护照

{
  "id": "passport:npm:dshmarket@1.10.1:scanner-2",
  "pluginId": "github:dsh-market/dsh-market",
  "versionId": "npm:dshmarket@1.10.1",
  "scannerVersion": 2,
  "checkedAt": "2026-08-17T05:03:06Z",
  "trustState": "review_required",
  "manifest": {
    "hasBundle": true,
    "hasClient": true,
    "packageName": "dshmarket",
    "subpath": null
  },
  "license": {
    "spdx": null,
    "file": "LICENSE"
  },
  "lifecycleScripts": [
    "prepare"
  ],
  "signals": {
    "network": [
      "client/client.js"
    ],
    "fs": [],
    "credentials": [],
    "dynamicEval": [],
    "uiHijack": []
  },
  "compatibility": {
    "dshRange": ">=0.1.0-rc.1 <0.2.0-0",
    "profiles": [
      "web"
    ],
    "desktop": "unknown"
  },
  "filesInspected": [
    "package.json",
    "cordis.patch.yml"
  ],
  "findings": [
    {
      "id": "lifecycle-script",
      "severity": "medium",
      "label": {
        "zh": "发现安装生命周期脚本：prepare",
        "en": "Install lifecycle scripts found: prepare"
      },
      "files": [
        "package.json"
      ]
    }
  ],
  "disclaimer": "Static evidence is not a complete audit and not a runtime sandbox."
}