“Get an available port”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmPo)Md(Pa₄)
Referenced by 9 samples
- benign enzyme-3.7.0.tgz fetched
- hostile github.com-netflix-skunkworks-stethoscope-app-v1.2.0.zip fetched
- benign github.com-sage-carbon-v142.3.0+incompatible.zip fetched
- suspicious github.com-stoplightio-json-schema-viewer-v4.3.6+incompatible.zip fetched
- hostile github.com-Tanstack-form-v0.4.2.zip fetched
- benign github.com-matthewsreis-ent-v0.0.0-20260819153406-6cd03b8fa17a.zip fetched
- benign github.com-sage-carbon-v9.0.0+incompatible.zip fetched
- hostile github.com-NOdeBB-NOdeBB-v1.14.0-12.zip fetched
- benign github.com-glific-floweditor-v1.43.0-1.zip fetched
Objectives
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
Micro-behaviors
notable severity, 86% confident.
communications/socket
Node generic server listens on endpoint
notable severity, 86% confident.
process/daemonize
Detaches a handle with unref()
Metadata
notable severity, 70% confident.
package/dependencies
npm devDependency pinned to '*'
notable severity, 92% confident.
package/files
Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest
Repository uses owner/project coordinate
notable severity, 90% confident.
package/manifest/author
Package declares Sindre Sorhus email
baseline severity, 80% confident.
file/profile
English function-word token "and"
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
Identity
| SHA-256 | be2918a4f9cdbd0167040fcde6dca9254d90374e35ad11408f8d0720835b78f1 |
|---|---|
| Canonical SHA-256 | 47f015664d42117b32749e331e13e2678d04b02e30a36a7f3ecfdf2290061c4b |
| Filename | [email protected] |
| Package | get-port |
| Version | 2.1.0 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/get-port/-/get-port-2.1.0.tgz |
Timeline
| First seen | 13 Aug 2026 01:31 UTC |
|---|---|
| First analyzed | 13 Aug 2026 01:31 UTC |
| Last analyzed | 24 Aug 2026 04:09 UTC |
| Last updated | 24 Aug 2026 04:11 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 63cf1 |
Not seeing what you expected? Let us know