040f950ddb8d02c8e6b3fa99a047a61e501712337be85931f0985e19c9ba4c12339a9c35fde58cef9.json.gzip

2a96d382dbf9dc6f57ac614576ea9e62b9a8be729bc7da750a7ff4151f5d670a746f43e21e9077f5f02e442f684c2ada00132f43c0dfda286c55527859a6187a.json.gzip

2b37fef5921c94cb7b40aedb7aa1cd3e8aff68f418064cf451b137b0ce70615f3bf6557366d05294dd4b0a26f9fa31db5f9c1fa26539dc316a8e69c647ed4e9d.json.gzip

2dd538cef1fabb8a7613238ca5edbf7812203e8fcac480da975cbd8785e06b6fca5a3b4459a0eb0240f57bf9aa1e254770ed38a8db95717b5c5aa25cf1e3a0a3.json.gzip

2eed2794069d537ed02422882924e184ceb7eda3d996624e913a40f2b5b57f42b1d757696db8d563c9d5664de49d4f03b69a3e2bc0d1199defaa59e63a8b390e.json.gzip

32629e5c076f3c5745b08aed723453010555c1099b5b8e4fa98f93526808669c057728637458adea77f5cf9e04b05fbf34eac438130b7dd32a4caf79143c4aff.json.gzip

35269d26e4eca30faabf49b63694479160c16f948fa3556184b5b5f3cbfb8732e306b226d649ed737c75161245705f1ed10e93c5624e32901e3fd9d6fd1cbc01.json.gzip

37e4baf2a3194692e5d4790ceab869fa4526ffbdc540046d907e2de359c36df5e2f850411534f65b55b4342b40fb6b30bd6b6da3753dfbf254d4de0c185b032f.json.gzip

380d7f0d376ccfb3d9eecf15d57ffb30498d9e331e689fc5b4100c488b321d5a6a2711018ec3b5363be4256907a8cf7fd0e5f2aa5a4a30b548f8783fedccfbf2.json.gzip

3e113e63a262f8dd7b993957ad5c01176795ac870ed3454fbd54d069df4b1257d6ee26b32ce2d46e8372abe7eb7619edbd684f8799825f8d77220aba909edd68.json.gzip

3e97d2e08d1d0aa4e6dca57ed8e07f22d09cf2e730c4357e37f7a0bc9f027cc27ad4c7c593f018f5a5a57422e7b095fb0132c5623912e91d5445867bd3d56742.json.gzip

3f17ccdb1599f82ab57f3222cd9bdfa77c99df1d86239dadec2bbf0083658a17ed777058e11bd85af60d96eaeff739ca333b7254ee14b9f7ca81ab19262827ed.json.gzip

40f7dc6a524317593a19d822e35a91ca4849a0898d7808e4c00b3709f2f9b75c2e0570e4dbfdb7a14e685396e5f4681a7de5e5b173081d946557671b8db98af5.json.gzip

41221f4fcbf9203a636c3848e4e5bf87e1bff9ca90fad37f03f3fc628e8f9a37269d90b33581dc83bae4bd403d510679b1751ba64fdf8b81b274154404e610b3.json.gzip

4211caefafdb3d064cb03d59cad61d623bcb6f3fa783af7f2fb21df80f877114afb135569bd4e30704a1d58adc2e58196c5e89e7b8fd77b4e1d108b710cc54cb.json.gzip

444ebdfdaccbcf8fd10f27998c3166bf236122979b44535e9d26b1d8f4511a33468a4048ff89e739c67145be53d308d19238bd290c9e779ff7a54413ea0bd1d4.json.gzip

47668a08345b816a20903cacda3956cd5977508ea4267e22803edc4bb3d9ef95f670f462a804e1302c85a6aec0de353cf7425627d979d696bcba7109793a9f67.json.gzip

4dd0644a7dfadbb113b7e0b8036a6840406930b1988ed9eeb2c4e2c56f5143f93abd45bff5fe863e9febb11092f26c532e77632a97ec9af7e30544a98dd65d45.json.gzip

4ddc08498d5df798ab2155f9d69ada4b1c4c14c46a8f788badfe2b21b72ce39d7e87b1b85d85b0d0e9d15f6159ca109220d8ab852aaec241eee4fbfe7653afc6.json.gzip

4ee49616f79e6df27fe42ee2ac69e040bf718830ececc6451e113256f953fb38d0e9728a8953d802121d3b5a96a7087f68a28231c94135f86c37da395065a676.json.gzip

5006c6d2d558b7e7fe0e9434f22b0117124023b342cbd5d2b46f5d52960697672b68735481b62aa04b99b752a145a8c9aac45538dce90a3dbf50b345e5209369.json.gzip

502f632ecda9bd9e62aa0337e3ad75302f6eb5d68b83edcb7c084b4be74fd6805e137849534f64dd81f7fb15ade4614bdc216f247f776de07d14db25c8cc7b4a.json.gzip

55b177779fd873709ffc210aee43c15cef8927a4a88e942aa1c317da24a6f098609e173bf9d7f4f00373ad79111d046faec8fdb56c055f42a8a8aa602f31f7a5.json.gzip

55de24558854da687529901a9eb59fa91265daeb995783c4beaa9c3076058cdb671dc278521ccbee4322fbfdafc4fd92e94b2ca03442ea75b982be3e827556ea.json.gzip

5f4e842f23dcf063395dc8184d62da9da149a6a2f18d9f2bbbe1c722621241f3343faec2c7e6c07bd82ab7f00d04317919ce2b3afdd0c0f4eb517f1ae98256d5.json.gzip

6222843e07666d44101451b2d004a4fd04ac4644f4fe2f52e1f4519bafdfb3245d04823d3e0c1f125f3510bf94519aab7fe554cf8f167080beb86beea5436512.json.gzip

63a853d51fe95d6152fdc3f97650e936f58b701b494c9658ac996230ad9410fba95387831d48103f800fedf986e13be321325eee4180855e5acc16d2d9c82c21.json.gzip

6416f092d885f01c402580e3a2d299dc6f501680e10117d7de15dd8eaa721a345b96f16576b2927aaf70832acd8210c342d33da5ad0f1b9d9c03f19485591122.json.gzip

645d3b59c6ca496c28f6d8cd54be6b4efa20a96c5e1fed781d626196b1dc2f961efb328b55bee93dc3b1baaf41dac6484268847f6f66eb12fe619a96f032147a.json.gzip

6596bc19a59de68d5449fafacdc1124a77dc3beb85ec65202b09987566735c3ec86ab2445e486e0e3d376c623747f01c94f6528481e484b1b60b1ed46c965aad.json.gzip

6f2bcaa3f37e6c2d1614c2fcb6f6ebbd3dae3948965de5835a677a301ed9ef3b40398efcf780f0ec85c79af54dd94ded4d6fe5db85b1407016ca47ca55aa6a26.json.gzip

77db01e0646a634cb94c651b02d4ed1837647d41e6fa8fe3756581262e24cb88fe6a59f49e970ae67c9db9768b99d37bb06e77ca9fe1400b463eca30651804de.json.gzip

77e1ddd9ab20bd75ed90043560385b8d5f5cfc29fb774d0d6c222d3a2a9e07093541de33c41c8d03b786623a59bdcc50f255c2f9c3980fedcbeafdc3f75e9fe3.json.gzip

7a6fd70a988751ca9bdb68bea6b128acc3ece490babbdf55079c2fe8ebde590e8ec771905c1d464d4c839cad36fb641aaeb4b9a428f592ce02a378b73360a017.json.gzip

7fdea0129f872e1370ff393cbbc22a016c7401e7dbbd569810198f264252dbeda724ffb6e188b8b9c83d3bdfc347f44eae792216a2b97b2200e47b320c200c85.json.gzip

80153543c8a8eec144d1e90618e9abe95bff4c44b76ac371bd42cadae0ede499783e5d99f837c7c1da13b12a4d15c01966cc400b08397912203437d20e81b1c0.json.gzip

8157fcddf402ec92f86eb839b53f92cd8bb82be9cdbf0b65c7086c7f8b8b101dd1b7171b96a8138b79e3d3c2624395b25756dadee207024182feec85dfa7c6cb.json.gzip

83b62602a324882c8643873179b6f20e8f7fd5479d5ef8b24b572a78c2dc51f747741ce3de0d2f7fc272ab29fc6b2904f3e616c43a056cfef93434b07cd9a030.json.gzip

8450306bdefe193a6f1ffa2dbf4fe29030d31dd31796aed66fe6bc421e44de076d00054b94c3b16034b03ee27f30bccf6fba328ca491a4729a2a110ccd121a50.json.gzip

88d5ab43dc19d8cf24230fa22a4a39b890898cd34d7a2c59af620588e2c7b76c288893d2b05d69afed2c850cdf1887e16925eca22ffc84f450aafb31ecde1221.json.gzip

8adaa14849d5580756278f3246b5a484081ac87833973d5c8faa39713cddbbb5863312f609e05a312d5c20ccfaa27c08a32f13049c1c2693bc925979a6fb64b6.json.gzip

8b8102b32f40217df942c2ded0007140894badd33b0b6866ef21abdddf2824036b2a34df09572fa4ba0ad80bab6000a79deb0fce0a5f651d55abd6fcd738cc4c.json.gzip

8caa9c94d03210588d35ff1e89f8629fbc68adb45099ab6478b34ddea293d27c2471f61339a74ad76d9c9aa7785a4fc304edb929ab1f90f7ee949b6c90022ca4.json.gzip

8f9a51e99341143d66e803e3a27cbf6f64907727535b348240d2dde61d641b2f545413bc3e4f538323c7cda223b7dd048744261046ac6bbe13ebb5f07ed0d0ef.json.gzip

94aed248bb1d387d1e7f28f274aad05646ef237398e008ab463c50c06ce52bf3f8981b81e80b422f0d2cb4843fc77a88653947e730fdb4014638de90e2016016.json.gzip

9bec6b2bd886efebfed8ab5c7ed7dea767943b92b477d5e24749f3172875be8cecf122db195a2878a95ab4ac45e43aa7747900c0429f67d99d43f42bd69408c8.json.gzip

9bf0c239d2e350e3307d6ef6f3d6c4bbe5654e3d69c4faf9cdc08f971ea595d022a27c31dc9e72386f5ae6cdab3a42b1c1fdde79a0f17dac01687bc1b6ad78bd.json.gzip

9cfee0824d253526c736a963fc53e0ea38b02a97f26a12ccf7ae95ea0e62560673fa4266934be73dddde590750ac907814b11e253c422b1b18b8576d121f2998.json.gzip

9d48827dfcece4b0ec31d630a2721ef0b555f0935d0dae39b57572b255c48dff764c4e77824664636ce5f10a31500b27e70a7d4859027a48980edc86117734fe.json.gzip

a42d71ac3852150edf9de9ef9e05e823b1769fce3ae88e6d3bc2344543d7667d82433935211ef4331499202c7e09d78fcf3e5d49a7fd91bdb716f76bc477822c.json.gzip

a5554d18562bca0f61b1f6cc17407f093e015285e78949a1b5f2f7f65ddda968366c48bb3800f8aada611c1da2be0e8f594d1f931562d03e4fed4279ef4ce01f.json.gzip

a78a3975c30d06f83a5561cd24a076741ff6ce1c10e60dc4ac7bee12723b758707a64b65b465d2ce9f0eca7d6f500bfbd5a17f93b03600cf887a41678f264c6a.json.gzip

b59efee02c71fa626d11e3fca17ebba2b8caafe778cc0c5c0bda3ef755f7d119f856b31bbc14e374757282b0f6085160bdd2729decf5e9824416bdedeff94013.json.gzip

b85d7c515551da74507704d0f4ede23ebf9803b5fc37a6935e510f4f5f3f99bc6fe54332e54a9f9b045ea201a9a44c69c16841e225406827f16b7bdf52410591.json.gzip

bd4f1604d73b5e5f3a09bd8a543eddac713ce2a328fc75022db4be87374305b6bdd758c019687c3fb0f997e595bf4855c0271061d757cb7d17bfa888072b9d82.json.gzip

c2258b6e53d5680360b30ed005f13d93a864e90e65a83e9db29512f1093bd8e4995399339f70e851af79cb99b51c7726588c2d1bf669a8c63b9452905ae4a0e5.json.gzip

c2ea63cd2f6c08176d713e03135df4e9461359117f468b81c5842110e07a0bcba484329876f50388a2cfdbd9324e8b57d5ea06c8b045a6f206bcca036a31e2a1.json.gzip

c3e992480d3234d055b0b16e10b35bdb7bae037eeea3c9b60d68781419ccf5e8f5ba7bf03a79c748bbfeb6ad55ccb81ab915cd8116518ebbb0c0abc483bc0579.json.gzip

c41c8bf844538c80bf41f1932ebd49c5642d2bb426f2e6b2124b8fd8a77ec639160a6c95e63bf3c24b1267a61121234ef94a18066af960cb454fa98e6915a63d.json.gzip

c6f2b57d79a8f45dbd5cdcc85b7648c6ef9beb5a617b47e93f0dbf94a8d2890c2ca23fad574d2c16c2503993b66ad63b2b685c25a9fc63d54c182ff45c4cfbe9.json.gzip

c88926425f3cf588616009ad62d522cc9e8b6a85840c3e3e004df6328a46b0858a1c7dfaeabd4a53eedc912c1518e069f0b2883440b2cc392f7183546908763b.json.gzip

cbd843d1c97e88ea953bef3e6bb65b3b6c8b8033c7d03155d31a2b07fb08f6ddf226b8aa854f0a6818ee3362e1efa5c2dfbd5fb4ae234f28c4d0f58cda1904e4.json.gzip

ccd8d12535d5cb2b8ba0ffa64205656f1ad4797c60d9ecb9e4c880a12c80733454470dfed7f69413f0866083ec532460b2afebc65d177149aa4ee1ccd08e98e6.json.gzip

d493344d64a61919281631dc471fe000ada3f910ce7d9ffbdefddf9448f74feb35b86dee3f7d3427fbd2336f5fa1427c24a1ad2be65ce8d1dbfd02f257f505a2.json.gzip

d517ff4de8e3bdb28623610fcfc7e77a8b7340093058e61bb1a66eb140790da43ab54bd7bb482bc2f566332f78225ab50bc03c737d0270d65c0dd87e5382b26b.json.gzip

d7656a5719097b42887d96900bc92376fdace5f75a3a00d014f84ce48b4da38cee76d5ebf073e0a39cf9fc26c25fb6a4bfba2f9abe1fa0d540c720ec0bf4de6e.json.gzip

d7b0a7210d24f1a7c86f620bfeadd20b11b05b015d7bdbb4528e8ec8f5d7b1eb091342a0011f68aa71ccba33e5d42e42a30e12a9d8c685c336d54525909d509d.json.gzip

d809766e993eae85dcfdf0b7accfc4d318886f4eddda51786572b1ac55ea23ff31c5aa048097ef4194c3bd173d04e825ae9ee0b1aec6fefa9b66c6e3ad968d59.json.gzip

d9e7b5af8d70dd20346e6807edc5315633bcb6a6cb38f0ea22ce2b04dcb1daa05dd5669a74f606c7b3151c9defa021d234dddf92eecd7c8b155c16ccf31f627c.json.gzip

d9f87c6d29c28c69ee818772ee2c5d819d53ce88df0da816d218cf6d32e64e3cb040546b33fa8c6f73d7c08d75df817e448e4dd5ff3513c4be70c47ab85c05e5.json.gzip

dd6f0b95ddef35e59dbefe1a8160311e31d4ab548b944e2eb17cde19576cd2f98270e7458d332bdd60a01770fddf1f08061abf847d34326e5c8f4b37ff885cd1.json.gzip

df72b88bc45b06df201c5ba9a41f6923eb6e2d8b0c59a7ad548fa79ca35c41a7d68cb72cc3c1761b5efdd408a04d5234e8e03132f52e8e178ad7d2b683fc8ced.json.gzip

dfd8e1da8d2a44fcbc4b0c83f8f4e4d67a206fcbc71d01d593041259fe2a1c3d30b488697c92468d6528236b173058ae545697dba1fdf5c40ee64d5997bdb842.json.gzip

e022e44192d2e7f226b9d2747ac2f9b26e395e120c16e767af8a35955456d93113c430b8063fecc3260285cb53626daecffdf8378d98aebcf8fe3f78011eed90.json.gzip

e1ab8766b1cf7d3473bdb972424920c2a91acd27128440cdcb43af47aac72e1127b9635a9d6fb1c63d8cc8c57ab1847a91c3fd8b17c6f07cb4df3314d86e5902.json.gzip

e343e18e66b0f712310cbc07af9d544a3a1acb6ec486fe850fb9da1c84ff5eef4d3d153d057ca2a659448ca3ce88dbea0fe874cc88977f300d522e6f8bf537f5.json.gzip

e4f75185a68574195924bbe5c885087b58b6490111b4575c569ea7037ed57dc1fd4ca972fbbc9bcf351519e232952a4c14534b2255fe98eba0606eee8bb1a327.json.gzip

e5c7be50164edf8643e8e6a3e90deb8635abac2c460ee19786c1f84a4e96c78cac4ffca935d0820aea253e247bc9dbc0519a3a061bb9fc95132e612f3da9ccda.json.gzip

e72c08a6fd6d2a259d8f507fc9fddcbd3b3e1d1a6d4f27ba0861845c19135b272918cdc42bfd8211468f9613b0fe8e3941a2a2971d10d4a625f0ce670c18fb69.json.gzip

e7779fb33204dbc6c3cff33af64984213cefe6cf21cc021d038b4234d012b36f0e58c6550049cb10f0caa209bf95fe26e50eceb1cc81470ac73d6f865d32be55.json.gzip

ea7a7bb7fcd6463bf6ac870dd30741f8166e8b690816467e840ae212aaaafee6db6ec9c4ce573b12f99eceb1072847a6e8fd0f093e9c2f9772f47a5177a3cba0.json.gzip

See how Anthropic automated 95% of dependency reviews with Socket

flipping

davidkpiano

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

flipping - npm Package File explorer