.editorconfig

.npmignore

.travis.yml

Client-web.ts

Client.d.ts

Client.ts

LICENSE

README.md

Server.d.ts

Server.ts

tracker.ai

tracker.png

Client-web.js

Client.js

Server.js

index.d.ts

peer-tracker-client.js

peer-tracker-server.js

peer-tracker.js

test

package.json

peer-tracker-client.ts

peer-tracker-server.ts

peer-tracker.d.ts

peer-tracker.ts

ts-node

353b28c3f89e3a261f0cbb6f237ac05d54f482d5

272ed25a50f10e416cdd60fcd5e7075aa666c01c.js

272ed25a50f10e416cdd60fcd5e7075aa666c01c.js.map

684e64a7a409b704c88db2ffe00dfd81987adc04.js

684e64a7a409b704c88db2ffe00dfd81987adc04.js.map

74d93d13b56bdd5ba2e27c0a7c407a8510830b4f.js

74d93d13b56bdd5ba2e27c0a7c407a8510830b4f.js.map

bf6e6e26879b59759559bddebbf8be4ba55a55c2.js

bf6e6e26879b59759559bddebbf8be4ba55a55c2.js.map

d19c293277f737dbaf39e2827ecd4ce799b43dd6.js

d19c293277f737dbaf39e2827ecd4ce799b43dd6.js.map

ebf1cdd08d3b9e2cfe42d3ebb9e87062716af566.js

ebf1cdd08d3b9e2cfe42d3ebb9e87062716af566.js.map

484031f6fd843203e43dda9a2fdc6e7903a9de50

166cb5129e9ec2b2ba59b7209e259a009b2779f7.js

166cb5129e9ec2b2ba59b7209e259a009b2779f7.js.map

29a24058c5661281802a920d0858513d669453d0.js

29a24058c5661281802a920d0858513d669453d0.js.map

93704167830300da4c4cc6f531eeb19c3cb571a8.js

93704167830300da4c4cc6f531eeb19c3cb571a8.js.map

9b437faf34e39d213c2c5b31ea56f2734b147e9a.js

9b437faf34e39d213c2c5b31ea56f2734b147e9a.js.map

9306d8023029a899f149722003eaf06449924f94

01b470cae0f021fe42a24af2ce5cb40a52316141.js

01b470cae0f021fe42a24af2ce5cb40a52316141.js.map

07530083204edd22e00e744a866b668f0c632bdb.js

07530083204edd22e00e744a866b668f0c632bdb.js.map

07c4332ebc7dc109ccfb29d79e0fbbaf9870f02f.js

07c4332ebc7dc109ccfb29d79e0fbbaf9870f02f.js.map

1066b89a68d7721aff4d5918e20f6fdb89fa0f9a.js

1066b89a68d7721aff4d5918e20f6fdb89fa0f9a.js.map

13327f063389caa67d3192855372eae9290a9bbc.js

13327f063389caa67d3192855372eae9290a9bbc.js.map

1495262d22ace74c463f37dbf5288853e86d5350.js

1495262d22ace74c463f37dbf5288853e86d5350.js.map

1498c7890abc84efffe8d35dbaae37e0ba45ac17.js

1498c7890abc84efffe8d35dbaae37e0ba45ac17.js.map

1ae18eb0c0608935f6e5bed5b4833366f1a22ade.js

1ae18eb0c0608935f6e5bed5b4833366f1a22ade.js.map

1e19564fa77059a00560c2ffbb10c05b6ea25060.js

1e19564fa77059a00560c2ffbb10c05b6ea25060.js.map

1fc4ea367211a66033e4d3a6f1b56ad291b9ca91.js

1fc4ea367211a66033e4d3a6f1b56ad291b9ca91.js.map

226bf35608308f6196788edcd1a203189c1a1f2e.js

226bf35608308f6196788edcd1a203189c1a1f2e.js.map

22de9d304b628482d9102fee881d8def19a815b4.js

22de9d304b628482d9102fee881d8def19a815b4.js.map

2792cf2a14eb3a44c4bcc9e2c17fb62510b29c66.js

2792cf2a14eb3a44c4bcc9e2c17fb62510b29c66.js.map

27b5eaacaaf14da6eb57804ffcdd8d994506a98f.js

27b5eaacaaf14da6eb57804ffcdd8d994506a98f.js.map

28ae9e22f60b4c63aa270220ab6278b48c9a7b15.js

28ae9e22f60b4c63aa270220ab6278b48c9a7b15.js.map

2bc9a79b74b66ac452429799b5174a4159e4f1f3.js

2bc9a79b74b66ac452429799b5174a4159e4f1f3.js.map

31957cfa275f82f57e913e52e2037bcb706b11d0.js

31957cfa275f82f57e913e52e2037bcb706b11d0.js.map

381e70542c84573fa6f003504d322046b02a998b.js

381e70542c84573fa6f003504d322046b02a998b.js.map

3b8507fdb8a44e113eef3700b05567f87f673a7d.js

3b8507fdb8a44e113eef3700b05567f87f673a7d.js.map

3e12025d513ce0ffff4a7cf7f8e878093a1e4b5c.js

Lightweight BitTorrent Tracker Client & Server Implementation. 

See how Anthropic automated 95% of dependency reviews with Socket

peer-tracker

Lightweight BitTorrent Tracker Client & Server Implementation

oconnorct1

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

peer-tracker - npm Package File explorer