.awcache

00f42a62edcf46f80dd58e007d29809a9bdcf697e1e6b47307b0c8e7198f1f2c42ff30312f0416689c78b8ab91c24e658c0d445b1694a5bc3889346899d77591.json.gzip

0151bfba9232b1001d48be4c42eea48feca5db992646e19a6167ea62e00bccea79302bad74b0c07a8e182fe63537c33769080dcf9182e9e76f653e33f8b8201d.json.gzip

01a6d80fb222f86f7d4907c00c4fd1abf4a639d05bc698dadd28424fddaccfb28cb49739c577f61939e482032471d039a06d7593bcf560f1fb42598a1ee94fca.json.gzip

020016a577bfdcad76d45a372a135472d6fc5b5e5854d5e4014469d1881d428cf99fab70015db48a65fa09ff4e3a0176523892c374b719c95d2e617d4ff2ceba.json.gzip

02180b4b08ce665cb0c3eb8a0bda3e52d7744a40a952804b3d0975a0d7908920e58619d3a4fe424276bbba308fee25ec8620a3eabd4acbe00f1b7465ddc68c80.json.gzip

02f96bf5f02a73ae01031ef15c5d157bc6bea20bad4b47466780ae9344525d08155f4f665cf032855e2471a979700bb26f46ef30ea9cb5c880b156dfc26373f5.json.gzip

02fce02b0911b5e52ab757e6ed3b4929ef5efbf8172fe17a8734150670eb0f17588e60729d2f4d961ec58504b4cc0a7d19cb11d1076f0fb58c00a6076bea7af8.json.gzip

0372cda9cd212e9c68f3f8f16e58c8d7cc8622bffca99b0a88998215bb84e1e9861c68ceb6f81aac0e0c6583ac7f957c583e3751cf6ad95571e985864f68418b.json.gzip

03b02baf50438857caaffb5847fab09902c24ab577d005cbbb484306c0c8e444a9f753c708454601d2158c4fdc21997499388714999375f3b3b34a3df810b190.json.gzip

03b2b55715195d9ffa2c80466e8296490fe700ece8998b8a4d6d46a36571aa1cf1e861f0b4ea4eb5978949bcf95c0385d6433b5df652a5ed0a0d9f5d1d83686e.json.gzip

0446c4cdd8fcdc2a2d4291c39f187f65fb83c9a2a88c7b977617c676fc839d78940b38e2a222a520ca8a56f33015117fbe4f5c9572e3eb07bff06867100d6b88.json.gzip

04567e310e69831c8a98f22276d10e3dc9749a14d5ed58c46a5445dcb7af53c5b19e6898f78b62ec7be53921c63e0f174c96dd38cd150a76aed8373e5cacede6.json.gzip

0487c6a4ba2d93d7502a5b4a036502a58f7f2a9448827e644da588cf0d67be597684e560d2c9bb5310ce5b54b8d4855cee5c7bacf9ce925d6738a3e8e7bdf1c8.json.gzip

04bc59a07a01457bab0de00d8cf658bdbe96d3ae14cec20d5e9c76bb7c77154e074087af562d3d31d3eac07bc9e29595389c993ced3a2925ea57e975e2d8725c.json.gzip

04eddfe7fa717e5b9b7c523dccada8e5aa718c110443d9bbfd54c8d66b5ff883dc9971a371a598537d5295e1b13f1cd7fe81a4a89dd26d72c03c348add877e46.json.gzip

050a61a17c019b40c93eab417dfba4e9a1ec860e06693349d2130c6351be0f61f310209d5edc3fe54b8464228f33ad317fa7ffb4bd575243a0988ab397b779f7.json.gzip

05e0bddd9b8c973e1f0a8503b1a6a57a1bbee89ae827889ad4ea8903f333f9a1a6d0fd95b0f0155cc0d722dd0956cd76dda2a55f76922e1a17b1aa0503c1a11c.json.gzip

05e8b983c9083ef38c25ea7a91eb68acb377354abc24213af7930eb0580e2a3ed242573e3c0ed8f5217e0f1952cc64e5e346c42e50593a8d80a6f1d07639974a.json.gzip

06b0009399f36c434cde1bf5a1509e9709c3e526dd46450329941d82fc6cc195f6417dd53aa4cb5994d0e10a4a6abda521a04155e2a2d2946116398b567e353c.json.gzip

06c25db45113cc5a4a8d038477355c472fba027a088e6d2e10d52a3bc6740c6c547f5acbc266448044ae788147c3c6a389befd43737a2a256d90186233d89de6.json.gzip

0707ceda6118c2296e71e79877107a00fd9db0e23a13475c95ace599f3e66331ea59dad2b1f89d7c720eff9f56a49be878f366c1d970932419b4649f98dd2adc.json.gzip

07678136b7d29e04a567faffd105962c4195bc483408d53cfd593c20296fb0771731aca9afd3aa532437d40f99588d49a5213ed03e9724637c804bb427d98aa6.json.gzip

076c802306250f8892bb1667a4745fcd2b05fb92a537a0db5e1b6e68ddd5952e9474383f60601f4cd2561437046aacf385e32437c2997de7960aea33cdf3d574.json.gzip

07790ad8b424dc31cc2359637bcb2eac5d8af67f29de787e7a016cebfcdd58c71637070f14945ccdbf73bf847ffd6d0b1867f6fe403c1c4da6282ff07a37cebe.json.gzip

08653d1ad63cea40352546d637adf3d560a044778a59223cb3e8eec95d98bdfe99f5fc125eb1fc25940796036fb10193a35edcbff681c34e5d58ded23efc9d1d.json.gzip

08a9adcaef6801ac8adf6a70b6f517448df807974d5c160132bcf80ef4347f4e490d07e19854ed58aeecddfa5f5b0bb6a28da991104dfbed23d4141a7714e900.json.gzip

08cb6c7630e7a5cd855272baca2ae3f2c2a6366752ff05af8502e73399e0bb2ce7d066f329213775356eff26b316f1282873e5385a5c30208f55a514421ff9bc.json.gzip

08d4b3d76ba8625b57551c60db4cabdbe4adc96d5b06ce66f78382a3e0043f26befcda20bb312c2ed35f9a70aa0c89956c43c5018e1ee8cdcad402492307d792.json.gzip

0902cfd6c439310c26f2ca7982944f22b3cd0fa257e18ce6409cfefda9e2c0cd06837c403fcf4cc8085e14075770e3efedb2fb60a5d88950b50ca3df4b6165be.json.gzip

0a37f277005dce9caddd36efd2acac765a707cfeccd6fc83299e364f75ddaaa79c870a64bfda1c074401a91e9719bf3ea07d9e623a2a7b3000e9cd4c5525de51.json.gzip

0ac31eef9568a1ad8fd1ea05b7b4aa285ba19fbab44547f4180454b5fcf23113ba2aa34ec36e0878f6af2a8375fc34e07f4befa99585af3634c1edf4e4792159.json.gzip

0bf29e16261b7fbd2b83baa32825826d70da9d5b7b60a2e927870ebfb65a0d79de1f4b342d0da218e88726826039cb8149fc2488515373da596b9e8d1fa6ac84.json.gzip

0c262e9c33dcef9c570b0aa4a5d5fe9cd17314c9c7d2c171725124b12d263869ce08cedd5994f4bee7b8f9d60144a5da876ae2dc504888144f1c61d39f6f5068.json.gzip

0ccb86f8d207e4e5677b0b4b39c07e614505377d4b7f92c42afa81f0636456481bd99c46f417d1aab97b82c311e39bc05ca73563471ca5ea0998169f435259c6.json.gzip

0da4b217df8483733be44f53d36c5ba8f25e80265836883e2bc66bf47af320a303baa2bd14b44b7c4beff3fd5dbe89a20e8bb65b377fd7c19065a76c211ab71e.json.gzip

0dd1d9c6f5b78f200efcc5493295eb6b8fcfe83be091bea1fbf016d2fc36bcbbf670bb5f8aa22afd4a2e0bf53103042ef118709f78d9fce037dff935c623b2d1.json.gzip

0e4834981c8405e3bdc4804cf695b4f776c6e2d40bf8156e92208fbb3d8918425c009f8a83c072e662b550a6793606cda8a08add6449462631ad9705f906a734.json.gzip

0e81703207bcd8f03f086ca7bf8216cabbafaa75ba726b1230345d7e27000dafda566369b3d117facda0e1c1c6c3abecb38e702c421d0d2f80c47650ce169b53.json.gzip

0ed199283584dddd3ad55fef79b1f9015766ea2c2ee61c670cc521b33095b9dcc3cf2e16855283561b26c1b829967539429c8bfe786a2bef84b8a130983d8dcc.json.gzip

0f6573ab2ab944087d46d115d115eb7880591835621d1c4acc15e6aa15016c9c36a43c633f88be046dd7b94f7f210725c5865cafb98f5b48025c56b5480e0998.json.gzip

0fc1ff304561330518a82188d7712415b335961e7e01bebe32b4d5674d9aba20b4811b6531d266a7ea8057f0255e280cd793e2928ce4385edaba1d52bd4ef509.json.gzip

0fe590a5d3f6d30e79d3e31365cfccc75903608347ca7b2db6257795025693d265743e7f16660db938fbc0e890457a9832ed3f35a76800fe10e99fca5c95970c.json.gzip

0ffbde181a42879581bb4e58c3b5b0c2867cd3ae2baabae39258ddd75126218ab367f03f933cbf592377b2b9995b29a2ff1ee47f67e5a054f5ea954e2c026604.json.gzip

105edffce2854c07f56b3603ddf15d1092455853c87336ffed8d975b895233b87d4791f0978ae1f13342ee3484c5be032e1b4ff64dda2b8e266a30c1f2f365d0.json.gzip

10b248d29fc7c311b43af4c32fa22f05b3ff4deceb0c1518b8148d5d9cd6fc29418db98b2f020226b63c7a800b1950885d82f5037794c65de9e698c3ea7d7e00.json.gzip

10bb2f8bcc18f65f60e21a9d0f4b589a6b4fe53afd9802f1257580c97cf406c5c5d285557a9b0c20ee72428b3b6849ba0f6a9d1f85d560bce2fca44d0d0d0903.json.gzip

10f19cde7d49a50e954df82ba9ab3970c0e1a7337f330fa86d8b7753a937d4c966ee12c99d46a4a95f80000cf825bc97ccc05beecfe425973753fe4f54d21567.json.gzip

11ba4a244c091125aab3038e45e8e12505503dbcec54bc2c0f5e91f19b0d34b56152604c8bc3f10837f4d1178e1ebf9dc847de12f9b46fdd88228dd44daaf542.json.gzip

12c982bd17e0285ff309d783afd9249eb95f3d313b4fa5f58f6ba57baa0f114fb8dff90277c72d66b910480cfe1e1dc063c18ee671c79e67e3408ee8d2080f71.json.gzip

130cbd4812a2529157047c049ee08115dc699682ff7191407812fc24ec76755a2a1988bfdbc51b41f12cb133cf798252823436b5c7b4b910d972a04305e1450c.json.gzip

13ceaa73feb96791e0c6026a7fb86134d9325d60109a5e53b08a75853499ab87284c7efe2a0c5373fae0f9b4859c99c2b93d1e61341710607457e374e0083674.json.gzip

143c5e567413b8bf51423f8a36f90b5d45e684165b86891a31ee38bd73476618f820b00827c8f810346218a753694b075d2a8c46f36e7ad2b6d27f8707b5c847.json.gzip

14e8b3a8eded5eb75ba567aae87607a4dbeaa4f29b5fc74eaba2e420901f31cd7b269458726d26b9933d74765f2cb844bac83c6d02a348158f708f13c886f883.json.gzip

152ad5ba3b21115862de46b09c682735f27909493c3abba3028d6b8e3730ec345ccf7efbc17d63f5fe22c3e0cefb542d1c9c00335a4df00728c8aaefb2875f30.json.gzip

157039ad8bb166df90d3970b38a7f7b28901081965d0a4b8e244f769a167c4fb196185ab076aae4468b2bcb36f945eadab94c6894f96d429e6a8c2cfb973e90d.json.gzip

1588a9cb8f806be5645ef2fe0539c73bb9d4e22cb1ad605d14bde13a4d9e3ecb7b1f37edf17a481921038ea46791f8b6bccd1c0ba33803053b2691f7990d2a76.json.gzip

1712cb2fbfe1c0b49e51829f7f9100ef2ced92f625474cc8a18a70c100208b4998208595f6a5b0c5bd9ce763251f9a9ed5cee59abb5c0ad03c2eba725939d231.json.gzip

17e824aac8f3b49905828c2736b1ba15126477c9935b1f1588a93dfe94d32b4fd7befe30451b7a4c859fb4dfa78b0ecee677f4ed47d6effdc8656b1c6a025f75.json.gzip

180e4c2afe1efbc80f637f1f80e31c0fa7a663a1797dfa86be29a08234a610b4f14e9aed9344b324c852cc5e677071d76278c3f0dfa6c80b535b88e2f446eb6a.json.gzip

182bd7ac92faefba57f0352b59ffb302aa29693606860da4a2429fc7a39babf96375076936dea580f0c0eb9c7280c21101a8155a1aa4a416d9ab009b4d9ba1e8.json.gzip

18584b990eaed3e2e125d12ab3c508af87979e4a95c3521c2e92bca80a5a8b58fbac2e018cb75ae42c1c134d20f1656870e29c8f38d0697a0288f940ec733c37.json.gzip

191e48156249ddc3b04834b8b2700b6ccce66a8b5b953c3d2b53e69884fa0db936479ef7a71ef43ebb988ff5254236d3d6f5ef02ba05589161bd498436527998.json.gzip

196a1392e59aca24769e51e63a45cf160cefa37e5ea761fd5fb64e27fdab118e6fd52802568cd8064b3cbef74cc0163f1a48402d96ee9a2177de296c5fb59919.json.gzip

198f8883a18c314f3df2eb8e6cf8fa449c00be832847553775f4a89dba663f140d6340f884858e825772881636dbb502d7528e27f40df574e33031dfc34acc06.json.gzip

199bc738f48ee000de45f012ba878fe693ee2b2b5367451f079aceab92567295f310df9c1eca07a930e7958e49c5de1fa1cdde1bb4832512aefddf180d3c840c.json.gzip

19c24b5ab5ebea479d8b19920640dba7efa9c22b8568b133415c43caa60832b7d7601b83e571d6e98f0c55843f7b066813a881b1e4dc3d0cdda0d73c3b09497b.json.gzip

1a2165bd712bad3b3ef8942b098a009cd3cd8c0d856b2980dacfc639e8a1b485e42dc5555c62f32d710117a0eaef3922f220c8dc41ed25da4d5b48ae82081458.json.gzip

1b0ec0f9f7dee76a2f06b959b2da5e62a1a583a8b82236cbbad09ed0a0076533c752f9f9e7f42c7fc3f7b1aa9ab6130fe865cf8f211559cdc298b59e6c695d33.json.gzip

1b1c6ae9752e2178ab5c145e20dc52b335f03aaa319bf1adc49a89539db6e311829e2c61ae85533cbfede4cb221eefb4448e3e53a07bfc40da85d9cede93d795.json.gzip

1b2fdb4fd10036e1d5b2f334bd035695c95fe665f9e0027a662fa997bd27713d11056a6995e68a90bc9c559129e04e074c3930d484df4369f97d46c625d80ac4.json.gzip

1b4404067abda42ef4832cb094df40d0799c18e4bd9349fb48983579928d7ddf4b92a425883ab9cb0d97f0ba796bf5a9002181d9fc1c6bb5c163dee95f0afb65.json.gzip

1b4a4121ef095945b1c81d058d2e1213335d45f108f0ab2df2611c3aaba246609b2aaed71d9437079615ddf24693ce04789e561162d02755567468caf31f8938.json.gzip

1b96501ccc3dfffa29daa32f70a32d913405d4abad7c5fa0176957e27949fde74e0dda376aa74d76fd017a682aa1dd84b240303ec203f8205d450748554a3375.json.gzip

1bbe31f6f5c547f0a0623e42cc5bc41d796e24b392f82a2cf92e80ad7d296c4ac7b818fb123cad4755791355668b406bfb01b2be476ae216d70d4502e51a6402.json.gzip

1c2caaac4930362fc539e6ceb3ab1ceafa69d4c112aa54d7d5351e926d87e85b059b489de995939b5e823e680e2b1c328f15a23905adcb19dbb8a97e03013b59.json.gzip

1cab04811301c9f07e62bf80d3b65271903dc43af2533a9809bbd9d271c443040ac2f3405f37c6919b0f452b6881efff64ef2b04fa3cd6723ab0ae208f3a284e.json.gzip

1cc8fecd9f19e37892cd12b37f0194099e855ae8c154e67adbbbf6ac5390e1460c6e66f6017b3eaba118e227cd4936e6a03bb5c972817887047769ef8ec384be.json.gzip

1d34bbe1cc5e422dc10f5556c9ca0cf82526790cc577eac365357ebedff2a3ea93be3d6d53d44d008b0f499660b3ea3ab84e7f4a195948892cc6528527a57fb3.json.gzip

1d898220a0e4bf60218fcee98f303ab729e910d530ce00afc8f8cf3bb4737a63c821b13f336bd68facddc953ce870499d1bc63858871ea1c8aaf959c898d0ef6.json.gzip

1dbb259df1a6be96ebfc7c53d5ff428d2c92c0fe328ea2eaff8ce2f97e4b2fb20174103c281a38c71730c6bc38381ec6c5c1ccd8a17c8baa03d532a0789fa0da.json.gzip

1dc14566611f1d570feae2904f48f5f447944cf0c2125c8afb71e766e637024b4b83beabdd10f5117443a289f356286437f089e995bd5cb28cd691614d0976b0.json.gzip

1e025c6374fde648a3aff48eb7e97be9d26b575eabd1ab87811f63616ce035e91616aceb63c56a2c55783118f204c74a59aee39157d3b17456084eb45d6a5285.json.gzip

1e0ab2ed237d037910c6db3a3a201ee9b0da718d20361e6efbf0046bd47fab74ef07c3a44b6a77e879ea1bd66363074c174ef6b849ceb7229a8099d04b7155d8.json.gzip

1ee44d4fef1b4bfa6cd2f7ae9e8c1958378a50de4517e05d1497009b169e27b4e7074f1941dc428734d35f3ff5f1a2bd5a3bc7cb952cd5f46a401615eb89a64f.json.gzip

1f13ff802cefa080a061deb4376207d4699dff0ee700ca7678ea3a9d57ee8fcd823c65ba6275d58d55162987001572d7b95e61cdc15f2dba78db5b49749710cf.json.gzip

1f8835b19121ef095777841af43d320952176dc50bc2d160f6e874b6a01616ab63baa3afcdaea28d2520b339ae8f97a74e433edf80b24a21a99dee714ecefcbe.json.gzip

1ff21bb0b3c61108a83e7edf947c206139dd6d784f808baf2979513ee65a636567b855e5ec462573e726e7f5a6ad77030544709acd0da472f14c145e95d8bafe.json.gzip

20de6ad9d6e9636df19219154be6299f0587a0f9fc7066d9b3bdfdc6a09423ed97e98d2d66e98fa6cbcf6edce47bf095efd2d9a229dd5d4c0b01b2f20dfd0ffa.json.gzip

20e422039bd3c9c0b0cd2fa09b72f46fc4b3d8e01092b0f00100923a88fc38c25be7a296b647bde15b802d825936a3f5047d03dc2bc3f510e649f20dcc936532.json.gzip

21457d98958d17b9204017d5c50a18c353355e21783d8a3c0883d5b91e066a090ade069e87e7b8aa1733ac57e998ad47cc52269370c52db0aabd8313856c5b19.json.gzip

217c582f4074c031fea8d20d7b59f92741dbc417a1f65cb936609f32a6b6d7167f85a8f368b01800bb4e63e8e5484e501597307d4dc1ebb4a52c2b89c8ce51ea.json.gzip

21d390f82eadbcb8aa8fa4042bbfc780891e0f2b06209b085067722be3d296d13de89f0bcff9affcfbaab0785f24bda910476294a01fa02b4086d93b6b13398c.json.gzip

22025223960bd9fd35d2276ef72597e96cd106016c570e7ab36a44dd491bf751229d2a7f24f4541d024f8fe51dd4fa4a0876d4aa69f795b0344614356d2545d1.json.gzip

231b486598988c75d310fb2146798a018bf768b3f26df4e140f25538674cbebee3bd56b68a837929a73e8864ef4c5accc7f1c902ffa7ef4c2fe044a6aeca6d6d.json.gzip

235ef0651b072c6402c85da5988da59768900cac58195e8d9d7df403670c219663172977751746f7dd8c066d1ae143f00189d9a9926e83c1a52494d3e1fd28dd.json.gzip

2362773501d84cf893bca82d5a6d78208835b6971ebb56178f8a0088733e9143ce56e1683716ed834fc71e6d049a0ec4c9ffad5a904cfdf7078f36d2e0687976.json.gzip

2415f1981b3da1c0bcf9796e6d1bb6cf6f5f38629377adf789ef5b34403e7f09fabba2a5467f06c355e5917781fe8b42abe9441e6b483af9b7dd42d852ce6455.json.gzip

243f2ff36189b60bc414f977f4ebe81dd9d4594b5963254a73c03eb61aa00d1bf2625ff305c960faeae266bdfdd0262c3adfd31b5b1c1a451b4a95a07d2e1b26.json.gzip

247fce3926c31faa9ea6144b10477e0ad431bbb4d39a1d271711907117b3f0b85218776570aad46cf96898e39791f4b540013b9f3b9e5086b6aa01fb34a2ed8e.json.gzip

See how Anthropic automated 95% of dependency reviews with Socket

flipping

davidkpiano

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

flipping - npm Package File explorer