registry / @flotic/minitok / 1.4.15

@flotic/minitok@1.4.15

⚠ Under review

Verified repository-aware coding workflow CLI for AI agents

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 154 file(s), 1.30 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.minitok.dev, api.openai.com, console.anthropic.com, generativelanguage.googleapis.com, github.com, minitok.dev, oauth2.googleapis.com, registry.npmjs.org, stream.camelai.com, www.googleapis.com, www.npmjs.com

Source & flagged code

5 flagged

README.mdView file

•Run `npm run readiness:all` for all three deterministic, local-only customer-facing checks. The authoritative generated VSIX is `extension/artifacts/minitok-extension-<extension-version>.vsix`; stale or unrelated VSIX candidates remain diagnostic only and are never deleted. `npm run readiness:checks` remains an alias. Use `node scripts/readiness-checks.mjs --target extension|cli|mcp --json` to run one surface. Stage 3 checks include versioned VSIX presence and manifest consistency, npm dry-run runtime files, bin and Node engine metadata, CLI help and non-TTY behavior, the packaged MCP stdio entrypoint and token-file session binding, plus localhost HTTP authentication, per-session isolation, and authenticated non-secret `/metrics` monitoring. `PASS` means local evidence was found, `BLOCKED`

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

src/cli/commands/auth.jsView file

Lines 88-121javascript

88async function customerLogout(server) {

89 const session = loadCustomerSession();

90 let remoteRevoked = false;

91 if (session?.refresh_token) {

92 try {

93 const result = await postJson(resolveServerUrl({ cliServer: server }) + "/v1/auth/logout", { refresh_token: session.refresh_token }, 10000);

94 remoteRevoked = result.status === 204 || result.ok === true;

95 } catch {}

96 }

97 removeCustomerToken();

98 // Leave an explicit local tombstone so an Extension or CLI process cannot

99 // resurrect the previous SecretStorage/shared session after local logout.

100 revokeCustomerSession();

101 if (remoteRevoked) console.log("Remote customer session revoked; local credentials removed.");

102 else console.log("Remote logout unavailable; local credentials removed. Sign in again to revoke the server session.");

103 return remoteRevoked;

104}

105

106function addCustomerLogin(command, description) {

107 const login = command.command("customer-login").description(description).argument("[email]", "Customer email").option("--email-env <name>", "Read customer email from an environment variable").option("--password-env <name>", "Read customer password from an environment variable").option(

108 login.action(async (email, options) => { const resolvedEmail = email || (options.emailEnv && process.env[options.emailEnv]); if (!options.passwordEnv && !process.stdin.isTTY) { console.error("Customer password is required via --password-env in non-interactive mode."); process.exit

109 command.command("customer-logout").description("Revoke the server session and remove local customer credentials").option("--server <url>", "minitok server URL").action(async options => { await customerLogout(options.server); });

110}

111

112function register(program) {

113 const authCmd = program.command("auth").description("Manage provider and customer authentication");

114 authCmd.command("login").description("Log in to an LLM provider (OAuth or API key)").argument("<provider>", "Provider name (anthropic, openai, google; aliases claude, gpt, gemini accepted)").action(async provider => { process.exit(await cmdAuthLogin(provider)); });

115 addCustomerLogin(authCmd, "Log in to the minitok customer account for billing commands");

116 authCmd.command("status").description("Show stored credentials and their validity").action(async () => { process.exit(await cmdAuthStatus()); });

117 authCmd.command("logout").description("Remove stored credentials for a provider").argument("<provider>", "Provider name").action(async provider => { process.exit(await cmdAuthLogout(provider)); });

118}

119

120module.exports = { cmdAuthLogin, cmdAuthCustomerLogin, cmdAuthStatus, cmdAuthLogout, register };

121

src/llm/provider.jsView file

Lines 1-25javascript

1"use strict";

3const FETCH_TIMEOUT_MS = 300000; // Allow slow reasoning providers up to five minutes

4const MAX_RESPONSE_BYTES = 2 * 1024 *

src/workspace/isolation.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/workspace/isolation.js#virtual:normalized:round1View on unpkg

src/auth/oauth.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @flotic/minitok@1.4.0 matchedIdentity = npm:QGZsb3RpYy9taW5pdG9r:1.4.0 similarity = 0.505 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/auth/oauth.jsView on unpkg

Source & flagged code

5 flagged · loading source

@flotic/minitok@1.4.15

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code