registry  /  @brusdeylins/nano-banana  /  0.10.0

@brusdeylins/nano-banana@0.10.0

Deterministic image/video-generation CLI for LLM agents: Google Nano Banana (Gemini Image API) and Veo (Gemini Video API) -- text-to-image, image-to-image and text/image-to-video, model-aware aspect ratios and resolutions

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 1.63 MB of source, external domains: 169.254.169.254, accounts.google.com, ai.google.dev, aiplatform.googleapis.com, cloud.google.com, cloudresourcemanager.googleapis.com, docs.expo.dev, dummy.com, example.com, fetch.spec.whatwg.org, generativelanguage.googleapis.com, github.com, metadata.google.internal, oauth2.googleapis.com, www.googleapis.com, www.gstatic.com, www.ietf.org

Source & flagged code

1 flagged · loading source
dst/nano-banana.mjsView file
6const __filename = __nanoFileURLToPath(import.meta.url); L7: const __dirname = __nanoDirname(__filename); L8: var __create = Object.create; ... L62: } L63: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts)); L64: this._timeouts = timeouts; ... L453: L454: // node_modules/gaxios/package.json L455: var require_package = __commonJS({ ... L770: return; L771: } else if (obj instanceof FormData || obj instanceof URLSearchParams || // support `node-fetch` FormData/URLSearchParams L772: "forEach" in obj && "set" in obj) {
High
Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dst/nano-banana.mjsView on unpkg · L6

Findings

1 High3 Medium5 Low
HighCloud Metadata Accessdst/nano-banana.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings