registry / @astrosheep/keiyaku / 2.8.0

@astrosheep/keiyaku@2.8.0

CLI for running iterative keiyaku workflows with Codex subagents.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 139 file(s), 921 KB of source

Source & flagged code

4 flagged

build/core/projection-coordinate.jsView file

Lines 1-21javascript

1import { spawnSync } from "node:child_process";

2import * as path from "node:path";

High

Child Process

Package source references child process execution.

build/core/projection-coordinate.jsView on unpkg · L1

3import { ProjectionStateError } from "./atomic-publish.js";

4/**

5 * Select the filesystem authority for repository projection state.

6 *

7 * A non-bare repository uses the parent of its absolute common Git directory,

8 * so every linked worktree shares one coordinate. Repo-free callers retain the

9 * existing cwd-local authority until its replacement is legislated.

10 */

11export function projectionCoordinateRoot(cwd) {

12 const result = spawnSync("git", ["rev-parse", "--is-bare-repository", "--path-format=absolute", "--git-common-dir"], {

13 cwd,

14 encoding: "utf8",

15 env: {

16 ...process.env,

17 GIT_TERMINAL_PROMPT: "0",

18 LC_ALL: "C",

19 },

20 stdio: ["ignore", "pipe", "pipe"],

21 });

build/agents/providers/pi.jsView file

Lines 26-66javascript

26 "tool_execution_start",

27 "tool_execution_update",

28 "tool_execution_end",

29 "compaction_start",

30 "compaction_end",

31 "session_info_changed",

build/agents/opencode-sdk.jsView file

Lines 27-67javascript

27 });

28 });

29}

30async function waitForServerReady(client, directory, timeoutMs, signal) {

31 const deadline

Source & flagged code

4 flagged · loading source

build/core/projection-coordinate.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code