registry  /  @happyvertical/ai  /  0.78.1

@happyvertical/ai@0.78.1

Standardized AI interface supporting OpenAI, LiteLLM, Bifrost, Ollama, Anthropic, Gemini, Bedrock, Hugging Face, Claude CLI, and Qwen3-TTS

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 15 file(s), 200 KB of source, external domains: api-inference.huggingface.co, docs.claude.com, llm.happyvertical.com

Source & flagged code

1 flagged · loading source
dist/chunks/bedrock-Cf1xUerN.jsView file
19package = @happyvertical/ai; repositoryIdentity = sdk; dependency = @aws-sdk/client-bedrock-runtime L19: try { L20: import("@aws-sdk/client-bedrock-runtime").then(({ BedrockRuntimeClient }) => { L21: this.client = new BedrockRuntimeClient({
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/chunks/bedrock-Cf1xUerN.jsView on unpkg · L19

Findings

1 High3 Medium4 Low
HighCopied Package Dependency Bridgedist/chunks/bedrock-Cf1xUerN.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings