.github

dependabot.yml

repo

git_export_operation_id

index

019b07991e14f174400a1cc0d1e1e1576f25e7b00e15e20202d4380d863b006a65f941ff81cbc52c63045ef0282ea542694261335fc525ea67b5c43d62b037d2

09d233e8dbe6220d8c9bc65615322e06b547bb80592914b3e3ce300d5994c267655b851fbde8d8eefb70e80f2f7e7214bee45adc0924a39ba3c853616ded8ab7

26caa8f22e5ad7c215d3ec4008c87190bed1690e184371420c3d8cf7db40e0565976d80b759a800ea7143fa7a514c81ac5622128740a7f7240961530915cde97

2e8a62d1a081e0aa671a1d092a547bd88245f5e10cb7dfde5188a07cfa644d372b662175b3c711f6c2ab7ae74876bbd30a4522455a80b8309e0a8305c3210fc8

61c5d9046eb15a4104e7e9993a6e496ddedcd4b4fab1fe320d0a52323f0397bc57ba862b30d58cbd90edd20146230cec8e31da03232ec306f164955f3d889457

635ff881c94d66fa52bfd2dcfa6dd24cd667c8340c590b1bab6c2fd3f1b4d2d11a6057f7f2330713aa1caae816bdc39a7dfdb4f41bf705d9a55b30b0ff9cf713

927741a24414e28e28bb2d46ddbb20c90f3e592d0b6afb885d93e594a7da0b6d6fdc7e88119d2b1a4bab93062c9808261e09ea13687c247ab40058a58ce5bf7a

bb7bff980ea730ed89b2413ea7f0334cd268fa7160d725d0ea0c0545e97d459ed76ee68debe5e272439447aef3548cf0f34f8b4f6d8f85da32fdeebb48047bc0

c191da978ab37da84bf677c884ff6024ebb4f1aef2ab667f41493ed3d8f1872584b4c5d52b7be6acdb4dbe8034ed903d87eaa5876feaa521d581fcad83423d88

e40a190e9011a7c71a08afdfb7809ccc5812ebb438e0778a37fa51f155c445d68785e8d61fdfe1ed18c00a095430d28d3ec7673eb855aa92f0531327c161039e

f1b9ff7beec4035b161bcba2a7eba9b85ed99d86f9f2c20974afd462f2a049c20175de5633aa41d42d649254c7ccd9cbe40c7a3e90aa71d99b5a9ed2dd713fcf

operations

1b4a670e0bb7af42b88f76e815329da48843a1e5a59f637c1bf93ecbf522c4defbdfd57f6ea4e443da413c6b70eaac6b82b32ba393cf6e1e5b0d190559367f8f

2b8b0695198df440f4d226311dbe69cf1ef9bd52d6ee9d8ff6c8032cc64a7e4b4d429b411490828b3ad1c85dbab841973bf983f11d3a1a5380e7b2ace5c35b06

4168285fccf318ee4c1ca991255676a013c55dc906d0fd3aeb75f2cc4d0660a5eda45d98c728a97cecb9a0cfea709dc3aa47f1fb3b196a243e2c06262cd05fde

4692bf1a6fb164857ebba480b1cf54da4f2a92e3216185a32e95c6df633244353a57ecb97d0e4df96ee47c5fd7ae019e4b1c5a1b2b165f9f05b980377c3d1ec7

57ec6239165027568d81791eb4774bf6630943e0aca24fffbb5490b8a2faa91b9f8f6866a7c97f5cc8bafedd2f93fb28ca6c8ea4af404cc9e16fc89e878b15b4

67df11cdf467c05a6cbbb5a5a6dc8ee9159859e47a0c2ce12947aba789abee8c6f54bc6da54a44f56c6fc60493b05b90827261ba11bbfd2d5482ee147f7e6329

86f820ced85775a9940055357baa14afc348405695e35f97b78113ace9338d8cef7a926036f0ddcde527e8454915681b742a3f90695947a75fd58a82c89dc267

913d8489a1acabc5f8d09ca74741a89febacc668f3387724aba69090e7e20280e3a8fada4e1c639470f1ea885058a17b4d57a5a849efd223006db3ccda981910

9befa1ae13ba758596e00b6b094b41e25c7eb3bb0f3f592b806dd093b449117418f69e1543295e422c7dc8ac436a2b84b126be57dbb158a172b3fcfe4ffc2f6c

b1c05d9ed5903a16370eadcda1682cbb677b890d65404ad62deaf3d977a4d2c476a3069c8316c5443fbd9a580c848d1c81e1a6dc82cfe42986ba5a7430cc1157

b212fb2b55f36f06d615cc995c1946b4613558393fe466043ab7a0e96b4edb9d6f59d5e4b6fbd1a8922483da01560d92b0ede6a07596e2c0cf84f099d88ecca5

b2e4c674674808567a6f02db1ee5dd12cd220f9a42ddb764d163687bfd5a19967a48c35f6b8fea99746cee6439fcb07e5b60e54d20905e3dc36cfae444c8f860

b6a179dfdecd22017f7471dc1f7e851029c1d8834126f1e3896e842ff012e97c6c6b8dec9bb9b1894f711b3a2d354be47643c8c2f3ab9f3ef2e5465ebec5d016

op_heads

op_store

views

1c6ccf155fb30e2711bdf099f22e0ef32f94003658898ca143fd1c790686bef3346de22b050e0c23a48efc24180cc107db5c078b069946bbff0d5b366cfc47d8

1f0f6164dd3f77622f3e85294acc1c762b696433460f67d3fc6b5f28e2aaca2418c1f11042add5c0c4869465141313e16d24b4f22ba0af27b7adeae7211366bb

2535a305fcab53082401c397deba382d9e6c7828d90d3d418987f479e795cc7ffc9d24316c4b5a511335f3846460cb38d3df19c52a78f7b8de2e999518567b44

264aced75d4f66e3f0f15dd9baf7a7c47430a6ad6a5e5ecd76d61b53bd3225a669b36ac5a8f11e4772043ad9e33784c63fa9564ed4fe3e3131b836bdf0c5269d

285eef58fb4a404aa19bb7d61c548fb0eb125f6fc797354ff225aa1d20222197b6ec03ed63ea1d3403549ced19b24ddb6be78d70ee36320e8111d19967193cff

3b9b3f0b4ba434bd38497b52faccc5a875c05c11af06e524c31b3292ab82ccda23538c732bd71abada2b26dedff41e2de5da33e3b7b1a0b6f1cc293c4e574e16

44ca5b182fe7cc97dbc69eedcca69bbff2fa74a7e40f95c24d297085a4c2917ba9f5fe20f299fd2388928f5eb8d90fbbf6b1749ceb903d1bb4b501d2cd60fc05

4a05419a135c732d7292f620bd3a0e56b83c735736e5ac4edd5b9bcddbc5468d2ff329728cfdd66d15572aa8f30a211640fce77959d0b09bb3b8668de4613fef

5f847e6d84d1b21bc4886eabdadc7daf929816181d4beaabc18031321ea3e684987dd4d83cd5e4c501191df52f22f33c03a807d91c82a5533710e4fbcc0d0c79

691ab9b16c591fb9a133f46ce4aac719316fbf16e5f6e6ba6617bc219c3f8a9b724bcbcff0a7ca121cc61b6d8e49329be6f810fbc48a441a46d0c0b8a56611c8

8cd1a8b5943ec1b588963bb8ae02e5c6f535e946a852f6faa0c36f46e105a8a73659c85da4e2c79f8781e2cc3c6a8acc71fda91fb475ed7d353d7d5e45ece0ad

ae119f43c8c718d5db2a701bfa452451262e6be656ffa3f2ceab5de958e4772e356c91bab86daa03999b5ee1ce02a6a7646c9429140bc5f08e7f7184c23b2d19

b69980a8dbc905e2d238b6e359251f5c4911565289436b972a5a882d328fce20330c2f96cc74857d4f9d2b11cb2bb5d96088c3d79ae41da5456b94237cfe0fe1

store

extra

212aeccfd3f01b639cfbc0d516fda70fdf715c4361894a56827662da22c382faa87cefb23372b3c0206d8467ad8fcf5caa884728259d0278446ef92b3f9ad367

39fead9243ccdb0eecfccd85b5fa05f19a794b1f6964e69e809486169477304791c9587d0f1e3cb06badc243a4d422b75e849b8fe637a85a52bcabe395535050

482ae5a29fbe856c7272f2071b8b0f0359ee2d89ff392b8a900643fbd0836eccd067b8bf41909e206c90d45d6e7d8b6686b93ecaee5fe1a9060d87b672101310

8a578dd2f867e4507e56d40dabe32e62c12ab2a833b0020e9f089528ee61da6dd5965a6034d4ecc8cb517900ad601703cc90dcf3a0ed9bddfea078c22030d835

9a7ff63ab82aa01ad70284ee709623e30d4f50b49921f87eedcba9431f766cf508221ac759b4575447b43e555d3a325e57734570d52b8a5e52161d4f5f024b86

a1fbcc11b293aae80d60419409bafca0428370ce717c0b88207cde02c10710b161e8727541bce6fdf5b1377e9046f05fa95d65c0ea2140f5c1b84e221d2ccda4

aa4d57e48d5ce4d0dd7b5adcd7f1440362e7229d546cb3db6b697b3eadc5def35be7531500fb1d5905b982cb6ecbcc70daf231b1c7e99e3c702ca31bca0da611

aea0fd09216da0a2209f982074a855b74a1409e8cd4bd5627143dda08a7482986bbc85110865d34c97f87dfae357e168df99d309f9cd23b7a19e41823c0fba73

c8ba279a26c26d0cf766dc9f9c3c9a2ec24d565be3934911f3c0af7b17807b85e0712ac7ebf4d12dc4746eee15bb35834bce9a49359884ffd4c94c33db6209d8

de88bc0b8b0e7bb6fcf2f4424fc382fe0d1c77ef6c092ebc36d2cae99df7013f092468b5e4ce597b006419f5e9e625b2b9ab4bc26cd8a4087fe73f4b4faed2d3

ea156c10a486bde145115abcf9b350897f0ac2f0ec52427c460ecf013b1c949b069e2d9f8add8ae6ea298ac5c7fde313ff353005d5e1b81636fdad7f0fa943ad

f42ef1d6cdf5370ead420fe0a5f4aca5321110c068b0242e55a0309558cb59640bccb64fc3d49c5bf540944408facdde928445804099774ae3f14cc630fff716

fecef6e484d35e2fedcc2e93d7a1d347d9ea4fcffe6cc488bf6e6e0d65dadc1367fac1cf2776a11adde0dc2cbefd4dcd55b375491b6665a94bfbfb87f7054bb1

heads

git_target

working_copy

checkout

tree_state

index.js

package.json

Internal script used by the node package to install architecture-specific packages. 

Announcing our $40M Series B led by Abstract Ventures

node-bin-setup

Internal script used by the node package to install architecture-specific packages

aredridel

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

What are invisible characters?

Invisible chars

(Experimental) Package license has recently changed.

What is a license change?

License change

(Experimental) Contains an SPDX license exception.

What is a license exception?

License exception

This package is not allowed per your license policy. Review the package's license to ensure compliance.

What is a license policy violation?

License Policy Violation

Contains long string literals, which may be a sign of obfuscated or packed code.

What's wrong with long strings?

Long strings

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

What is a major refactor?

Major refactor

This package is malware. We have asked the package registry to remove it.

What is known malware?

Known malware

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

node-bin-setup - npm Package File explorer