github.com/jjhbrams/project-amber
incomplete Threshold medium · generated 2026-09-22T12:17:45.346Z
Publisher: jjhbrams
Packages: gui@0.1.0 (npm)
Repository: https://github.com/jjhbrams/project-amber
How this record was produced
The inputs are public: the registry record and the manifest of the package that was actually published. Each finding below includes its file and rule.
Repository source is outside this index’s scan scope. Use the CLI locally for source scanning; source code does not need to leave your machine.
A finding is a matched shape, not a conclusion. It does not by itself prove exploitability or intent. Findings below the configured threshold do not change the verdict. Unmeasured work is listed separately; unmeasured does not mean clean.
repositoryMetadata
status=clean · source=github-census
This block produced no findings.
packageManifest
status=findings · source=package-registry
| Rule | Severity | Location | Description |
|---|---|---|---|
| install-time-execution | high | scripts.postinstall="node install.js" | |
| install-hook-script-inspected | info | hook runs install.js (1207 bytes): no fetch/spawn/decode pattern found; it also requires a local module, so the inspected surface is only part of what runs | |
| declared-version-not-latest | info | registry declares 0.1.0, npm latest is 0.15.6 |
Unmeasured work
This record has no unmeasured blocks.
Scan coverage
State: incomplete · required 3, completed 2, failed 1
| Scanner | Required | Status | Output | Consistency | Reason |
|---|---|---|---|---|---|
| repositoryMetadata | Required | completed | Present / parseable | ok | |
| packageManifest | Required | completed | Present / parseable | ok | |
| repositorySource | Required | skipped | Absent / not parseable | unverified | source-not-read |
Machine-readable record
JSON:https://xn--5kvo87g.com/v1/servers/github.com%2Fjjhbrams%2Fproject-amber
README badge:https://xn--5kvo87g.com/badge/github.com%2Fjjhbrams%2Fproject-amber.svg