registry / @kynver-app/runtime / 0.2.1

@kynver-app/runtime@0.2.1

⚠ Under review

Kynver AgentOS local execution runtime and CLI

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 19 file(s), 1.15 MB of source, external domains: api.anthropic.com, api.vercel.com, github.com

Source & flagged code

5 flagged

dist/index.jsView file

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L3

3`).slice(-r).join(` L4: `):""}function zm(e){return e?Ru(Jm.resolve(e),"utf8"):""}function ut(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}function jr(e){return new Promise(r=>setTimeou... L5: `).map(r=>r.trim()).filter(Boolean)}function ae(e,r){try{let t=tf("git",r,Se({cwd:e,encoding:"utf8"}));return{status:t.status,stdout:t.stdout||"",stderr:t.stderr||"",error:t.error?... L6: `).filter(Boolean);for(let s of o){let i=dn(s);if(!i||typeof i!="object"||Array.isArray(i))continue;let a=i;if(r.heartbeatCount++,a.ts){let l=String(a.ts),u=Date.parse(l);Number.is... ... L8: ${e.stderr}`.trim(),t=Kw(r);if(!t||!Ao(t)){let o=Io(r||`exit ${e.exitCode}`,180);return{kind:"command_failure",exitCode:e.exitCode,summary:`npm audit failed (invalid or missing JSO... L9: `).filter(Boolea

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L3

Source & flagged code

5 flagged · loading source

dist/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code