alterlab-open-notebook

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security
SecurityMEDIUM
references/configuration.md

No malware or intentionally malicious code is evident because the supplied material is configuration documentation. However, the example deployment has significant security weaknesses: hardcoded SurrealDB root/root credentials, direct database exposure, mutable latest image tags, broadly published service ports, and insufficient backup/secret protection guidance. These are configuration risks rather than evidence of package malware.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Sep 25, 2026, 02:37 PM
Package URL
pkg:socket/skills-sh/alterlab-ieu%2Falterlab-academic-skills%2Falterlab-open-notebook%2F@542fe5cc4c7be645f3261f188df308b272e0c7ccd763124bce2d2d01bad39f92