registry / @aikdna/kdna-cli / 0.32.1

@aikdna/kdna-cli@0.32.1

KDNA CLI — runtime control plane for inspecting, validating, planning, packing, unpacking, and loading local .kdna assets.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 69 file(s), 926 KB of source, external domains: api.anthropic.com, api.openai.com, github.com

Source & flagged code

2 flagged

schema/trace-validator.jsView file

Lines 1-21javascript

1const fs = require('node:fs');

2const path = require('node:path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

schema/trace-validator.jsView on unpkg · L1

4let _schema = null;

6const NON_NEGATIVE_INTEGER_COST_FIELDS = [

7 'tokens_consumed',

8 'chars_consumed',

9 'projection_chars',

10 'projection_chars_delivered',

11 'assets_loaded',

12];

13const CHARS_CONSUMED_BASES = new Set([

14 'not_observed',

15 'agent_host_report',

16 'independent_measurement',

17]);

18const PROJECTION_CHAR_DELIVERY_BASES = new Set([

19 'runtime_serialized_projection',

20 'not_delivered',

21 'delivery_unconfirmed',

src/registry.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @aikdna/kdna-cli@0.32.0 matchedIdentity = npm:QGFpa2RuYS9rZG5hLWNsaQ:0.32.0 similarity = 0.884 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/registry.jsView on unpkg

Source & flagged code

2 flagged · loading source

schema/trace-validator.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code