reshapr.io

mcp
Security Audit
Fail
Health Warn
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 7 GitHub stars
Code Fail
  • child_process — Shell command execution capability in scripts/generate-video-placeholders.js
  • execSync — Synchronous shell command execution in scripts/generate-video-placeholders.js
  • fs module — File system access in scripts/generate-video-placeholders.js
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This project is the source code for the official reShapr website, built using the Docusaurus static site generator. It is designed to generate web pages rather than function as a standard backend service or utility.

Security Assessment
The automated scan flagged shell command execution and file system access. This is entirely expected for a Docusaurus project, as the flags point to a script used to generate local video placeholders. It does not request dangerous permissions or contain hardcoded secrets. While network requests are typical for fetching web dependencies, the tool does not actively access sensitive user data. Overall risk is rated as Low.

Quality Assessment
The project is actively maintained, with its most recent code pushed today. It uses the permissive Apache-2.0 license, making it safe for reuse and modification. However, community trust and visibility are very low, given that it has only 7 GitHub stars. Because it serves as a corporate or project website, a lack of widespread community engagement is not unusual.

Verdict
Safe to use.
SUMMARY

reShapr website

README.md

Website

This website is built using Docusaurus, a modern static website generator.

Clone this repo

git clone https://github.com/reshaprio/reshapr.io.git

Local Development

npm run start

Install dependencies before running local commands:

npm install

Note: this project uses patch-package (via postinstall) to apply a small compatibility patch for react-loadable-ssr-addon-v5-slorber and avoid Node.js DEP0169 deprecation warnings during build.

This command starts a local development server and opens up a browser window. Most changes are reflected live without having to restart the server.

You build... as usual using npm.

Cache cleanup

To remove all previous run, build

rm -rf build .docusaurus
npm run start

Reviews (0)

No results found