github.com/jonschlinkert/is-number · 98e8ff1

90/ 100

No threats observed

No threats observed: the install and entry point ran with full coverage and no recorded deductions. Scanned 24 Oct 2026.

Watch how it happened Scan another

NetworkNone

No network calls

CodeNothing taken off

no code deduction

Score

90 / 100

1000

Nothing was taken off for what the code did or what running it showed.

What it did

35 events in 27.9s

Fetched7.6s

7654 bytes fetched inside the VM from codeload.github.com in 5227 ms; commit id verified; egress restored

Read16.4s

0 scanner finding(s)

Checked16.4s

0 locked dependencies, 0 malicious

Jev23.3s

Answered questions from the evidence

Sandbox23.3s

install completed, entry completed, 0 forged call(s)

Score23.3s

90 No threats observed

Luna's report

No threats were observed in the covered run. Pin the scanned version. Behaviour outside the install and entry windows was not verified.

We installed the package and ran its entry point in a throwaway sandbox, and scanned the code it could reach. The run had full coverage and no behaviour deductions were recorded.

What it ran

InstalledNothing to install

Skipped159 packages

Entry pointenv -i HOME=/hom…T=1 FAKETIME_NO_CAC

NetworkNo calls

MachineDestroyed after the scan

Jev's answers

answered from the evidence

Docs check

The docs do not say it makes no network calls

The docs do not say it has no side effects

Show all 3 answers

What it did fits what its docs say it is for

Install check

Install-time code uses the network

Install-time code does not read credentials

Show all 5 answers

Install-time code does not run other programs or payloads

Install-time code is not obfuscated

Jev judged this code harmlesspackage.json

Not verified

Behaviour outside the observed install and entry windows

Code paths not triggered by install or the entry point

Show all 4 items

Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses

Dev dependencies: install scripts run (0 packages), other code not executed (159 packages)

Reputation

GitHubOwner 16 years old

GitHubOwner established (over a year, 3+ public repositories)

GitHub286 stars

GitHub867 public repos

Shown apart from the code and behaviour findings.