github.com / floatdrop
floatdrop/ require-from-string
JavaScript·12 files·commit d1575a4·scanned 18h ago·cached ✓
0/100
SAFE
No malicious patterns found. Repo signals are consistent with a legitimate project.
verdict accurate?
threat-state: safelive
FINDINGS ░▒▓
CLEAN
No malicious patterns found across 5/12 content-scanned files.
Static analysis only — treat as “nothing found”, not a guarantee.
Static analysis only — treat as “nothing found”, not a guarantee.
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
5 files scanned @ d1575a4 | 10/29/2026 | heuristic scan — always review manually
risk by category
code execution0
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 5/12rules hit 0engine v7commit d1575a4
github
floatdrop/require-from-string
Load module from string
298
32
4121d
12 files
5 scanned(42%)
d1575a4
architecture░▒▓
entry (1) flagged (0) pkg (2)
6 nodes · 3 edgesscroll to zoom · click node to jump to finding