github.com / apoapostolov
apoapostolov/
TypeScript·222 files·commit f953000·scanned 3d ago·cached ✓
2/100
SAFE
No malicious patterns found. Repo signals are consistent with a legitimate project.
verdict accurate?
CLI tool detected
threat-state: safelive
FINDINGS ░▒▓
infoSuspicious file in repoVery large source file (501KB) — could contain obfuscated payloadpackage-lock.json+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
190 files scanned @ f953000 | 10/26/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation0
supply chain2
owasp / injection0
telemetry
files 190/222rules hit 1engine v7commit f953000
github
apoapostolov/npm-gui-next
Modern local web UI for npm, pnpm, yarn, and bun. Manage project and global packages, inspect updates, and run bulk installs with active maintenance and current Node support.
4
0
229d
222 files
190 scanned(86%)
f953000
architecture░▒▓
entry (1) flagged (0) pkg (14)
195 nodes · 481 edgesscroll to zoom · click node to jump to finding