registry / @aikdna/kdna-cli / 0.28.34

@aikdna/kdna-cli@0.28.34

⚠ Under review

KDNA CLI — runtime control plane for inspecting, validating, planning, packing, unpacking, and loading local .kdna assets.

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 53 file(s), 661 KB of source, external domains: api.anthropic.com, api.openai.com, github.com, raw.githubusercontent.com

Source & flagged code

2 flagged

validators/kdna-lint.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/**

3 * kdna-lint — Structural and content validation for KDNA domains.

4 *

5 * Uses @aikdna/kdna-core lintDomain for pure validation logic,

6 * handles file I/O here.

7 */

9const fs = require('fs');

10const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

validators/kdna-lint.jsView on unpkg · L8

11const { lintDomain } = require('@aikdna/kdna-core');

13const KDNA_DOMAIN_FILES = new Set([

14 'KDNA_Core.json',

15 'KDNA_Patterns.json',

16 'KDNA_Scenarios.json',

17 'KDNA_Cases.json',

18 'KDNA_Reasoning.json',

19 'KDNA_Evolution.json',

20]);

22const domainDir = process.argv[2];

23if (!domainDir || domainDir === '--help' || domainDir === '-h') {

24 console.log(`kdna-lint — Structural and content validation for KDNA domains.

26Usage: kdna-lint <domain-folder>

28Runs lint checks on KDNA_*.json files for structure, content, and consistency.

src/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @aikdna/kdna-cli@0.28.33 matchedIdentity = npm:QGFpa2RuYS9rZG5hLWNsaQ:0.28.33 similarity = 0.981 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

src/cli.jsView on unpkg

Source & flagged code

2 flagged · loading source

validators/kdna-lint.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code