registry / @big-emotion/ferry / 0.19.0

@big-emotion/ferry@0.19.0

Ferry — GitHub Actions–native agent pipeline for Jira-driven automated development

Static Scan Results

scanned 35m ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 940 KB of source, external domains: acme.atlassian.net, admin.atlassian.com, api.github.com, console.anthropic.com, console.cloud.google.com, docs.github.com, ferry.dev, fetch.spec.whatwg.org, github.com, gitlab.com, id.atlassian.com, json-schema.org, mcp.context7.com, platform.openai.com, uploads.github.com

Source & flagged code

4 flagged

dist/cli/init/index.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3// src/cli/init/index.ts

4import { execSync as execSync4 } from "node:child_process";

5import { existsSync as existsSync3, writeFileSync as writeFileSync4 } from

Source & flagged code

4 flagged · loading source

dist/cli/init/index.js

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code