alterlab-open-notebook
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
SecuritySecurityreferences/configuration.md
MEDIUMSecurityMEDIUM
references/configuration.md
No malware or intentionally malicious code is evident because the supplied material is configuration documentation. However, the example deployment has significant security weaknesses: hardcoded SurrealDB root/root credentials, direct database exposure, mutable latest image tags, broadly published service ports, and insufficient backup/secret protection guidance. These are configuration risks rather than evidence of package malware.
Confidence: 98%Severity: 78%
Audit Metadata