Counted from 2 transfers since launch. The bonding curve, burn addresses, Uniswap pool liquidity and Pons or Feeroute contracts are left out of the shares.
Read from Robinhood Chain's public RPC and refreshed about once a minute. Unbox shows on-chain facts, not advice: a clean report does not make a token safe, and a warning is not proof of bad intent.