registry / @askalf/dario / 4.8.109

@askalf/dario@4.8.109

Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 49 file(s), 862 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.groq.com, api.openai.com, bun.com, bun.sh, claude.ai, claude.com, github.com, openrouter.ai, platform.claude.com, www.anthropic.com

Source & flagged code

4 flagged

dist/proxy.jsView file

Lines 1-22javascript

1import { createServer } from 'node:http';

2import { randomUUID, randomBytes, timingSafeEqual, createHash } from 'node:crypto';

3import { execSync } from 'node:child_process';

4import { readFileSync, readdirSync, createWriteStream } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/proxy.jsView on unpkg · L2

5import { join } from 'node:path';

6import { homedir } from 'node:os';

7import { setDefaultResultOrder } from 'node:dns';

8import { arch, platform } from 'node:process';

9import { getAccessToken, getStatus } from './oauth.js';

10import { buildHealthResponse } from './health-response.js';

11import { buildCCRequest, applyCcPromptCaching, parseEffortSuffix, reverseMapResponse, createStreamingReverseMapper, orderHeadersForOutbound, CC_TEMPLATE } from './cc-template.js';

12import { stampCch } from './cch.js';

13import { describeTemplate, detectDrift, checkCCCompat } from './live-fingerprint.js';

14import { AccountPool, computeStickyKey, parseRateLimits, modelFamily, isInAuthCooldown, authCooldownMs } from './pool.js';

15import { Analytics, billingBucketFromClaim } from './analytics.js';

16import { OverageGuard, buildHaltErrorBody } from './overage-guard.js';

17import { notify as osNotify } from './notify.js';

18import { loadAllAccounts, loadAccount, refreshAccountToken, resyncLoginFromCredentialsIfStale } from './accounts.js';

19import { handleAdminRequest } from './admin-api.js';

20import { getOpenAIBackend, isOpenAIModel, forwardToOpenAI } from './openai-backend.js';

21import { RequestQueue, QueueFullError, QueueTimeoutError, DEFAULT_MAX_CONCURRENT, DEFAULT_MAX_QUEUED, DEFAULT_QUEUE_TIMEOUT_MS } from './request-queue.js';

22import { redactSecrets } from './redact.js';

dist/live-fingerprint.jsView file

Lines 386-426javascript

386 `event: message_stop\ndata: ${JSON.stringify({ type: 'message_stop' })}\n\n`,

387 ].join('');

388 res.end(sse);

389 // Give CC a beat to read the response before we kill it.

390 setTimeout(() => settle

dist/runtime-fingerprint.jsView file

Lines 11-51javascript

11 * - **Shim mode** runs inside CC's own process (NODE_OPTIONS=--require),

12 * so its outbound fetch rides on CC's TLS stack by construction.

13 * Nothing to reconcile — the shim is always TLS-matched to CC.

14 *

15 *

dist/cli.jsView file

Lines 1816-1856javascript

1816 console.log(pkg.version);

1817 }

1818 catch {

1819 console.log('unknown');

1820 }

1821}

1822async function config() {

1823 const { collectEffectiveConfig,

Source & flagged code

4 flagged · loading source

dist/proxy.jsView file

2import { randomUUID, randomBytes, timingSafeEqual, createHash } from 'node:crypto'; L3: import { execSync } from 'node:child_process'; L4: import { readFileSync, readdirSync, createWriteStream } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/proxy.jsView on unpkg · L2

dist/live-fingerprint.jsView file

406} L407: // Node 20+ won't spawn `.cmd`/`.bat` without `shell: true` (CVE-2024-27980). L408: // `useShell` triggers cmd.exe on Windows — reject overrides that carry

High

Shell

Package source references shell execution.

dist/live-fingerprint.jsView on unpkg · L406

dist/runtime-fingerprint.jsView file

31*/ L32: import { execFileSync } from 'node:child_process'; L33: /** ... L63: * the real environment. Production callers pass L64: * `classifyRuntimeFingerprint(typeof Bun !== 'undefined', probeBunVersion(), process.env)`. L65: * ... L99: detail: `Node ${nodeVersion} — Bun not installed; proxy-mode TLS fingerprint diverges from Claude Code`, L100: hint: 'Install Bun (https://bun.sh) so dario can auto-relaunch under it, or use shim mode ' + L101: '(`dario shim -- claude …`) which runs inside CC\'s own process and inherits its TLS stack.', ... L128: * happening (the install can take 10-30 s on a slow link). Returns the L129: * exit code; non-zero is surfaced by the caller as a fail row. L130: *

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/runtime-fingerprint.jsView on unpkg · L31

dist/cli.jsView file

1836async function upgrade() { L1837: // Thin wrapper over `npm install -g @askalf/dario@latest`. The value L1838: // isn't in saving the user typing — it's in the pre-flight (print ... L1840: // fail with a clear hint if npm is missing). L1841: const { spawnSync } = await import('node:child_process'); L1842: const { fileURLToPath } = await import('node:url');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L1836

Findings

4 High3 Medium5 Low

HighChild Processdist/proxy.js

HighShelldist/live-fingerprint.js

HighSandbox Evasion Gated Capabilitydist/runtime-fingerprint.js

HighRuntime Package Installdist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/proxy.jsView file

Lines 1-22javascript

1import { createServer } from 'node:http';

2import { randomUUID, randomBytes, timingSafeEqual, createHash } from 'node:crypto';

3import { execSync } from 'node:child_process';

4import { readFileSync, readdirSync, createWriteStream } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/proxy.jsView on unpkg · L2

5import { join } from 'node:path';

6import { homedir } from 'node:os';

7import { setDefaultResultOrder } from 'node:dns';

8import { arch, platform } from 'node:process';

9import { getAccessToken, getStatus } from './oauth.js';

10import { buildHealthResponse } from './health-response.js';

11import { buildCCRequest, applyCcPromptCaching, parseEffortSuffix, reverseMapResponse, createStreamingReverseMapper, orderHeadersForOutbound, CC_TEMPLATE } from './cc-template.js';

12import { stampCch } from './cch.js';

13import { describeTemplate, detectDrift, checkCCCompat } from './live-fingerprint.js';

14import { AccountPool, computeStickyKey, parseRateLimits, modelFamily, isInAuthCooldown, authCooldownMs } from './pool.js';

15import { Analytics, billingBucketFromClaim } from './analytics.js';

16import { OverageGuard, buildHaltErrorBody } from './overage-guard.js';

17import { notify as osNotify } from './notify.js';

18import { loadAllAccounts, loadAccount, refreshAccountToken, resyncLoginFromCredentialsIfStale } from './accounts.js';

19import { handleAdminRequest } from './admin-api.js';

20import { getOpenAIBackend, isOpenAIModel, forwardToOpenAI } from './openai-backend.js';

21import { RequestQueue, QueueFullError, QueueTimeoutError, DEFAULT_MAX_CONCURRENT, DEFAULT_MAX_QUEUED, DEFAULT_QUEUE_TIMEOUT_MS } from './request-queue.js';

22import { redactSecrets } from './redact.js';

dist/live-fingerprint.jsView file

Lines 386-426javascript

386 `event: message_stop\ndata: ${JSON.stringify({ type: 'message_stop' })}\n\n`,

387 ].join('');

388 res.end(sse);

389 // Give CC a beat to read the response before we kill it.

390 setTimeout(() => settle

dist/runtime-fingerprint.jsView file

Lines 11-51javascript

11 * - **Shim mode** runs inside CC's own process (NODE_OPTIONS=--require),

12 * so its outbound fetch rides on CC's TLS stack by construction.

13 * Nothing to reconcile — the shim is always TLS-matched to CC.

14 *

15 *

dist/cli.jsView file

Lines 1816-1856javascript

1816 console.log(pkg.version);

1817 }

1818 catch {

1819 console.log('unknown');

1820 }

1821}

1822async function config() {

1823 const { collectEffectiveConfig,