github.com/SBoudrias/Inquirer.js · f6c1d6d
90/ 100
No threats observedNo threats observed: The observed install and entry-point run completed without recorded threats. Scanned 29 Oct 2026.
NetworkRegistry only
Registry traffic only
Files114 changes
/home/cr/.yarn/berry/c….zip-43038fd3ac4ed726.tmp
CodeNothing taken off
no code deduction
Score
90 / 1001000
Nothing was taken off for what the code did or what running it showed.
What it did
255 events in 25.4sFetched6.5s
625999 bytes fetched inside the VM from codeload.github.com in 3191 ms; commit id verified; egress restored
Read14.2s
6 scanner finding(s)
Checked14.2s
0 locked dependencies, 0 malicious
Jev20.7s
Answered questions from the evidence
Sandbox20.8s
install completed, entry completed, 102 forged call(s)
Score21.0s
90 No threats observed
Network
nothing real left the machineAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
Show all 102 calls
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/clipanion/-/clipanion-4.0.0-rc.4.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/braces/-/braces-3.0.3.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/fast-string-trunc…cated-width-3.0.3.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/fast-string-width…tring-width-3.0.2.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/cli-width/-/cli-width-4.1.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/chardet/-/chardet-2.2.0.tgz
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/@nodelib%2ffs.walk/-/fs.walk-1.2.8.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/fast-glob/-/fast-glob-3.3.3.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/@nodelib%2ffs.sca…/fs.scandir-2.1.5.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/@nodelib%2ffs.stat/-/fs.stat-2.0.5.tgz
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/@sindresorhus%2fm…rge-streams-4.0.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/fast-wrap-ansi/-/…t-wrap-ansi-0.2.2.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/fastq/-/fastq-1.15.0.tgz
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/fill-range/-/fill-range-7.1.1.tgz
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/glob-parent/-/glob-parent-5.1.2.tgz
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/globby/-/globby-16.2.4.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.7.3.tgz
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/ignore/-/ignore-7.0.5.tgz
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/is-glob/-/is-glob-4.0.3.tgz
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
AForged dns
registry.yarnpkg.com
0 B sent in install
AAAAForged dns
registry.yarnpkg.com
0 B sent in install
GETForged registry
registry.yarnpkg.com/is-extglob/-/is-extglob-2.1.1.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/is-path-inside/-/…path-inside-4.0.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/merge2/-/merge2-1.4.1.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/is-number/-/is-number-7.0.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/jsonc-parser/-/jsonc-parser-3.3.1.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/mute-stream/-/mute-stream-3.0.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/micromatch/-/micromatch-4.0.8.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/picomatch/-/picomatch-2.3.2.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/queue-microtask/-…e-microtask-1.2.3.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/reusify/-/reusify-1.0.4.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/semver/-/semver-7.8.5.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/run-parallel/-/run-parallel-1.2.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/signal-exit/-/signal-exit-4.1.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/slash/-/slash-5.1.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/to-regex-range/-/…regex-range-5.0.1.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/typanion/-/typanion-3.14.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/unicorn-magic/-/unicorn-magic-0.4.0.tgz
0 B sent in install
GETForged registry
registry.yarnpkg.com/yaml/-/yaml-2.9.1.tgz
0 B sent in install
Luna's report
The run and code review reported no threats, but paths outside the tested windows were not verified. Pin the scanned version. Most importantly, behaviour outside the observed install and entry windows was not verified.
We installed the package and ran its entry point in a throwaway sandbox, and scanned the reachable code. The entry point completed, with no behaviour findings recorded during the run.
What it ran
Installedyarn · 56 packages · 2.0s
Entry pointenv -i HOME=/hom…T=1 FAKETIME_NO_CAC
NetworkRegistry only
MachineDestroyed after the scan
Jev's answers
answered from the evidenceDocs check
The docs do not say it makes no network calls
The docs do not say it has no side effects
Show all 3 answers
What it did goes beyond what its docs say it is for
Flagged code check
Jev judged this code harmless
Install check
Install-time code does not use the network
Install-time code does not read credentials
Show all 5 answers
Install-time code runs other programs or payloads
Install-time code is not obfuscated
Jev judged this code harmless
package.jsonNot verified
Behaviour outside the observed install and entry windows
Code paths not triggered by install or the entry point
Show all 3 items
Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses
Reputation
GitHubOwner 15 years old
GitHubOwner established (over a year, 3+ public repositories)
GitHub22K stars
GitHub81 public repos
Shown apart from the code and behaviour findings.