github.com / mkevenaar

mkevenaar/chocolatey-packages

PowerShell·1731 files·commit 4108f59·scanned 1d ago·cached ✓

15/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

1% file coverage

threat-state: lowlive

FINDINGS ░▒▓

infoSuspicious file in repoExecutable file (GenerateDocs.ps1) in repositoryGenerateDocs.ps1+2

infoSuspicious file in repoExecutable file (chocolateyinstall.ps1) in repositoryautomatic/JAWS/tools/chocolateyinstall.ps1+2

infoSuspicious file in repoExecutable file (update.ps1) in repositoryautomatic/JAWS/update.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

25 files scanned @ 4108f59 | 10/27/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain15

owasp / injection0

telemetry

files 25/1731rules hit 3engine v7commit 4108f59

github

mkevenaar/chocolatey-packages

My chocolatey packages

PowerShell

2934d

1731 files

25 scanned(1%)

4108f59

architecture░▒▓

No architecture graph available. This usually happens when the repo contains no scannable JS/TS/Python files or only a single file was analyzed.