registry / @dzhechkov/harness-core / 0.3.46

@dzhechkov/harness-core@0.3.46

⚠ Under review

Shared harness logic - skill loading, additive apply, and the init/sync/verify/doctor operations.

Static Scan Results

scanned 23h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 54 file(s), 526 KB of source, external domains: api.github.com, api.npmjs.org, github.com, json-schema.org, raw.githubusercontent.com

Source & flagged code

6 flagged

dist/publish.jsView file

Lines 1-28javascript

1/**

2 * Automated publish — discovers changed packages, bumps patch versions,

3 * builds, and publishes to npm.

4 *

5 * @packageDocumentation

6 */

7import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';

8import { join } from 'node:path';

9import { execSync } from 'node:child_process';

10/** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

11export function bumpPatch(version) {

12 // Parse the core x.y.z, tolerating a 2-part "x.y" (treated as x.y.0) and a

13 // prerelease/build suffix (e.g. "1.2.3-beta.2"). A prerelease bumps to its

14 // release (x.y.z), which semver-orders ABOVE the prerelease — never below it,

15 // and never silently drops to a lower number (audit #12).

16 const core = (version.split('+')[0] ?? version).split('-');

17 const hasPrerelease = core.length > 1;

18 const nums = (core[0] ?? '').split('.');

19 const major = parseInt(nums[0] ?? '0', 10) || 0;

20 const minor = parseInt(nums[1] ?? '0', 10) || 0;

21 const patch = parseInt(nums[2] ?? '0', 10) || 0;

22 // Releasing a prerelease keeps the same x.y.z (it outranks the prerelease);

23 // a normal release bumps the patch.

24 return hasPrerelease ? `${major}.${minor}.${patch}` : `${major}.${minor}.${patch + 1}`;

25}

26/** Compare two x.y.z(-pre) versions by their core triple: >0 if a>b, <0 if a<b. */

27export function compareVersions(a, b) {

28 const core = (v) => ((v.split('+')[0] ?? v).split('-')[0] ?? '').split('.').map((n) => parseInt(n, 10) || 0);

•matchType = previous_version_dangerous_delta matchedPackage = @dzhechkov/harness-core@0.3.41 matchedIdentity = npm:QGR6aGVjaGtvdi9oYXJuZXNzLWNvcmU:0.3.41 similarity = 0.760 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/publish.jsView on unpkg

dist/setup.jsView file

Lines 84-124javascript

84 const db = new Database(DB);

85 db.pragma('journal_mode = WAL');

86 db.pragma('busy_timeout = 5000'); // wait out a brief MCP-server write lock instead of failing

87 db.exec('CREATE TABLE IF NOT EXISTS dz_session_events (id INTEGER PRIMARY KEY AUTOINCREMENT, event TEXT NOT NULL, ts TEXT NOT NULL, source TEXT NOT NULL DEFAULT \\'dz-

dist/book-kb.jsView file

Lines 7-47javascript

7 *

8 * The semantic (vector) layer lives in the shared agentdb store via {@link indexPatternsToAgentdb};

9 * this is the lexical layer for `dz recall --books`. Native better-sqlite3; best-effort.

10 *

11 * @packageDocumentation

12 */

dist/upgrade.jsView file

Lines 1-21javascript

1/**

2 * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

3 *

4 * @packageDocumentation

5 */

6import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';

7import { join } from 'node:path';

Source & flagged code

6 flagged · loading source

dist/publish.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/publish.jsView on unpkg

8import { join } from 'node:path'; L9: import { execSync } from 'node:child_process'; L10: /** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

dist/setup.jsView file

104const child = process.platform === 'win32' L105: ? spawn('dz consolidate --project "' + ROOT + '"', { detached: true, stdio: 'ignore', shell: true, cwd: ROOT }) L106: : spawn('dz', ['consolidate', '--project', ROOT], { detached: true, stdio: 'ignore', cwd: ROOT });

High

Shell

Package source references shell execution.

dist/setup.jsView on unpkg · L104

245// local copy away from the version the MCP registration pins (audit gap G7). L246: execSync('npm install agentdb better-sqlite3 --save-exact --no-audit --no-fund --loglevel=error', { L247: cwd: projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/setup.jsView on unpkg · L245

dist/book-kb.jsView file

27try { L28: const req = createRequire(join(projectRoot, 'package.json')); L29: sqliteUrl = pathToFileURL(req.resolve('better-sqlite3')).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/book-kb.jsView on unpkg · L27

dist/upgrade.jsView file

1/** L2: * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

Findings

1 Critical3 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/publish.js

HighChild Processdist/publish.js

HighShelldist/setup.js

HighRuntime Package Installdist/setup.js

MediumDynamic Requiredist/book-kb.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/upgrade.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/publish.jsView file

Lines 1-28javascript

1/**

2 * Automated publish — discovers changed packages, bumps patch versions,

3 * builds, and publishes to npm.

4 *

5 * @packageDocumentation

6 */

7import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';

8import { join } from 'node:path';

9import { execSync } from 'node:child_process';

10/** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

11export function bumpPatch(version) {

12 // Parse the core x.y.z, tolerating a 2-part "x.y" (treated as x.y.0) and a

13 // prerelease/build suffix (e.g. "1.2.3-beta.2"). A prerelease bumps to its

14 // release (x.y.z), which semver-orders ABOVE the prerelease — never below it,

15 // and never silently drops to a lower number (audit #12).

16 const core = (version.split('+')[0] ?? version).split('-');

17 const hasPrerelease = core.length > 1;

18 const nums = (core[0] ?? '').split('.');

19 const major = parseInt(nums[0] ?? '0', 10) || 0;

20 const minor = parseInt(nums[1] ?? '0', 10) || 0;

21 const patch = parseInt(nums[2] ?? '0', 10) || 0;

22 // Releasing a prerelease keeps the same x.y.z (it outranks the prerelease);

23 // a normal release bumps the patch.

24 return hasPrerelease ? `${major}.${minor}.${patch}` : `${major}.${minor}.${patch + 1}`;

25}

26/** Compare two x.y.z(-pre) versions by their core triple: >0 if a>b, <0 if a<b. */

27export function compareVersions(a, b) {

28 const core = (v) => ((v.split('+')[0] ?? v).split('-')[0] ?? '').split('.').map((n) => parseInt(n, 10) || 0);

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/publish.jsView on unpkg

dist/setup.jsView file

Lines 84-124javascript

84 const db = new Database(DB);

85 db.pragma('journal_mode = WAL');

86 db.pragma('busy_timeout = 5000'); // wait out a brief MCP-server write lock instead of failing

87 db.exec('CREATE TABLE IF NOT EXISTS dz_session_events (id INTEGER PRIMARY KEY AUTOINCREMENT, event TEXT NOT NULL, ts TEXT NOT NULL, source TEXT NOT NULL DEFAULT \\'dz-

dist/book-kb.jsView file

Lines 7-47javascript

7 *

8 * The semantic (vector) layer lives in the shared agentdb store via {@link indexPatternsToAgentdb};

9 * this is the lexical layer for `dz recall --books`. Native better-sqlite3; best-effort.

10 *

11 * @packageDocumentation

12 */

dist/upgrade.jsView file

Lines 1-21javascript

1/**

2 * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

3 *

4 * @packageDocumentation

5 */

6import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';

7import { join } from 'node:path';

Lines 225-265javascript

225/**

226 * Install `agentdb` + `better-sqlite3` as LOCAL project deps so the session-hook writer can

227 * `import('agentdb')` and get a native SQLite store (better-sqlite3 ships prebuilt binaries — no

228 * build tools — and gives true cross-process WAL concurrency so the hook and the MCP server share

229 * one live store). Best-effort: returns false (caller degrades to jsonl) if install fails.

230 */

231function installAgentdbLocally(projectRoot) {

232 if (isAgentdbInstalledLocally(projectRoot))

233 return true;

234 try {

235 // Anchor npm to THIS project: without a package.json here, npm's prefix walk-up would

236 // install into (and mutate the lockfile of) the nearest ANCESTOR project (audit code#2).

237 const pkgJsonPath = join(projectRoot, 'package.json');

238 if (!existsSync(pkgJsonPath)) {

239 writeFileSync(pkgJsonPath, JSON.stringify({ name: 'dz-harness-project', private: true, version: '0.0.0' }, null, 2) + '\n');

240 }

241 // NB: use the ESM-imported execSync — `require()` is undefined in this ESM module (the

242 // original agentdb hooks failed silently for exactly this reason). stdio:'ignore' (not

243 // 'pipe') avoids execSync's 1 MB maxBuffer aborting the child on npm's verbose output.

244 // --save-exact: agentdb is alpha; a semver range would let a later `npm update` drift the

245 // local copy away from the version the MCP registration pins (audit gap G7).

246 execSync('npm install agentdb better-sqlite3 --save-exact --no-audit --no-fund --loglevel=error', {

247 cwd: projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/setup.jsView on unpkg · L245

248 stdio: 'ignore',

249 timeout: 300000,

250 });

251 return isAgentdbInstalledLocally(projectRoot);

252 }

253 catch {

254 return false;

255 }

256}

257/** Run full environment setup. */

258/** Marker that brackets the dz-harness section in a shared CLAUDE.md/AGENTS.md. */

259const DRIVER_MARKER_START = '';

260const DRIVER_MARKER_END = '';

261/**

262 * Operating instructions for a coding agent that should *drive* the dz CLI

263 * correctly. Inspired by Visa VVAH `--install-agents`: the toolkit ships its own

264 * "how to operate me" doc so agents use the CLI as intended rather than guessing.

265 */