faker-data

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Security
SecurityMEDIUM
evals/staging-emails-reach-real-mailboxes/task.md

The code contains no evidence of intentional malware or obfuscation, but it has a clear operational safety risk: seeding can send welcome emails to Faker-generated real addresses through the configured relay. The factory also generates work addresses at a real company domain and potentially resolvable website URLs. The requested domain-safety constraints and deterministic large-sample test are not implemented in the supplied code.

Confidence: 99%Severity: 86%
Audit Metadata
Analyzed At
Oct 12, 2026, 06:02 PM
Package URL
pkg:socket/skills-sh/testland%2Fqa%2Ffaker-data%2F@f0f5be554cdd7db646600e64957a532b62e4f98fbe777ceae9517de8cd0148e4