FILE AND DEPENDENCY EVIDENCE27 findings to review
1. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
src/binding.gyp- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- execute
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
2. Child process API
Potential issueImports node:child_process
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/libvips.cjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- apis
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
3. Dynamic require
Potential issueComputed require() cannot be resolved statically
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/libvips.cjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
4. Child process API
Potential issueImports node:child_process
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/libvips.mjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- apis
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
5. Dynamic require
Potential issueComputed require() cannot be resolved statically
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/libvips.mjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
6. Dynamic require
Potential issueComputed require() cannot be resolved statically
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/sharp.cjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
7. Dynamic require
Potential issueComputed require() cannot be resolved statically
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/sharp.mjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
8. Dynamic require
Potential issueComputed require() cannot be resolved statically
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/utility.cjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
9. Dynamic require
Potential issueComputed require() cannot be resolved statically
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
dist/utility.mjs- Dependency path
sharp@0.35.5- Entry points
dist/index.mjs- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
10. CommonJS entry
Potential issueSelected entry appears to use CommonJS; this runtime may need bundler interop
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
index.js- Dependency path
sharp@0.35.5 → semver@7.8.5- Entry points
index.js- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
11. CommonJS entry
Potential issueSelected entry appears to use CommonJS; this runtime may need bundler interop
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
index.cjs- Dependency path
sharp@0.35.5 → @img/colour@1.1.0- Entry points
index.cjs- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
12. Child process API
Potential issueImports child_process
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/detect-libc.js- Dependency path
sharp@0.35.5 → detect-libc@2.1.2- Entry points
lib/detect-libc.js- Dimension
- apis
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
13. Filesystem API
Potential issueImports fs
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/filesystem.js- Dependency path
sharp@0.35.5 → detect-libc@2.1.2- Entry points
lib/detect-libc.js- Dimension
- apis
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
14. CommonJS entry
Potential issueSelected entry appears to use CommonJS; this runtime may need bundler interop
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/detect-libc.js- Dependency path
sharp@0.35.5 → detect-libc@2.1.2- Entry points
lib/detect-libc.js- Dimension
- import
- Reachability
- not proven reachable from selected entry
- Confidence
- low · static
15. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linux-arm-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linux-arm@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
16. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linux-x64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linux-x64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
17. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-win32-x64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-win32-x64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
18. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-darwin-x64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-darwin-x64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
19. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-win32-ia32-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-win32-ia32@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
20. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linux-arm64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linux-arm64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
21. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linux-ppc64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linux-ppc64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
22. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linux-s390x-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linux-s390x@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
23. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-win32-arm64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-win32-arm64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
24. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-darwin-arm64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-darwin-arm64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
25. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linux-riscv64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linux-riscv64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
26. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linuxmusl-x64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linuxmusl-x64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
27. Native addon
Potential issueNative addon artifact or build manifest
Source excerpt
No source excerpt was saved for this finding. Older reports, manifest or binary signals, and inspection failures may not have a source location.
This snapshot has no saved remediation guidance. Run an analysis from the analyzer to create a current report; this saved report will remain unchanged.
- File
lib/sharp-linuxmusl-arm64-0.35.5.node- Dependency path
sharp@0.35.5 → @img/sharp-linuxmusl-arm64@0.35.5- Entry points
index.js- Dimension
- execute
- Reachability
- optional dependency; platform selection not verified
- Confidence
- low · static
How to use this report
This report preserves the findings as of September 28, 2026 at 7:15 PM UTC. It may use older analysis rules (analysis version 2). Package code was not executed. Runtime versions, flags, bundlers, and operating systems can change actual compatibility.
Reachability is approximate. Optional dependencies, generated code, dynamic imports, and incomplete scans can cause false positives or missed issues. A green assessment means no blocker was found within the inspected scope. The score is a heuristic, not a probability.
Read all limitations ↗