registry / @kdtix-open/sdlca-bridge / 0.1.20

@kdtix-open/sdlca-bridge@0.1.20

Local execution bridge CLI for SDLC Automated — npx-ready installer

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious install-time behavior, but the package is a local AI execution bridge with persistent user service setup and remote work-claim execution when explicitly configured. Risk is package-aligned and user/operator-invoked.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs sdlca-bridge install, mcp serve, foreground, or enables hosted work-claim polling.

Impact

Can run local AI provider commands inside configured project roots and report results to the configured control plane when authenticated and enabled.

Mechanism

Explicit local bridge service and scoped MCP/hosted execution of provider CLIs.

Rationale

The dangerous primitives are real but match the package's documented bridge purpose and require explicit user/operator activation; no unconsented npm install-time mutation or hidden exfiltration was found. Warn is appropriate for agent extension lifecycle and local execution capability risk, not publish block.

Evidence

package.jsonbin/sdlca-bridge.jsbridge/index.jsmcp/stdio.jsREADME.mdtemplates/config.json.exampletemplates/SETUP.md~/.sdlca/bridge/config.json~/.sdlca/bridge/.env.credentials~/.sdlca/bridge/logs/bridge.log~/Library/LaunchAgents/com.kdtix.sdlca-bridge*.plist~/.config/systemd/user/sdlca-bridge*.service

Network endpoints4

auth.projectit.ai/.well-known/openid-configurationdev.projectit.ai/tools/repo-orchestrator127.0.0.1:4318127.0.0.1:4319

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

bin/sdlca-bridge.js exposes user-invoked install/uninstall/start commands that register launchd/systemd-user services.
bin/sdlca-bridge.js and bridge/index.js can execute local provider CLIs: claude, codex, copilot, cursor.
bridge/index.js supports hosted work-claim polling and posts lease results/failures to configured hosted control plane.
mcp/stdio.js exposes MCP tools including bridge.execute_local_provider_task gated by token/scopes/read-only checks.

Evidence against

package.json has no preinstall/install/postinstall hook; only prepublishOnly build script.
README.md documents explicit npx install flow, service registration, credentials, and hosted polling opt-in.
templates/config.json.example defaults hostedWorkClaimPolling to false.
Credential and command-output handling includes redaction helpers and local/hosted tokens are configuration inputs, not harvested broadly.
Network destinations are package-aligned OIDC/control-plane or loopback bridge endpoints, not hidden exfiltration endpoints.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 435 KB of source, external domains: auth.projectit.ai, github.com, sdlca.invalid, www.apple.com

Source & flagged code

7 flagged

bin/sdlca-bridge.jsView file

Lines 1-43javascript

1#!/usr/bin/env node

2// SPDX-License-Identifier: BSL-1.1

3var Pd=Object.defineProperty;var T=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(o){throw t=[o],o}};var Ad=(e,r)=>{for(var t in r)Pd(e,t,{get:r[t],enumerable:!0})};import Nm from"path";import{fileURLToPath as Mm}from"url";var h=T(()=>{"use strict"});function se(e){if(e?.discoveryUrl!==void 0&&e?.clientId===void 0)throw new ie("oidc.clientId is required when oidc.discoveryUrl is overridden");let r={...Wt,...Od(e)};try{if(new URL(r.discoveryUrl).protocol!=="https:")throw new ie("oidc.discoveryUrl must use HTTPS")}catch(t){throw t instanceof ie?t:new ie("oidc.discoveryUrl must us ...

4`)}r.push([s,Ud(a.trimEnd())])}return r}function Hd(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:e.indexOf(r,1)===-1}function Ud(e){return e.length>=2&&(e.startsWith('"')&&e.endsWith('"')||e.startsWith("'")&&e.endsWith("'"))?e.slice(1,-1):e}function $d(e){return e==="~"?zt.homedir():e.startsWith("~/")?ae.join(zt.homedir(),e.slice(2)):e}function Vt(e){try{return new URL(e).protocol==="https:"}catch{return!1}}function qt(e){try{return new URL(e).protocol==="http:"}catch{return!1}}var zr,Dd,Xt,W=T(()=>{"use strict";h();Te();zr=4318,Dd=/^[\w-]{1,128}$/u,Xt=4096});import Vd from" ...

6`)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{message:e.message,name:e.name,stack:e.stack??null}:e instanceof URL?e.toString():Array.isArray(e)?e.map(r=>st(r)):e&&typeof e=="object"?Object.fromEntries(Object.entries(e).map(([r,t])=>[r,st(t)])):e}var Ye,nt,ti,Rr=T(()=>{"use strict";h();Xe();Ye={error:0,info:1,debug:2,trace:3},ti=""});import si from"fs";import Ec from"path";function Me(e,r=process.env){return ii({debug:e.debug,logsDir:j(r).logsDir,serviceName:"sdlca-b ...

7`)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=

8`)}r.push([s,pp(a)])}return r}function up(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:!e.endsWith(r)}function ws(e){return je.resolve

9`;if(Buffer.byteLength(s,"utf8")>js){Vo(r,"reviewPatternService: corpus entry exceeds PIPE_BUF limit; truncating fields",{id:e.id,byteLength:Buffer.byteLength(s,"utf8")});let a=e.anti_pattern,d=e.fix_template;for(;Buffer.byteLength(s,"utf8")>js;){let u=a,c=d;if(a.length>0&&(a=a.slice(0,Math.max(0,a.length-Fs))),d.length>0&&(d=d.slice(0,Math.max(0,d.length-Fs))),i={...e,anti_pattern:a,fix_template:d},s=`${JSON.stringify(i)}

10`,a===u&&d===c){Vo(r,"reviewPatternService: corpus entry too large even after full truncation; skipping persistence (best-effort)",{id:e.id,byteLength:Buffer.byteLength(s,"utf8")});return}}}await It.appendFile(t,s,{mode:384}),n||await It.chmod(t,384)}catch(o){Vo(r,"reviewPatternService: failed to persist corpus entry; skipping (best-effort)",o)}}var js,Fs,Np,jb,Ks=T(()=>{"use strict";h();js=4096,Fs=64,Np=qo.resolve(process.cwd(),"data/review-pattern-corpus.jsonl"),jb=qo.resolve(process.cwd(),"data/review-pattern-corpus-pending.jsonl")});import{randomUUID as Xo}from"crypto";import Bp from"path" ...

11`).replace(/\r/g,`

12`),t=[];for(let o of r.matchAll(Mp))t.push({file:o[1],line:Number.parseInt(o[2],10),col:Number.parseInt(o[3],10),severity:o[4],message:o[5],rule_id:o[6]});return t}function jp(e,r,t){let o=new

13`).replace(/\r/g,`

14`),t=[];for(let o of r.split(`

15`)){let n=Wp(o);n&&t.push(n)}return t}function Wp(e){let r=e.indexOf(Js);if(r===-1)return null;let t=e.lastIndexOf("(",r);if(t<=0||e.slice(0,t).includes("): "))return null;let[o,n]=e.slice(t+1,r).split(",");if(!/^\d+$/.test(o)||!/^\d+$/.test(n))return null;let i=e.slice(r+Js.length),s=i.indexOf(":");if(s<=0)return null;let a=i.slice(0,s),d=i.slice(s+1).trimStart();return!/^\d+$/.test(a)||d.length===0?null:{file:e.slice(0,t),line:Number.parseInt(o,10),col:Number.parseInt(n,10),code:`TS${a}`,message:d}}function Vp(e){let r=e.replace(/\r\n/g,`

16`).replace(/\r/g,`

17`),t=[],o=null,n=()=>{o&&(t.push(o),o=null)};for(let i of r.split(`

18`)){let s=Hp.exec(i);if(s){n(),o={file:s[1],test_name:s[3],assertion_category:"unknown_assertion"};continue}if(!o||o.assertion_category!=="unknown_assertion")continue;let a=Up.exec(i);a&&(o.assertion_category=qp(a[1]))}return n(),t}function qp(e){return/\bto equal\b/.test(e)?"expected_to_equal":/\bto match\b/.test(e)?"expected_to_match":/\bto be truthy\b/.test(e)?"expected_truthy":/\bto throw\b/.test(e)?"expected_to_throw":"unknown_assertion"}var Mp,Js,Hp,Up,Vs=T(()=>{"use strict";h();$s();Ks();Mp=/^(.+):(\d+):(\d+)\s{2,}(error|warning)\s{2,}(.+)\s{2,}([@A-Za-z0-9/_-]+)$/gm,Js="): error TS",Hp ...

19${q(a||s)}`,f??1,q(a),q(s)))}),t.timeoutMs&&t.timeoutMs>0&&(c=setTimeout(()=>{u=!0,i.kill("SIGTERM"),l=setTimeout(()=>{i.kill("SIGKILL")},1e3)},t.timeoutMs)),t.input&&i.stdin.write(t.input),i.stdin.end

20// This file is managed automatically.

21${JSON.stringify(u,null,2)}

22`,{mode:384}),await K.chmod(o,384)}async function bg(e){try{let t=(await K.readFile(e,"utf8")).split(`

23`).filter(n=>!n.trimStart().startsWith("//")).join(`

24`).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.isArray(o)?o:{}}catch(r){if(r.code==="ENOENT")return{};throw r}}function yg(e,r,t){return{...t??{},COPILOT_ALLOW_ALL:"true",COPILOT_AUTO_UPDATE:"false",COPILOT_DEBUG_BROWSER:Eg(),COPILOT_HOME:e,GITHUB_MCP_SERVER_TOKEN:ua(t?.GITHUB_MCP_SERVER_TOKEN,t?.GH_TOKEN,t?.GITHUB_TOKEN)??r}}function ua(...e){for(let r of e){let t=r?.trim();if(t)return t}}function Eg(){return JSON.stringify([process.execPath,"-e","process.exit(0)"])}function Sg(e){let r=e?.trim();return r?/^https?:\/\//i.test(r)?r:`https://${r}`:"http ...

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/sdlca-bridge.jsView on unpkg · L2

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/sdlca-bridge.jsView on unpkg · L2

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/sdlca-bridge.jsView on unpkg · L2

25# No-op GUI launcher for headless worker environments (#983)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/sdlca-bridge.jsView on unpkg · L23

26exit 0

27`,tn=null});var Nt,hr,Bt,Mt,Kr,on,nn=T(()=>{"use strict";h();Nt="SDLCA_LOCAL_EXECUTION_BRIDGE_TOKEN must be configured.",hr="The supplied bridge token is invalid.",Bt="Dispatch blocked: credential preflight failed. Re-authenticate the affected service and restart the bridge.",Mt="Forensic execution is disabled on this bridge. Set SDLCA_BRIDGE_FORENSIC_ENABLED=true once the Token Reporting API contract is approved in issue #1244.",Kr="sdlca.bridge.forensic.v0",on={artifactKinds:["local_model_forensic_review"],artifactSchemaVersion:Kr,emitsRawAdminSnapshots:!1,executionKind:"forensic",requiresAd ...

28`),this.diagnostics?.logger?.debug("bridge.acp_rpc_request_sent",{...this.diagnostics.context,method:r,pendingCount:this.pending.size,requestId:o,timeoutMs:d})}catch(c){this.pending.delete(o),clearTimeout(u),s(c instanceof Error?c:new Error(String(c)))}})}text(){return this.sawTextChunk?this.textChunks.join(""):void 0}snapshot(){return{closed

29`)}rejectAll(r){for(let t of this.pending.values())t.reject(r);this.pending.clear()}formatStderrTail(){let r=q(this.stderrTail).trim();return r?` stderr=${r}`:""}formatRuntimeSnapshot(){let r=[...this.pending.values()].map(o=>o.method).join(","),t=[...this.notificationMethods].join(",");return` stdoutLines=${this.stdoutLineCount} malformedLines=${this.malformedLineCount} textChunks=${this.textChunks.length} pendingMethods=${r||"none"} notificationMethods=${t||"none"}`}elapsedMs(){return Date.now()-this.startedAtMs}kill(r){return!this.options.cleanupProcessGroup||this.child.pid===void 0?this.ch ...

30`),br=["[SYN/SYN-ACK/ACK bridge verification handshake]","Your role: reviewer",`Your provider ID: ${Y.providerId}`,`Peer worker provider ID: ${N.providerId}`,"","Output ONLY the following JSON (no prose, no markdown code fences):",`{"acknowledged":true,"role":"reviewer","providerId":"${Y.providerId}"}`].join(`

31`),Ce="passed",kn,Ne;try{let M=await e.executeStructuredAgent({executionKind:"handshake",environment:Vr(N.kind,Mr,o,r),prompt:Jt,provider:{executable:vn(N.kind,e.resolveExecutable),kind:N.kind},schema:qr,workingDirectory:pe});M.acknowledged!==!0?(Ce="failed",Ne=`Worker handshake for ${N.providerId} failed: acknowledged=${String(M.acknowledged)}`

32`)),t})(),i=Is(n,e,r),s=xs(n,e,r,{excludeLegacyCopilotCliSource:i!==void 0}),a=r==="worker"&&t.workerGitAuthorName&&t.workerGitAuthorEmail?{name:t.workerGitAuthorName,email:t.workerGitAuthorEmail}:void 0,d=s?Ps(s,{includeCredentialBreadcrumbs:t.providerGitHubCredentialBreadcrumbs===!0,includeLegacyUatAlias:t.providerGitHubLegacyUatAlias===!0,copilotAuthCredential:i,workerGitIdentity:a}):{},u={...Lt,PATH:`${wa()}:${

33`),process.exit(1)}console.log("Starting bridge in foreground mode (Ctrl-C to stop)...");try{await Sn(void 0,r)}catch(t){let o=t instanceof Error?t.message:String(t);process.stderr.write(`foreground: failed to start bridge server: ${o}

34`),process.exit(1)}}var kd=T(()=>{"use strict";h();W();Sd()});h();import Cd from"fs";import Gt from"path";import{fileURLToPath as Td}from"url";h();W();import ze from"fs";import tc from"http";import ke from"path";import oc from"readline/promises";import{fileURLToPath as nc}from"url";h();W();import{randomBytes as jd}from"crypto";import me from"fs";import Xr from"path";import{fileURLToPath as Fd}from"url";var Sr="SDLCA_LOCAL_EXECUTION_BRIDGE_TOKEN",Gd=`{

35 "hostedWorkClaimPolling": false,

36 "oidcTransition": true,

37 "port": 4318

38}

39`;function On(e=process.env){let r=j(e);return me.mkdirSync(r.home,{recursive:!0}),Er(r.configFile,Gd),Er(r.configExampleFile,Yt("config.json.example")),Er(r.credentialsExampleFile,Yt(".env.credentials.example"),384),Er(r.setupGuideFile,Yt("SETUP.md")),Er(r.credentialsFile,Kd(e),384),Jd(r.credentialsFile,e),me.chmodSync(r.credentialsFile,384),me.mkdirSync(r.logsDir,{recursive:!0}),me.mkdirSync(r.cacheDir,{recursive:!0}),me.mkdirSync(r.tmpDir,{recursive:!0}),r}function Er(e,r,t){try{me.writeFileSync(e,r,{encoding:"utf8",flag:"wx",...t===void 0?{}:{mode:t}})}catch(o){if(!Wd(o)||o.code!=="EEXIST" ...

40`)}function Jd(e,r){let t=me.readFileSync(e,"utf8");if(new RegExp(`^\\s*${Sr}\\s*=\\s*\\S+`,"mu").test(t))return;let o="";t.length>0&&!

41`)&&(o+=`

42`),t.trim().length>0&&(o+=`

43`);let n=`${o}# Required by local bridge loopback auth.

Long lines were clipped for display.

Source & flagged code

7 flagged · loading source

bin/sdlca-bridge.jsView file

2// SPDX-License-Identifier: BSL-1.1 L3: var Pd=Object.defineProperty;var T=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(o){throw t=[o],o}};var Ad=(e,r)=>{for(var t in r)Pd(e,t,{get:r[t],enumerable:!0})}... L4: `)}r.push([s,Ud(a.trimEnd())])}return r}function Hd(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:e.indexOf(r,1)===-1}function Ud(e){return e.length>=2&&(e.starts... L5: `;u===Ye.error?process.stderr.write(l):process.stdout.write(l),u<=Ye.info&&eo(t,l),e.debug>=1&&u<=Ye.debug&&eo(o,l),(e.verbose>=Ye.trace||e.debug>=Ye.trace)&&eo(n,l)})}function eo(... L6: `)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{mess... L7: `)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=0;t<e.length;t+=1){let o=e[... ... L23: `).filter(n=>!n.trimStart().startsWith("//")).join(` L24: `).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.isArray(o)?o:{}}catch(r){if(r.code==="ENOENT")return{};throw r}}

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/sdlca-bridge.jsView on unpkg · L2

2Trigger-reachable chain: manifest.bin -> bin/sdlca-bridge.js L2: // SPDX-License-Identifier: BSL-1.1 L3: var Pd=Object.defineProperty;var T=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(o){throw t=[o],o}};var Ad=(e,r)=>{for(var t in r)Pd(e,t,{get:r[t],enumerable:!0})}... L4: `)}r.push([s,Ud(a.trimEnd())])}return r}function Hd(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:e.indexOf(r,1)===-1}function Ud(e){return e.length>=2&&(e.starts... L5: `;u===Ye.error?process.stderr.write(l):process.stdout.write(l),u<=Ye.info&&eo(t,l),e.debug>=1&&u<=Ye.debug&&eo(o,l),(e.verbose>=Ye.trace||e.debug>=Ye.trace)&&eo(n,l)})}function eo(... L6: `)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{mess... L7: `)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=0;t<e.length;t+=1){let o=e[... ... L23: `).filter(n=>!n.trimStart().startsWith("//")).join(` L24: `).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.is…

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/sdlca-bridge.jsView on unpkg · L2

5`;u===Ye.error?process.stderr.write(l):process.stdout.write(l),u<=Ye.info&&eo(t,l),e.debug>=1&&u<=Ye.debug&&eo(o,l),(e.verbose>=Ye.trace||e.debug>=Ye.trace)&&eo(n,l)})}function eo(... L6: `)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{mess... L7: `)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=0;t<e.length;t+=1){let o=e[...

High

Child Process

Package source references child process execution.

bin/sdlca-bridge.jsView on unpkg · L5

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/sdlca-bridge.jsView on unpkg · L2

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/sdlca-bridge.jsView on unpkg · L2

23`).filter(n=>!n.trimStart().startsWith("//")).join(` L24: `).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.isArray(o)?o:{}}catch(r){if(r.code==="ENOENT")return{};throw r}}function yg(e,r,t){return{.... L25: # No-op GUI launcher for headless worker environments (#983)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/sdlca-bridge.jsView on unpkg · L23

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/sdlca-bridge.jsView on unpkg · L2

Findings

2 Critical3 High5 Medium6 Low

CriticalCredential Exfiltrationbin/sdlca-bridge.js

CriticalTrigger Reachable Dangerous Capabilitybin/sdlca-bridge.js

HighChild Processbin/sdlca-bridge.js

HighSame File Env Network Executionbin/sdlca-bridge.js

HighCommand Output Exfiltrationbin/sdlca-bridge.js

MediumDynamic Requirebin/sdlca-bridge.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebin/sdlca-bridge.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

bin/sdlca-bridge.jsView file

Lines 1-43javascript

1#!/usr/bin/env node

2// SPDX-License-Identifier: BSL-1.1

7`)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=

8`)}r.push([s,pp(a)])}return r}function up(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:!e.endsWith(r)}function ws(e){return je.resolve

11`).replace(/\r/g,`

12`),t=[];for(let o of r.matchAll(Mp))t.push({file:o[1],line:Number.parseInt(o[2],10),col:Number.parseInt(o[3],10),severity:o[4],message:o[5],rule_id:o[6]});return t}function jp(e,r,t){let o=new

13`).replace(/\r/g,`

14`),t=[];for(let o of r.split(`

16`).replace(/\r/g,`

17`),t=[],o=null,n=()=>{o&&(t.push(o),o=null)};for(let i of r.split(`

20// This file is managed automatically.

21${JSON.stringify(u,null,2)}

22`,{mode:384}),await K.chmod(o,384)}async function bg(e){try{let t=(await K.readFile(e,"utf8")).split(`

23`).filter(n=>!n.trimStart().startsWith("//")).join(`

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/sdlca-bridge.jsView on unpkg · L2

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/sdlca-bridge.jsView on unpkg · L2

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/sdlca-bridge.jsView on unpkg · L2

25# No-op GUI launcher for headless worker environments (#983)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/sdlca-bridge.jsView on unpkg · L23

26exit 0

35 "hostedWorkClaimPolling": false,

36 "oidcTransition": true,

37 "port": 4318

38}

40`)}function Jd(e,r){let t=me.readFileSync(e,"utf8");if(new RegExp(`^\\s*${Sr}\\s*=\\s*\\S+`,"mu").test(t))return;let o="";t.length>0&&!

41`)&&(o+=`

42`),t.trim().length>0&&(o+=`

43`);let n=`${o}# Required by local bridge loopback auth.

Long lines were clipped for display.