Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(CmPo)Md(Pa₄)
Referenced by 1 sample
Micro-behaviors
notable severity, 80% confident.
communications/http/request
Calls JavaScript fetch API
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
Metadata
notable severity, 90% confident.
package
README recommends scoped package installation
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
notable severity, 90% confident.
package/quality
Package declares TypeScript tooling
baseline severity, 95% confident.
build
Code bundled with Rolldown
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 85% confident.
package/testing/presence
Spec or test filename markers
Identity
| SHA-256 | fe596fb9ccf23a4b46a79321ae45e4f21fe853f19f9f2f7d351e15d6d5212452 |
|---|---|
| Canonical SHA-256 | cd2b02e681722da1ca17e654dca934c73e607f4620fe9b82bacdcef2a139200b |
| Filename | eventsource-0.39.0.tgz |
| Package | eventsource |
| Version | 0.39.0 |
| PURL | pkg:npm/@gjsify/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@gjsify/eventsource/-/eventsource-0.39.0.tgz |
Timeline
| First seen | 14 Aug 2026 19:11 UTC |
|---|---|
| First analyzed | 14 Aug 2026 19:13 UTC |
| Last analyzed | 14 Aug 2026 19:13 UTC |
| Last updated | 14 Aug 2026 19:11 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | fb1c6 |
Not seeing what you expected? Let us know