PCKS / SECURITY OPERATIONS

IRONVEIL.

A security pipeline that examines actual uploaded source before publication. This lab shows the same CodeSight, Upload Sentinel and FlowGuard reports used for release enforcement.

Static AST inspection Archive-only JavaScript Bounded analysisOpen PackScope
CODESIGHT / SOURCE ANALYZER

Inspect before you upload.

115 bytes / 200,000 max
POLICY ENGINE / TRIAGE

No scan yet

Source is never run during inspection. Analyze to see real parser findings and the policy decision.

POLICY REALITY

A clean static scan is not a guarantee of safety. JavaScript stays archive-only on PackCDN. Quarantine is a review decision, never an automatic account ban.

FlowGuard

Cross-correlates network, credential, host-file, obfuscation and dynamic-code signals. Connected high-risk patterns trigger review.

AST CodeSight

Checks source structure, computed names, literal reconstruction, imports, data transfer and potentially privileged references without evaluating uploads.

Integrity Watch

Published releases expose their SHA-256 file validation, signing evidence and authenticated scanner receipt from the project details page.