registry  /  @alan-zhao/yolk-pi-web  /  0.7.1

@alan-zhao/yolk-pi-web@0.7.1

yolk pi web WebChat workspace for the pi coding agent

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystem
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 6.07 KB of source

Source & flagged code

4 flagged · loading source
scripts/start-pi-web-proxy.ps1View file
•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 1322 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg
.next/server/app/favicon.ico.bodyView file
•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg
.next/server/app/page.jsView file
•path = .next/server/app/page.js kind = payload_in_excluded_dir sizeBytes = 2384611 magicHex = [redacted]
High
Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/page.jsView on unpkg
•path = .next/server/app/page.js kind = oversized_source_file sizeBytes = 2384611 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

.next/server/app/page.jsView on unpkg

Findings

3 High3 Medium3 Low
HighShips High Entropy Blob.next/server/app/favicon.ico.body
HighPayload In Excluded Dir.next/server/app/page.js
HighOversized Source File.next/server/app/page.js
MediumEnvironment Vars
MediumShips Build Helperscripts/start-pi-web-proxy.ps1
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem