registry  /  @hachej/boring-ui-cli  /  0.1.61

@hachej/boring-ui-cli@0.1.61

Turn an agent into an app

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 662 file(s), 20.3 MB of source, external domains: chevrotain.io, en.wikipedia.org, github.com, jquery.org, langium.org, react.dev, runtime.local, tldrlegal.com, www.w3.org
Oversized source lightweight scan
public/assets/index-D8Jsti3x.js4.29 MB file, sampled 256 KB
NetworkHighEntropyStringsMinifiedUrlStringsreact.dev

Source & flagged code

3 flagged · loading source
public/assets/ruby-Wjq7vjNf.jsView file
1import e from"./html-pp8916En.js";import n from"./haml-D5jkg6IW.js";import t from"./xml-sdJ4AIDG.js";import a from"./sql-BLtJtn59.js";import r from"./graphql-ChdNCCLP.js";import i ...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

public/assets/ruby-Wjq7vjNf.jsView on unpkg · L1
dist/server/localWorkspaces.jsView file
6import { basename, dirname, join, resolve } from "node:path"; L7: const DEFAULT_REGISTRY_PATH = resolve(homedir(), ".boring-ui", "workspaces.yaml"); L8: function [redacted]() { L9: return process.env.BORING_UI_WORKSPACES_PATH ? resolve(process.env.BORING_UI_WORKSPACES_PATH) : DEFAULT_REGISTRY_PATH; L10: } ... L28: try { L29: return JSON.parse(trimmed); L30: } catch {
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/server/localWorkspaces.jsView on unpkg · L6
public/assets/index-D8Jsti3x.jsView file
•path = public/assets/index-D8Jsti3x.js kind = oversized_source_file sizeBytes = 4496221 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

public/assets/index-D8Jsti3x.jsView on unpkg

Findings

1 High4 Medium5 Low
HighOversized Source Filepublic/assets/index-D8Jsti3x.js
MediumDynamic Requirepublic/assets/ruby-Wjq7vjNf.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/server/localWorkspaces.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings