registry / @claude-sessions/web / 0.5.2

@claude-sessions/web@0.5.2

Web UI for Claude Code session management

Static Scan Results

scanned 13h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 680 file(s), 20.1 MB of source, external domains: datatracker.ietf.org, github.com, html.spec.whatwg.org, jh3y.medium.com, my.site, svelte.dev, www.w3.org

Source & flagged code

4 flagged

build/client/_app/immutable/chunks/BvA0_dpy.jsView file

27${r.join(` L28: `)}`),super(o),this._tag=t,this.traces=r,this[jm]=pM,this.name=s,this.stack=a}pipe(){return Ue(this,arguments)}toString(){return this.stack}[jt](){return this.stack}}class gM exten... L29: `,e.forest),wk=(e,t)=>{let n="";const r=t.length;let i;for(let s=0;s<r;s++){i=t[s];const o=s===r-1;n+=e+(o?"└":"├")+"─ "+i.value,n+=wk(e+(r>1&&!o?"│ ":" "),i.forest)}return n},M...

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/client/_app/immutable/chunks/BvA0_dpy.jsView on unpkg · L27

build/server/chunks/index.js-D3fphck3.jsView file

Lines 144-184javascript

144 return this;

145 }

146};

147const noop_span_context = {

148 traceId: "",

149 spanId: "",

150 traceFlags: 0

151};

152function with_resolvers() {

153 let resolve2;

154 let reject;

155 const promise = new Promise((res, rej) => {

156 resolve2 = res;

157 reject = rej;

158 });

159 return { promise, resolve: resolve2, reject };

160}

161const NULL_BODY_STATUS = [101, 103, 204, 205, 304];

162const IN_WEBCONTAINER = !!globalThis.process?.versions?.webcontainer;

163async function render_endpoint(event, event_state, mod, state) {

164 const method = (

165 /** @type {import('types').HttpMethod} */

166 event.request.method

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/server/chunks/index.js-D3fphck3.jsView on unpkg · L164

167 );

168 let handler = mod[method] || mod.fallback;

169 if (method === "HEAD" && !mod.HEAD && mod.GET) {

170 handler = mod.GET;

171 }

172 if (!handler) {

173 return method_not_allowed(mod, method);

174 }

175 const prerender = mod.prerender ?? state.prerender_default;

176 if (prerender && (mod.POST || mod.PATCH || mod.PUT || mod.DELETE)) {

177 throw new Error("Cannot prerender endpoints that have mutative methods");

178 }

179 if (state.prerendering && !state.prerendering.inside_reroute && !prerender) {

180 if (state.depth > 0) {

181 throw new Error(`${event.route.id} is not prerenderable`);

182 } else {

183 return new Response(void 0, { status: 204 });

184 }

build/client/_app/immutable/nodes/1.COQD2P0D.js.brView file

•path = build/client/_app/immutable/nodes/1.COQD2P0D.js.br kind = compressed_blob sizeBytes = 223 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

build/client/_app/immutable/nodes/1.COQD2P0D.js.brView on unpkg

build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gzView file

•path = build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gz kind = high_entropy_blob sizeBytes = 5911 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gzView on unpkg

Source & flagged code

4 flagged · loading source

build/client/_app/immutable/chunks/BvA0_dpy.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/client/_app/immutable/chunks/BvA0_dpy.jsView on unpkg · L27

build/server/chunks/index.js-D3fphck3.jsView file

164const method = ( L165: /** @type {import('types').HttpMethod} */ L166: event.request.method

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/server/chunks/index.js-D3fphck3.jsView on unpkg · L164

build/client/_app/immutable/nodes/1.COQD2P0D.js.brView file

•path = build/client/_app/immutable/nodes/1.COQD2P0D.js.br kind = compressed_blob sizeBytes = 223 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

build/client/_app/immutable/nodes/1.COQD2P0D.js.brView on unpkg

build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gzView file

•path = build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gz kind = high_entropy_blob sizeBytes = 5911 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gzView on unpkg

Findings

1 High6 Medium7 Low

HighShips High Entropy Blobbuild/client/_app/immutable/nodes/0.Bjl6iw6p.js.gz

MediumDynamic Requirebuild/server/chunks/index.js-D3fphck3.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Compressed Blobbuild/client/_app/immutable/nodes/1.COQD2P0D.js.br

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalbuild/client/_app/immutable/chunks/BvA0_dpy.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

4 flagged

build/client/_app/immutable/chunks/BvA0_dpy.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/client/_app/immutable/chunks/BvA0_dpy.jsView on unpkg · L27

build/server/chunks/index.js-D3fphck3.jsView file

Lines 144-184javascript

144 return this;

145 }

146};

147const noop_span_context = {

148 traceId: "",

149 spanId: "",

150 traceFlags: 0

151};

152function with_resolvers() {

153 let resolve2;

154 let reject;

155 const promise = new Promise((res, rej) => {

156 resolve2 = res;

157 reject = rej;

158 });

159 return { promise, resolve: resolve2, reject };

160}

161const NULL_BODY_STATUS = [101, 103, 204, 205, 304];

162const IN_WEBCONTAINER = !!globalThis.process?.versions?.webcontainer;

163async function render_endpoint(event, event_state, mod, state) {

164 const method = (

165 /** @type {import('types').HttpMethod} */

166 event.request.method

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/server/chunks/index.js-D3fphck3.jsView on unpkg · L164

167 );

168 let handler = mod[method] || mod.fallback;

169 if (method === "HEAD" && !mod.HEAD && mod.GET) {

170 handler = mod.GET;

171 }

172 if (!handler) {

173 return method_not_allowed(mod, method);

174 }

175 const prerender = mod.prerender ?? state.prerender_default;

176 if (prerender && (mod.POST || mod.PATCH || mod.PUT || mod.DELETE)) {

177 throw new Error("Cannot prerender endpoints that have mutative methods");

178 }

179 if (state.prerendering && !state.prerendering.inside_reroute && !prerender) {

180 if (state.depth > 0) {

181 throw new Error(`${event.route.id} is not prerenderable`);

182 } else {

183 return new Response(void 0, { status: 204 });

184 }

build/client/_app/immutable/nodes/1.COQD2P0D.js.brView file

•path = build/client/_app/immutable/nodes/1.COQD2P0D.js.br kind = compressed_blob sizeBytes = 223 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

build/client/_app/immutable/nodes/1.COQD2P0D.js.brView on unpkg

build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gzView file

•path = build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gz kind = high_entropy_blob sizeBytes = 5911 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

build/client/_app/immutable/nodes/0.Bjl6iw6p.js.gzView on unpkg