The safeguards map / 2.1 Tester-run
Package Analysis
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Runs packages from open source repositories in a sandbox and records the files they touch, addresses they contact and commands they run, to find malicious behavior.
Where it sits
2.1 Tester-run (primary): Runs a package inside a gVisor sandbox and captures its file, network and command activity to reveal malicious behavior.
The project looks for behaviors that indicate malicious software
captured
A worker performs dynamic analysis of the package inside a sandbox.
captured
Sandboxing via [gVisor](https://gvisor.dev/) containers ensures the packages are isolated.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who oversee itthose who run it
- Runs
- by hand
- Tests
- the application or API
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
The OpenSSF project table lists the project with no stage (TBD), so maturity is the plain release state shown by its numbered releases.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.