semver-range-resolve
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core semver purpose is coherent, but the skill couples a simple resolver to remote paid execution, a fallback download-and-run helper, and private-key-based authorization. The largest issue is credential forwarding to an externally fetched executable without strong release verification, making the overall footprint disproportionate to the task.
Confidence: 84%Severity: 82%
Audit Metadata