# Is sindresorhus/execa safe? Code check by OpenYard

Repository: https://github.com/sindresorhus/execa
Page: https://openyard.cloud/check/sindresorhus/execa

Verdict: No signs of malware or supply-chain tricks.
Checked 2026-11-10 at commit 247faa0 by vetcode 0.3.1, reading 680 files without running anything.

What the code can do:
- Reads secrets or environment variables (16 files)
- Connects to the internet (1 file)
- Starts other programs (172 files)
- Reads user and machine details (1 file)

These are patterns, not proof. Vulnerability candidates and leaked-secret locations are not published.

To review it more deeply, install the vetcode skill in an AI coding agent (npx skills add openyard-cloud/vetcode) and ask it to review https://github.com/sindresorhus/execa.