test-safety-net
Audited by Socket on Nov 1, 2026
2 alerts found:
Anomalyx2This is a readable test suite, not apparent malware. It exposes and tests a meaningful execution risk: precise discovery executes the selected TypeScript library, which may be controlled by the analyzed repository or TSN_TYPESCRIPT_LIB. Use --no-precise when analyzing untrusted repositories unless that compiler is trusted or execution is sandboxed.
The supplied text documents a repository-ranking tool rather than providing its source code. It identifies a material execution risk: Node precise discovery executes repository-controlled TypeScript through require. Use --no-precise when analyzing untrusted Node repositories. No other malicious behavior can be established from this documentation alone.