registry  /  @engrym/cli  /  1.4.0

@engrym/cli@1.4.0

Engrym CLI — terminal-native Commander.js wrapper over @engrym/sdk-ts plus the `mcp init` pass-through. See https://github.com/engrym for documentation.

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 120 file(s), 923 KB of source, external domains: api.engrym.com, raw.githubusercontent.com, registry.npmjs.org
Oversized source lightweight scan
dist/cli.mjs4.14 MB file, sampled 256 KB
ChildProcessEvalUrlStringsraw.githubusercontent.com

Source & flagged code

2 flagged · loading source
dist/cli.mjsView file
•path = dist/cli.mjs kind = oversized_source_file sizeBytes = 4342670 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli.mjsView on unpkg
•path = dist/cli.mjs kind = oversized_cli_entrypoint sizeBytes = 4342670 magicHex = [redacted]
Medium
Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.mjsView on unpkg

Findings

1 High5 Medium5 Low
HighOversized Source Filedist/cli.mjs
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Cli Entrypointdist/cli.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings