Public shared report
@npxray/cli@0.4.0
Do not run until entrypoints are manually reviewed.
86/100 SEVERE
- Version
- 0.4.0
- Files scanned
- 43
- Dependencies
- 6
- Engine
- 0.4.2
Top findings
- Spawns shell commandshigh +16
src/index.ts:2:29 - import { spawn } from "node:child_process";
- Very new packagehigh +15
Created 3 days ago. New packages have less reputation history.
- New install-capable dependencyhigh +14
@npxray/engine-bin-darwin-amd64@0.4.0 @npxray/engine-bin-darwin-arm64@0.4.0 @npxray/engine-bin-linux-amd64@0.4.0 @npxray/engine-bin-linux-arm64@0.4.0 @npxray/engine-bin-windows-amd64@0.4.0
- Risky dependency in resolved treemedium +11
new-package, fresh-version, missing-provenance, missing-repository, single-maintainer, bin-entrypoints