registry / @holoscript/holorepo / 0.6.1

@holoscript/holorepo@0.6.1

Sovereign GitHub + DB + HoloScript knowledge store with living repository portraits for agents and humans.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. Network, filesystem, database, and provider-copy behavior is exposed through explicit user-invoked CLI/API operations and configured destinations.

Static reason

One or more suspicious static signals were detected.

Trigger

Explicit CLI/API use such as `absorb sync --invoke`, database commands, delivery import with `--write`, or mirror readback.

Impact

Can perform the requested adapter, database, filesystem-copy, or provider-copy operation; no automatic install/import-time behavior or hidden persistence was found.

Mechanism

User-configured operational transports and receipt generation.

Rationale

Source inspection found a feature-rich, user-operated repository/database delivery CLI, not an unconsented execution or exfiltration chain. The scanner signals correspond to optional imports, configured environment references, and explicit transport commands.

Evidence

package.jsonbin/holorepo.mjssrc/embedder.mjssrc/absorb.mjssrc/adapter.mjssrc/db.mjssrc/delivery.mjssrc/graph.mjssrc/soul.mjssrc/participation.mjssrc/index.mjs

Network endpoints4

127.0.0.1:7411/mcpabsorb.holoscript.net/mcpregistry.npmjs.orgpypi.org

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for block

`src/absorb.mjs` can POST explicitly requested adapter calls and sends `ABSORB_API_KEY` only for its remote mode.
`src/delivery.mjs` can run configured `aws`, `rclone`, `mc`, or `scp` copy commands during an explicit delivery import.
`src/adapter.mjs` supports user-configured PostgreSQL, Docker, and SSH database transports.

Evidence against

`package.json` contains no npm lifecycle hooks; install does not execute package code.
`bin/holorepo.mjs` gates adapter network invocation behind `absorb sync --invoke` and writes behind `--write`.
`src/embedder.mjs` dynamically imports only a caller-selected optional encoder; no eval, VM, or arbitrary shell loading is present.
`src/delivery.mjs` uses fixed command templates with `shell: false`; source shows no credential harvesting or covert exfiltration.
No source writes `.claude`, `.cursor`, Copilot, Codex, npm, SSH, or other AI-agent control-surface configuration.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 18 file(s), 409 KB of source, external domains: 127.0.0.1, absorb.holoscript.net, github.com, pypi.org, registry.npmjs.org

Source & flagged code

6 flagged

src/absorb.mjsView file

Lines 44-84javascript

44function absorbConfig(config) {

45 return {

46 mode: 'optional-adapter',

47 role: 'graphrag-enrichment',

48 package: '@holoscript/absorb-service',

49 localMcpUrl: DEFAULT_LOCAL_MCP_URL,

50 remoteUrlEnv: 'ABSORB_SERVICE_URL',

51 apiKeyEnv: 'ABSORB_API_KEY',

52 defaultProvider: 'local-holograph-holoembed',

53 custodyBoundary: 'HoloRepo owns source, DB, KS, repoGraph, and receipts; Absorb-Service enriches them with chunks, embeddings, GraphRAG, provenance answers, diffs, and HoloScript transform suggestions.',

54 ...(config.agentDependencies?.absorbService || {}),

55 };

56}

58function redactUrl(value) {

59 const raw = String(value || '');

60 if (!raw) return '';

61 try {

62 const url = new URL(raw);

63 if (url.username) url.username = 'redacted';

64 if (url.password) url.password = 'redacted';

Medium

Secret Pattern

Package contains a possible secret pattern.

src/absorb.mjsView on unpkg · L64

65 return url.toString();

66 } catch {

67 return raw.replace(/\/\/([^:@/\s]+):([^@/\s]+)@/u, '//redacted:redacted@');

68 }

69}

71function jsonFileDigest(file) {

72 return `sha256:${crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex')}`;

73}

75function readJsonIfPath(value, cwd = process.cwd()) {

76 if (!value) return { value: null, path: null, digest: null };

77 const resolved = path.resolve(cwd, value);

78 const raw = fs.readFileSync(resolved);

79 const text = raw.toString('utf8').replace(/^\uFEFF/u, '');

80 return {

81 value: JSON.parse(text),

82 path: resolved,

83 digest: `sha256:${crypto.createHash('sha256').update(raw).digest('hex')}`,

84 };

src/embedder.mjsView file

Lines 1-37javascript

1// Optional sovereign encoder resolution for semantic KS recall.

2//

3// The package stays dependency-free (F.145): @holoscript/holoembed is an OPTIONAL

4// peer, not a hard dependency. When it is installed, resolveHoloEmbed() returns a

5// ready (text) => number[] encoder in the HoloEmbed-768 sovereign space — the same

6// space the KS embeddings live in — using the deterministic CPU path (no GPU, no

7// network, no foreign model). When it is absent, callers get a clear install hint

8// instead of a crash, so a guest without the encoder degrades to keyword search.

9//

10// The vector space IS the sovereignty boundary (W.763): a query must be encoded by

src/ci.mjsView file

Lines 18-58javascript

18 Object.entries(value)

19 .sort(([left], [right]) => left.localeCompare(right))

20 .map(([key, child]) => [key, stableValue(child)]),

21 );

22}

24function

src/git.mjsView file

Lines 17-57javascript

17 Object.entries(value)

18 .sort(([left], [right]) => left.localeCompare(right))

19 .map(([key, child]) => [key, stableValue(child)]),

20 );

21}

23function

src/config.mjsView file

Lines 193-274javascript

193 if (config.$schema && !config.schema) config.schema = config.$schema;

194 const profile = env.HOLOREPO_CONFIG_PROFILE || config.activeProfile || config.profile;

195 if (profile && config.profiles?.[profile]) {

196 config = deepMerge(config, config.profiles[profile]);

Source & flagged code

6 flagged · loading source

src/absorb.mjsView file

64patternName = generic_password severity = medium line = 64 matchedText = if (url....ed';

Medium

Secret Pattern

Package contains a possible secret pattern.

src/absorb.mjsView on unpkg · L64

src/embedder.mjsView file

17try { L18: mod = await import(encoderModule); L19: } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/embedder.mjsView on unpkg · L17

src/ci.mjsView file

38patternName = generic_password severity = medium line = 38 matchedText = if (url....ed';

Medium

Secret Pattern

Hardcoded password in src/ci.mjs

src/ci.mjsView on unpkg · L38

src/git.mjsView file

37patternName = generic_password severity = medium line = 37 matchedText = if (url....ed';

Medium

Secret Pattern

Hardcoded password in src/git.mjs

src/git.mjsView on unpkg · L37

src/config.mjsView file

213patternName = generic_password severity = medium line = 213 matchedText = if (url....ed';

Medium

Secret Pattern

Hardcoded password in src/config.mjs

src/config.mjsView on unpkg · L213

254patternName = generic_password severity = medium line = 254 matchedText = redacted...d>';

Medium

Secret Pattern

Hardcoded password in src/config.mjs

src/config.mjsView on unpkg · L254

Findings

7 Medium4 Low

MediumSecret Patternsrc/absorb.mjs

MediumDynamic Requiresrc/embedder.mjs

MediumEnvironment Vars

MediumSecret Patternsrc/ci.mjs

MediumSecret Patternsrc/git.mjs

MediumSecret Patternsrc/config.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

src/absorb.mjsView file

Lines 44-84javascript

44function absorbConfig(config) {

45 return {

46 mode: 'optional-adapter',

47 role: 'graphrag-enrichment',

48 package: '@holoscript/absorb-service',

49 localMcpUrl: DEFAULT_LOCAL_MCP_URL,

50 remoteUrlEnv: 'ABSORB_SERVICE_URL',

51 apiKeyEnv: 'ABSORB_API_KEY',

52 defaultProvider: 'local-holograph-holoembed',

54 ...(config.agentDependencies?.absorbService || {}),

55 };

56}

58function redactUrl(value) {

59 const raw = String(value || '');

60 if (!raw) return '';

61 try {

62 const url = new URL(raw);

63 if (url.username) url.username = 'redacted';

64 if (url.password) url.password = 'redacted';

Medium

Secret Pattern

Package contains a possible secret pattern.

src/absorb.mjsView on unpkg · L64

65 return url.toString();

66 } catch {

67 return raw.replace(/\/\/([^:@/\s]+):([^@/\s]+)@/u, '//redacted:redacted@');

68 }

69}

71function jsonFileDigest(file) {

72 return `sha256:${crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex')}`;

73}

75function readJsonIfPath(value, cwd = process.cwd()) {

76 if (!value) return { value: null, path: null, digest: null };

77 const resolved = path.resolve(cwd, value);

78 const raw = fs.readFileSync(resolved);

79 const text = raw.toString('utf8').replace(/^\uFEFF/u, '');

80 return {

81 value: JSON.parse(text),

82 path: resolved,

83 digest: `sha256:${crypto.createHash('sha256').update(raw).digest('hex')}`,

84 };

src/embedder.mjsView file

Lines 1-37javascript

1// Optional sovereign encoder resolution for semantic KS recall.

2//

3// The package stays dependency-free (F.145): @holoscript/holoembed is an OPTIONAL

4// peer, not a hard dependency. When it is installed, resolveHoloEmbed() returns a

5// ready (text) => number[] encoder in the HoloEmbed-768 sovereign space — the same

6// space the KS embeddings live in — using the deterministic CPU path (no GPU, no

7// network, no foreign model). When it is absent, callers get a clear install hint

8// instead of a crash, so a guest without the encoder degrades to keyword search.

9//

10// The vector space IS the sovereignty boundary (W.763): a query must be encoded by

src/ci.mjsView file

Lines 18-58javascript

18 Object.entries(value)

19 .sort(([left], [right]) => left.localeCompare(right))

20 .map(([key, child]) => [key, stableValue(child)]),

21 );

22}

24function

src/git.mjsView file

Lines 17-57javascript

17 Object.entries(value)

18 .sort(([left], [right]) => left.localeCompare(right))

19 .map(([key, child]) => [key, stableValue(child)]),

20 );

21}

23function

src/config.mjsView file

Lines 193-274javascript

193 if (config.$schema && !config.schema) config.schema = config.$schema;

194 const profile = env.HOLOREPO_CONFIG_PROFILE || config.activeProfile || config.profile;

195 if (profile && config.profiles?.[profile]) {

196 config = deepMerge(config, config.profiles[profile]);