package-json-commenter

Pass

Audited by Socket on Jun 20, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jun 20, 2026, 10:02 PM

Package URL

pkg:socket/skills-sh/corey-alix%2Fdwp-hours%2Fpackage-json-commenter%2F@ad0d97c190d6dedd5f619f001609780cdfa57c2776247c692cb37e3f9e807a04