registry / @iam-brain/opencode-codex-auth / 1.10.0

@iam-brain/opencode-codex-auth@1.10.0

Native Codex auth with multi-account rotation for OpenCode

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 92 file(s), 706 KB of source, external domains: api.github.com, api.openai.com, auth.openai.com, chat.openai.com, chatgpt.com, github.com, platform.api.openai.org, platform.openai.com, raw.githubusercontent.com, schemas.iam-brain.dev, www.w3.org

Source & flagged code

1 flagged

dist/lib/cache-lock.jsView file

Lines 102-142javascript

102 catch (error) {

103 if (!isFsErrorCode(error, "ENOENT")) {

104 throw error;

105 }

106 }

107 };

108 }

109 catch (error) {

110 if (!isFsErrorCode(error, "EEXIST")) {

111 throw error;

112 }

113 if (attempt >= retry.retries) {

114 throw error;

115 }

116 const timeout = Math.min(retry.maxTimeout, retry.minTimeout * 2 ** attempt);

117 await sleep(timeout);

118 }

119 }

120}

121async function resolveImportedLockFunction(specifier) {

122 try {

123 return resolveLockFunction(await import(specifier));

124 }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lib/cache-lock.jsView on unpkg · L122

125 catch {

126 return undefined;

127 }

128}

129async function getLockFunction() {

130 if (cachedLockFunction)

131 return cachedLockFunction;

132 cachedLockFunction = (await resolveImportedLockFunction("proper-lockfile")) ?? lockWithDirectoryFallback;

133 return cachedLockFunction;

134}

135const LOCK_RETRIES = {

136 retries: 20,

137 minTimeout: 10,

138 maxTimeout: 100

139};

140const FILE_LOCK_SUFFIX = ".lock";

141function resolveLockOptions(options = {}) {

142 const staleMs = typeof options.staleMs === "number" && Number.isFinite(options.staleMs) ? options.staleMs : undefined;

Source & flagged code

1 flagged · loading source

dist/lib/cache-lock.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code