Scan report

Skidotus / grab

View on GitHub (opens in a new tab)
PHP
1 stars
Scanned 29 Jul 2026, 15:18

Vulnerability Safe

Could an attacker exploit mistakes in this code?

0 risk score

No issues of this kind were found.

High: 0
Medium: 0
Low: 0

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Safe

Does this code look like it is trying to cause harm?

0 risk score

No issues of this kind were found.

High: 0
Medium: 0
Low: 2

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview

2 total findings

Likely real: 0
Uncertain: 0
Likely noise: 2

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

All 2 findings look like noise (low confidence) — nothing here likely needs attention.

Detections by engine

Dependency checker 2

CVEs, typosquats and risky installs · Supply chain

Findings

Highest severity first. Select a finding to see the code and what it means.

Engine
Dependency checker · CVEs, typosquats and risky installs

Counts towards
Supply chain

File
package.json

Likely real
Probably noise, 2% confidence

Loose version constraint: '@tailwindcss/cli^4.1.15' — attacker could push malicious update
```
@tailwindcss/cli:^4.1.15
```
Engine
Dependency checker · CVEs, typosquats and risky installs

Counts towards
Supply chain

File
package.json

Likely real
Probably noise, 2% confidence

Loose version constraint: 'tailwindcss^4.1.17' — attacker could push malicious update
```
tailwindcss:^4.1.17
```