@cyberhub/trust-hrcli-hcli-code 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +55 -0
- package/package.json +29 -0
package/README.md
ADDED
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
# Security Trust Report: @hrcli/hcli-code
|
|
2
|
+
|
|
3
|
+
**[@hrcli/hcli-code@1.0.10](https://www.npmjs.com/package/%40hrcli%2Fhcli-code): 57/100 | Grade: C+ | Tier: STANDARD** (confidence: ±3)
|
|
4
|
+
|
|
5
|
+
> Scanned on 2026-04-08 from 8 security databases. [View package on npm →](https://www.npmjs.com/package/%40hrcli%2Fhcli-code)
|
|
6
|
+
|
|
7
|
+
## TL;DR
|
|
8
|
+
|
|
9
|
+
- No critical vulnerabilities from live scan
|
|
10
|
+
- Pin your version and monitor for changes
|
|
11
|
+
|
|
12
|
+
## Score Breakdown
|
|
13
|
+
|
|
14
|
+
```
|
|
15
|
+
Maintainer Trust: █████████████░░░░░░░ 65/100
|
|
16
|
+
Package Health: ███████████████░░░░░ 74/100
|
|
17
|
+
Supply Chain: ████████░░░░░░░░░░░░ 40/100
|
|
18
|
+
Community: ████████░░░░░░░░░░░░ 40/100
|
|
19
|
+
```
|
|
20
|
+
|
|
21
|
+
### Why this score?
|
|
22
|
+
|
|
23
|
+
- Supply Chain is 40 because: risky dependencies
|
|
24
|
+
- Community is 40 because: no public GitHub repo linked (may be private or on another platform)
|
|
25
|
+
|
|
26
|
+
## Vulnerabilities
|
|
27
|
+
|
|
28
|
+
✅ No known vulnerabilities detected across 8 security databases.
|
|
29
|
+
|
|
30
|
+
## Key Risk Flags
|
|
31
|
+
|
|
32
|
+
- 🟠 **HIGH**: Primary maintainer account is less than 6 months old (1 days)
|
|
33
|
+
- 🟠 **HIGH**: Burst publishing detected — 5+ versions in a single day
|
|
34
|
+
- 🟠 **HIGH**: No license declared
|
|
35
|
+
- 🟠 **HIGH**: Depends on historically compromised package: axios
|
|
36
|
+
- 🟠 **HIGH**: Depends on historically compromised package: semver
|
|
37
|
+
|
|
38
|
+
## 🛠️ What Should You Do?
|
|
39
|
+
|
|
40
|
+
**Always:** Pin version, run `pkgtrust scan` in CI, monitor at [nrupak.com/trust/@hrcli/hcli-code](https://nrupak.com/trust/%40hrcli%2Fhcli-code)
|
|
41
|
+
|
|
42
|
+
## Maintainers (1)
|
|
43
|
+
|
|
44
|
+
- [hrcli](https://www.npmjs.com/~hrcli) ✅ 2FA (org email) — [Trust profile](https://nrupak.com/trust/maintainer/hrcli)
|
|
45
|
+
|
|
46
|
+
**Methodology:** 18+ signals across 4 categories (Maintainer 35%, Package 25%, Supply Chain 25%, Community 15%). [Full scoring docs →](https://nrupak.com/trust)
|
|
47
|
+
|
|
48
|
+
**Check your project:** `npm i -g @cyberhub/pkgtrust && pkgtrust scan @hrcli/hcli-code` — [CLI docs](https://npmjs.com/package/@cyberhub/pkgtrust)
|
|
49
|
+
**Data Sources:** GitHub Advisories · OSV.dev · npm audit · Snyk · Socket.dev · npms.io · Bundlephobia · deps.dev
|
|
50
|
+
|
|
51
|
+
---
|
|
52
|
+
|
|
53
|
+
*Report by [pkgtrust](https://nrupak.com/trust/%40hrcli%2Fhcli-code) · [Dashboard](https://nrupak.com/trust) · [Compare](https://nrupak.com/trust/compare) · [CLI](https://npmjs.com/package/@cyberhub/pkgtrust)*
|
|
54
|
+
|
|
55
|
+
*This is an automated security report. Not affiliated with the @hrcli/hcli-code team. Updated 2026-04-08.*
|
package/package.json
ADDED
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@cyberhub/trust-hrcli-hcli-code",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"description": "Security Trust Report: @hrcli/hcli-code@1.0.10 — 57/100 (C+, standard). Maintainer risk, supply chain analysis from 8 security databases.",
|
|
5
|
+
"keywords": [
|
|
6
|
+
"hrcli-hcli-code",
|
|
7
|
+
"hrcli-hcli-code",
|
|
8
|
+
"security",
|
|
9
|
+
"security-report",
|
|
10
|
+
"trust-score",
|
|
11
|
+
"vulnerability",
|
|
12
|
+
"npm-audit",
|
|
13
|
+
"npm-security",
|
|
14
|
+
"supply-chain",
|
|
15
|
+
"pkgtrust",
|
|
16
|
+
"audit",
|
|
17
|
+
"scan",
|
|
18
|
+
"risk",
|
|
19
|
+
"risk-assessment",
|
|
20
|
+
"standard"
|
|
21
|
+
],
|
|
22
|
+
"license": "MIT",
|
|
23
|
+
"author": "Nrupak Shah <nrupaks@gmail.com>",
|
|
24
|
+
"repository": {
|
|
25
|
+
"type": "git",
|
|
26
|
+
"url": "https://github.com/nrupaks/pkgtrust"
|
|
27
|
+
},
|
|
28
|
+
"homepage": "https://nrupak.com/trust/%40hrcli%2Fhcli-code"
|
|
29
|
+
}
|