90/ 100
No threats observedNo threats observed in the install and entry runs Scanned 23 Oct 2026.
Score
90 / 100Nothing was taken off for what the code did or what running it showed.
What it did
67 events in 41.9sNetwork
nothing real left the machineShow all 26 calls
Luna's report
No threats observed, 90/100. Install and entry ran with full coverage and no deduction, so the score is lifted to 90. Pin the exact version that was scanned and scan again before upgrading. Not verified: Behaviour outside the observed install and entry windows.
We installed the package and ran its entry point in a throwaway sandbox that answered every outbound call itself, and we scanned the code that install and import reach. The run recorded no contact outside package registries, no reads of the planted decoy credentials and no persistence writes. The code scan found no medium or high finding in reachable code.
What it ran
Jev's answers
answered from the evidenceShow all 3 answers
Show all 5 answers
package.jsonNot verified
Behaviour outside the observed install and entry windows
Code paths not triggered by install or the entry point
Show all 5 items
Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses
Dev dependencies: install scripts run (2 packages), other code not executed (814 packages)
fsevents 1.2.13: macOS-only, not run in this sandbox
Reputation
Warning: the owner has little public history.
Reputation warnings are shown on their own and do not lower the code score.
Shown apart from the code and behaviour findings.