github.com / MikeMcl
MikeMcl/ decimal.js
JavaScript·79 files·commit b1d1e31·scanned 18h ago·cached ✓
9/100
SAFE
No malicious patterns found. Repo signals are consistent with a legitimate project.
verdict accurate?
threat-state: safelive
FINDINGS ░▒▓
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.decimal.js+3
warningFlattened or dead control flowDetected switch(true), dead if branches, or deeply nested ternaries — patterns used by obfuscators to hide execution order.decimal.mjs+3
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
68 files scanned @ b1d1e31 | 10/29/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation6
supply chain0
owasp / injection0
telemetry
files 68/79rules hit 2engine v7commit b1d1e31
github
MikeMcl/decimal.js
An arbitrary-precision Decimal type for JavaScript
7270
503
4593d
79 files
68 scanned(86%)
b1d1e31
architecture░▒▓
entry (2) flagged (2) pkg (7)
74 nodes · 70 edgesscroll to zoom · click node to jump to finding