registry  /  @jun133/kitty  /  0.0.18

@jun133/kitty@0.0.18

Agent

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 12 file(s), 856 KB of source, external domains: api.deepseek.com, api.openai.com, api.telegram.org, code.ylsagi.com, w.ciykj.cn, www.apache.org
Oversized source lightweight scan
dist/cli.js10.3 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellWebSocketDynamicRequireHighEntropyStringsUrlStringsapi.telegram.orgwww.apache.org

Source & flagged code

4 flagged · loading source
package.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
dist/chunk-C3MFBHV3.mjsView file
11transport: "standard", L12: defaultBaseUrl: "https://api.deepseek.com", L13: requestTimeoutMs: DEFAULT_REQUEST_TIMEOUT_MS, ... L460: const command = typeof payload?.command === "string" ? payload.command : "command"; L461: const exitCode = typeof payload?.exitCode === "number" ? payload.exitCode : "unknown"; L462: return `bash ${truncate(oneLine2(command), 120)} (exit ${exitCode})`; ... L499: try { L500: const parsed = JSON.parse(raw); L501: return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-C3MFBHV3.mjsView on unpkg · L11
dist/cli.jsView file
•path = dist/cli.js kind = oversized_source_file sizeBytes = 10782985 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli.jsView on unpkg
•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 10782985 magicHex = [redacted]
Medium
Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

Findings

2 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighOversized Source Filedist/cli.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumOversized Cli Entrypointdist/cli.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/chunk-C3MFBHV3.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings