Local reference
Suspicious dependency
Inferred
Referenced by 1 sample
Well-known
notable severity, 99% confident.
lib/format
iconv-lite string decoder implementation
Micro-behaviors
notable severity, 96% confident.
communications/http
Access-token field reference
notable severity, 94% confident.
communications/http/request
Calls a response JSON parser
notable severity, 98% confident.
communications/http/services
Imports the GitHub Actions API client
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 90% confident.
communications/socket
Node TLS check disabled by option
notable severity, 90% confident.
data/compress
Imports the Node.js zlib module
notable severity, 92% confident.
data/control-flow
JavaScript empty named-parameter catch
notable severity, 90% confident.
data/decode
JavaScript hex-to-integer conversion
notable severity, 90% confident.
data/encode
Builds characters with String.fromCharCode
notable severity, 90% confident.
data/source/property
Reads constructor properties repeatedly
notable severity, 90% confident.
fs/file
Calls readFileSync
notable severity, 90% confident.
fs/write/file
Writes a buffer argument to a stream
notable severity, 90% confident.
process/create/shell
Package manager run build in shell chain
notable severity, 90% confident.
process/fd
Pipes a Node response stream
Metadata
notable severity, 98% confident.
build
Code bundled with the ncc webpack runtime
notable severity, 99% confident.
file/profile
Escaped Unicode codepoint in source
notable severity, 95% confident.
library
Preserves original JavaScript console methods
notable severity, 95% confident.
package/files
JavaScript file under dist directory
notable severity, 90% confident.
package/manifest
Repository identifies major Git host
20 of 43 traits shown
Identity
| SHA-256 | fea7142d218d12f8736bd117ac9dc28b78dfc5708daece2daa83bbf1b39409e6 |
|---|---|
| Filename | pkg:github/dessant/lock-threads@08e671be8ac8944d0e132aa71d0ae8ccfb347675 |
Origin
| Source | x |
|---|---|
| Ecosystem | golang |
Timeline
| First seen | 24 Aug 2026 23:43 UTC |
|---|---|
| First analyzed | 24 Aug 2026 20:02 UTC |
| Last analyzed | 25 Aug 2026 00:00 UTC |
| Last updated | 25 Aug 2026 00:03 UTC |
Labeling
| Label | unknown |
|---|
Not seeing what you expected? Let us know