審計歷史

Standard development tooling for building React-based artifacts. All static findings are false positives: LICENSE.txt was misidentified (license URLs flagged as 'network', legal text as 'weak crypto'), CSS hsl() colors flagged as 'weak crypto', and documentation text flagged as 'system reconnaissance'. The scripts perform legitimate project initialization, dependency installation from npmjs.com, and file modifications for project configuration. No data exfiltration, no malicious behavior, and all capabilities align with the stated purpose.

Standard development tooling for building React-based artifacts. All static findings are false positives: LICENSE.txt was misidentified (license URLs flagged as 'network', legal text as 'weak crypto'), CSS hsl() colors flagged as 'weak crypto', and documentation text flagged as 'system reconnaissance'. The scripts perform legitimate project initialization, dependency installation from npmjs.com, and file modifications for project configuration. No data exfiltration, no malicious behavior, and all capabilities align with the stated purpose.

Standard build tooling with no malicious behavior. Scripts perform project initialization and bundling using legitimate package managers. All capabilities match the stated purpose of building frontend artifacts. Risk factors are typical for development tooling.

Standard build tooling with no malicious behavior. Scripts perform project initialization and bundling using legitimate package managers. All capabilities match the stated purpose of building frontend artifacts. Risk factors are typical for development tooling.

Standard build tooling with no malicious behavior. Scripts perform project initialization and bundling using legitimate package managers. All capabilities match the stated purpose of building frontend artifacts. Risk factors are typical for development tooling.