registry  /  @cairnkeep/cli  /  1.0.0

@cairnkeep/cli@1.0.0

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStrings
ManifestNo manifest risk signals triggered.
scanned 8 file(s), 82.9 KB of source

Source & flagged code

2 flagged · loading source
mcp-memory-server/dist/explore-cache.jsView file
1import { execFileSync } from "node:child_process"; L2: import { createHash } from "node:crypto"; ... L10: export function exploreCacheDir() { L11: const base = process.env.XDG_CACHE_HOME ?? join(homedir(), ".cache"); L12: return join(base, "cairn", "explore"); ... L31: export function computeRepoState(repoRoot) { L32: // stdio ignores the child's stderr so a non-git repoRoot (or any git L33: // failure) doesn't leak "fatal: not a git repository" noise onto the ... L60: } L61: return JSON.parse(readFileSync(path, "utf8")); L62: }
Low
Weak Crypto

Package source references weak cryptographic algorithms.

mcp-memory-server/dist/explore-cache.jsView on unpkg · L1
claude/hooks/memory-wakeup.shView file
•path = claude/hooks/memory-wakeup.sh kind = build_helper sizeBytes = 1921 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

claude/hooks/memory-wakeup.shView on unpkg

Findings

4 Medium5 Low
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperclaude/hooks/memory-wakeup.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptomcp-memory-server/dist/explore-cache.js
LowFilesystem
LowHigh Entropy Strings