registry / @danypops/papyrus / 0.2.1

@danypops/papyrus@0.2.1

Daemon-backed graph artifacts, evidence-bearing tasks, rules, skills, and native TUI workflows for Pi

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

Manifest

NoLicenseWildcardDependency

scanned 41 file(s), 170 KB of source

Source & flagged code

3 flagged

src/cli.tsView file

Lines 1-21typescript

1#!/usr/bin/env bun

2import { execFileSync } from "node:child_process";

3import { mkdirSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

src/cli.tsView on unpkg · L1

4import { homedir } from "node:os";

5import { dirname, join } from "node:path";

6import { fileURLToPath } from "node:url";

7import { connectPapyrusClient, type PapyrusClient } from "./client.ts";

8import { DAEMON_UNIT_NAME } from "./constants.ts";

9import { serveMain } from "./daemon.ts";

10import type { GateResult } from "./domain/gate.ts";

11import type { TaskExecutionPlan } from "./task-execution.ts";

12import type { TaskBlockage, TaskCompletion } from "./task-service.ts";

14export interface SystemdUnitOptions {

15 bunBin: string;

16 cliPath: string;

17}

19export function renderSystemdUnit(options: SystemdUnitOptions): string {

20 return `[Unit]

21Description=Papyrus graph artifact service

src/task-service.tsView file

Lines 46-86typescript

46 childIds: string[];

47 dependencyIds: string[];

48}

50export interface TaskGraph {

51 nodes: TaskNode[];

src/ops.tsView file

Lines 250-290typescript

250 try {

251 const content = readFileSync(gate.target, "utf-8");

252 const found = gate.expect ? content.includes(gate.expect) :

Source & flagged code

3 flagged · loading source

src/cli.tsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code