registry / @aikdna/kdna-cli / 0.30.2

@aikdna/kdna-cli@0.30.2

KDNA CLI — runtime control plane for inspecting, validating, planning, packing, unpacking, and loading local .kdna assets.

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 66 file(s), 834 KB of source, external domains: api.anthropic.com, api.openai.com, github.com, raw.githubusercontent.com

Source & flagged code

1 flagged

schema/trace-validator.jsView file

Lines 1-21javascript

1const fs = require('node:fs');

2const path = require('node:path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

schema/trace-validator.jsView on unpkg · L1

4let _schema = null;

6function loadSchema() {

7 if (_schema) return _schema;

8 const schemaPath = path.join(__dirname, '..', 'schema', 'trace-v1.schema.json');

9 _schema = JSON.parse(fs.readFileSync(schemaPath, 'utf8'));

10 return _schema;

11}

13function validateTrace(trace) {

14 const errors = [];

16 if (!trace || typeof trace !== 'object') {

17 return { valid: false, errors: ['trace must be an object'] };

18 }

20 if (trace.kdna_trace !== '1.0.0') {

21 errors.push('kdna_trace must be "1.0.0"');

Source & flagged code

1 flagged · loading source

schema/trace-validator.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code