registry / @lawsonoates/pageme / 0.1.1

@lawsonoates/pageme@0.1.1

Let local coding agents notify you when they need input or finish work.

Static Scan Results

scanned 16h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVars

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 13.9 KB of source, external domains: discord.com, discordapp.com

Source & flagged code

1 flagged

dist/index.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { NodeHttpClient, NodeRuntime, NodeServices } from "@effect/platform-node";

3import { Console, Context, Effect, FileSystem, Layer, Option, Path, Redacted, Schema, Stream } from "effect";

4import { Argument, Command, Flag, Prompt } from "effect/unstable/cli";

Source & flagged code

1 flagged · loading source

dist/index.mjsView file

6import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process"; L7: //#region package.json L8: var version = "0.1.1"; ... L33: const read = Effect.fn("Config.read")(function* () { L34: const raw = yield* fs.readFileString(path).pipe(Effect.map((text) => JSON.parse(text)), Effect.catchIf(absent, () => Effect.succeed({})), Effect.mapError(fail(`Failed to read ${pat... L35: return yield* decode(raw).pipe(Effect.mapError((cause) => new ConfigError({ message: `${path} is not valid pageme config: ${cause.message}` }))); ... L41: const token = Effect.fn("Config.token")(function* (destination) { L42: const injected = Option.fromNullishOr(process.env[variable(destination)]); L43: if (Option.isSome(injected)) return Option.some(Redacted.make(injected.value)); ... L137: const output

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code