registry / @hypertask/hypertask_cli / 1.4.0

@hypertask/hypertask_cli@1.4.0

Production CLI tool for HyperTask task management system

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 315 KB of source, external domains: app.hypertask.ai, example.com, mcp.hypertask.ai, mock-cdn.example.com, staging.hypertask.ai

Source & flagged code

2 flagged

dist/hypertask_cli.jsView file

Lines 10-50javascript

10 createCommentService,

11 createContextService,

12 createDraftService,

13 createInboxService,

14 createProjectService,

15 createSearchService,

16 createSectionService,

17 createSkillService,

18 createTaskService,

19 createUserService,

20 createViewService,

21 getApiUrl,

22 setCliVersion

23} from "./chunk-IMPGRNNF.js";

25// cli_anything/hypertask/hypertask_cli.ts

26import { fileURLToPath } from "url";

27import { dirname, join } from "path";

28import { readFileSync as readFileSync3 } from "fs";

29import { program } from "commander";

30import updateNotifier from "update-notifier";

31import { execSync } from "child_process";

32import latestVersion from "latest-version";

High

Child Process

Package source references child process execution.

dist/hypertask_cli.jsView on unpkg · L30

33import semver from "semver";

35// cli_anything/hypertask/utils/format.ts

36import { Chalk } from "chalk";

37import Table from "cli-table3";

38import terminalLink from "terminal-link";

39var ANSI_PATTERN = /[\u001B\u009B][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g;

40var plainChalk = new Chalk({ level: 0 });

41var colorChalk = new Chalk({ level: 1 });

42function isInteractiveOutput() {

43 return process.stdout.isTTY === true;

44}

45function shouldUseAnsi() {

46 return isInteractiveOutput() && process.env.NO_COLOR === void 0;

47}

48function activeChalk() {

49 return shouldUseAnsi() ? colorChalk : plainChalk;

50}

Lines 2914-2954javascript

2914 "Could not compare versions; update manually: npm install -g @hypertask/hypertask_cli"

2915 )

2916 );

2917 process.exit(1);

2918 }

2919 if (semver.eq(cur, reg)) {

2920 console.log(

2921 formatSuccess(`You're using the latest version (${VERSION})`)

2922 );

Source & flagged code

2 flagged · loading source

dist/hypertask_cli.jsView file

30import updateNotifier from "update-notifier"; L31: import { execSync } from "child_process"; L32: import latestVersion from "latest-version";

High

Child Process

Package source references child process execution.

dist/hypertask_cli.jsView on unpkg · L30

2934console.log(formatInfo("Installing update...")); L2935: execSync("npm install -g @hypertask/hypertask_cli@latest --force", { L2936: stdio: "inherit"

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/hypertask_cli.jsView on unpkg · L2934

Findings

3 High3 Medium5 Low

HighChild Processdist/hypertask_cli.js

HighShell

HighRuntime Package Installdist/hypertask_cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/hypertask_cli.jsView file

Lines 10-50javascript

10 createCommentService,

11 createContextService,

12 createDraftService,

13 createInboxService,

14 createProjectService,

15 createSearchService,

16 createSectionService,

17 createSkillService,

18 createTaskService,

19 createUserService,

20 createViewService,

21 getApiUrl,

22 setCliVersion

23} from "./chunk-IMPGRNNF.js";

25// cli_anything/hypertask/hypertask_cli.ts

26import { fileURLToPath } from "url";

27import { dirname, join } from "path";

28import { readFileSync as readFileSync3 } from "fs";

29import { program } from "commander";

30import updateNotifier from "update-notifier";

31import { execSync } from "child_process";

32import latestVersion from "latest-version";

High

Child Process

Package source references child process execution.

dist/hypertask_cli.jsView on unpkg · L30

33import semver from "semver";

35// cli_anything/hypertask/utils/format.ts

36import { Chalk } from "chalk";

37import Table from "cli-table3";

38import terminalLink from "terminal-link";

39var ANSI_PATTERN = /[\u001B\u009B][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g;

40var plainChalk = new Chalk({ level: 0 });

41var colorChalk = new Chalk({ level: 1 });

42function isInteractiveOutput() {

43 return process.stdout.isTTY === true;

44}

45function shouldUseAnsi() {

46 return isInteractiveOutput() && process.env.NO_COLOR === void 0;

47}

48function activeChalk() {

49 return shouldUseAnsi() ? colorChalk : plainChalk;

50}

Lines 2914-2954javascript

2914 "Could not compare versions; update manually: npm install -g @hypertask/hypertask_cli"

2915 )

2916 );

2917 process.exit(1);

2918 }

2919 if (semver.eq(cur, reg)) {

2920 console.log(

2921 formatSuccess(`You're using the latest version (${VERSION})`)

2922 );