registry / @kaos-intelligence/book-evolve / 1.3.0

@kaos-intelligence/book-evolve@1.3.0

Developmental editor powered by a 3-model evolutionary council. Transforms raw dictated transcripts into polished book prose in the author's own voice.

Static Scan Results

scanned 20h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 72.9 KB of source, external domains: 127.0.0.1, kaoslibrary.com, ollama.com, openrouter.ai, www.python.org

Source & flagged code

5 flagged

dist/web/server.jsView file

Lines 1-30javascript

1/**

2 * Web-based onboarding UI.

3 *

4 * Starts a simple HTTP server at http://localhost:3010

5 * with a visual onboarding wizard. Scaffolds the project

6 * on form submission, then shuts down.

7 */

8import { createServer, } from 'node:http';

9import { join } from 'node:path';

10import chalk from 'chalk';

11import { exec } from 'node:child_process';

12import { scaffoldProject, detectExistingProject } from '../cli/scaffold.js';

High

Child Process

Package source references child process execution.

dist/web/server.jsView on unpkg · L10

13const PORT = 3010;

14export async function startWebUI(outputDir) {

15 // eslint-disable-next-line prefer-const — referenced inside its own handler

16 const server = createServer(async (req, res) => {

17 if (req.url === '/' || req.url === '/index.html') {

18 res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });

19 res.end(getOnboardingHTML(outputDir));

20 }

21 else if (req.url === '/api/detect' && req.method === 'GET') {

22 // Let the frontend know if a project already exists

23 const existing = detectExistingProject(outputDir);

24 res.writeHead(200, { 'Content-Type': 'application/json' });

25 res.end(JSON.stringify({ exists: existing.exists, path: outputDir }));

26 }

27 else if (req.url === '/api/config' && req.method === 'POST') {

28 let body = '';

29 req.on('data', (chunk) => {

30 body += chunk.toString();

dist/cli/doctor.jsView file

Lines 1-28javascript

1/**

2 * Doctor — verifies a book-evolve project is fully provisioned and every

3 * dependency the evolution pipeline needs is reachable. Run before evolving;

4 * every failure includes the exact fix.

5 */

6import { existsSync, readdirSync, readFileSync } from 'node:fs';

7import { homedir } from 'node:os';

assets/pipeline/pipeline.tar.gzView file

•path = assets/pipeline/pipeline.tar.gz kind = high_entropy_blob sizeBytes = 76600 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/pipeline/pipeline.tar.gzView on unpkg

•path = assets/pipeline/pipeline.tar.gz kind = compressed_blob sizeBytes = 76600 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/pipeline/pipeline.tar.gzView on unpkg

Source & flagged code

5 flagged · loading source

dist/web/server.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code