17import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
...
L35: import { createRequire } from 'module';
L36: import Xoe from 'http';
L37: import Qoe from 'https';
...
L90: function getTauriDataDir() {
L91: if (process.env.TAURI_DATA_DIR) {
L92: return process.env.TAURI_DATA_DIR;
...
L94: if (process.env.NODE_ENV === "development") {
L95: return process.platform === "win32" ? `${process.env.APPDATA}/opencontext` : process.platform === "darwin" ? `${process.env.HOME}/Library/Application Support/opencontext` : `${proc...
L96: }
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli/opencontext.jsView on unpkg · L17 17import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
...
L35: import { createRequire } from 'module';
L36: import Xoe from 'http';
L37: import Qoe from 'https';
...
L90: function getTauriDataDir() {
L91: if (process.env.TAURI_DATA_DIR) {
L92: return process.env.TAURI_DATA_DIR;
...
L94: if (process.env.NODE_ENV === "development") {
L95: return process.platform === "win32" ? `${process.env.APPDATA}/opencontext` : process.platform === "darwin" ? `${process.env.HOME}/Library/Application Support/opencontext` : `${proc...
L96: }
CriticalRemote Response Code Execution
Source passes code obtained from a remote response into a dynamic execution sink.
dist/cli/opencontext.jsView on unpkg · L17 17Trigger-reachable chain: manifest.bin -> dist/cli/opencontext.js
L17: import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
...
L35: import { createRequire } from 'module';
L36: import Xoe from 'http';
L37: import Qoe from 'https';
...
L90: function getTauriDataDir() {
L91: if (process.env.TAURI_DATA_DIR) {
L92: return process.env.TAURI_DATA_DIR;
...
L94: if (process.env.NODE_ENV === "development") {
L95: return process.platform === "win32" ? `${process.env.APPDATA}/opencontext` : process.platform === "darwin" ? `${process.env.HOME}/Library/Application Support/opencontext` : `${proc...
L96: }
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/cli/opencontext.jsView on unpkg · L17 •matchType = previous_version_dangerous_delta
matchedPackage = @melandlabs/opencontext@0.13.2
matchedIdentity = npm:QG1lbGFuZGxhYnMvb3BlbmNvbnRleHQ:0.13.2
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/opencontext.jsView on unpkg 17import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
HighChild Process
Package source references child process execution.
dist/cli/opencontext.jsView on unpkg · L17 195024var jx = {};
L195025: Dt(jx, { USE_API_CONTEXT_MANAGEMENT: () => Rle, INK_SCREEN_READER: () => Jse, FORCE_VCR: () => Cle, FORCE_PROMPT_CACHING_5M: () => Ale, FORCE_CODE_TERMINAL: () => Tle, FORCE_AUTOUP...
L195026: var Vse = p.triBool();
25685if (typeof callback !== "function") {
L25686: callback = new Function("" + callback);
L25687: }
198774var ST = O(() => x({ source: Vp().describe("Where to fetch the marketplace from"), installLocation: g().optional().describe("Local cache path where marketplace manifest is stored (...
L198775: var vh = O(() => x({ serverName: g().regex(/^[a-zA-Z0-9_-]+$/, "Server name can only contain letters, numbers, hyphens, and underscores").optional().describe("Name of the MCP serve...
L198776: var wh = O(() => x({ serverName: g().min(1, "Server name must be non-empty").refine((e) => e.trim().length > 0, { message: "Server name must not be whitespace-only" }).refine((e) =...
...
L198781: function HG(e) {
L198782: return x({ $schema: g().optional().describe("JSON Schema reference for Claude Code settings"), apiKeyHelper: g().optional().describe("Path to a script that outputs authentication v..
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli/opencontext.jsView on unpkg · L198774 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli/opencontext.js:
import { readFile as readFile$1, stat as stat$1, mkdir, writeFile as writeFile$1, open as open$1, chmod, link, symlink, appendFile, copyFile, readlink, realpath, rename, rm, rmdir,...
import { createInterface } from 'readline';
async function writeFile(path6, data, options) {
await writeFile(path6, data);
// Marks visible continuation messages created after an authorization card is
authorizationContinuation: z$1.boolean().optional(),
async function writeFileAtomic(filePath, content) {
await nodeFsPromises.writeFile(tempPath, content, {
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli/opencontext.jsView on unpkg •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/cli/opencontext.js:
import { readFile as readFile$1, stat as stat$1, mkdir, writeFile as writeFile$1, open as open$1, chmod, link, symlink, appendFile, copyFile, readlink, realpath, rename, rm, rmdir,...
"follow up"
// ../../node_modules/clsx/dist/clsx.mjs
"../../node_modules/clsx/dist/clsx.mjs"() {
// ../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js
"../../node_modules/@tauri-apps/api/external/tslib/tslib.es6.js"() {
"../../node_modules/@tauri-apps/api/core.js"() {
// ../../node_modules/@tauri-apps/api/path.js
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/cli/opencontext.jsView on unpkg 17import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
...
L35: import { createRequire } from 'module';
L36: import Xoe from 'http';
L37: import Qoe from 'https';
...
L90: function getTauriDataDir() {
L91: if (process.env.TAURI_DATA_DIR) {
L92: return process.env.TAURI_DATA_DIR;
...
L94: if (process.env.NODE_ENV === "development") {
L95: return process.platform === "win32" ? `${process.env.APPDATA}/opencontext` : process.platform === "darwin" ? `${process.env.HOME}/Library/Application Support/opencontext` : `${proc...
L96: }
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli/opencontext.jsView on unpkg · L17 17import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
...
L35: import { createRequire } from 'module';
L36: import Xoe from 'http';
L37: import Qoe from 'https';
...
L90: function getTauriDataDir() {
L91: if (process.env.TAURI_DATA_DIR) {
L92: return process.env.TAURI_DATA_DIR;
...
L94: if (process.env.NODE_ENV === "development") {
L95: return process.platform === "win32" ? `${process.env.APPDATA}/opencontext` : process.platform === "darwin" ? `${process.env.HOME}/Library/Application Support/opencontext` : `${proc...
L96: }
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/cli/opencontext.jsView on unpkg · L17 17import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
...
L7988: function writeFileSync2(filePath, content) {
L7989: we.writeFileSync(filePath, content);
L7990: }
...
L12469: // ../../node_modules/langsmith/dist/_openapi_client/client.js
L12470: var __classPrivateFieldSet4, __classPrivateFieldGet4, _Langsmith_instances, _a, _Langsmith_encoder, _Langsmith_baseURLOverridden, Langsmith;
L12471: var init_client = __esm({
...
L107136: availableTools = void 0,
L107137: message = `Model tried to call unavailable tool '${toolName}'. ${availableTools === void 0 ? "No tools are available." : `Available tools: ${availableTools.join(", ")}.`}`
L107138: }) {
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/cli/opencontext.jsView on unpkg · L17 17Trigger-reachable credential exfiltration chain: manifest.bin -> dist/cli/opencontext.js
L17: import 'pg';
L18: import { execFile, execFileSync, spawn, execSync, spawnSync, exec } from 'child_process';
L19: import { stringify, parseDocument } from 'yaml';
...
L35: import { createRequire } from 'module';
L36: import Xoe from 'http';
L37: import Qoe from 'https';
...
L90: function getTauriDataDir() {
L91: if (process.env.TAURI_DATA_DIR) {
L92: return process.env.TAURI_DATA_DIR;
...
L94: if (process.env.NODE_ENV === "development") {
L95: return process.platform === "win32" ? `${process.env.APPDATA}/opencontext` : process.platform === "darwin" ? `${process.env.HOME}/Library/Application Support/opencontext` : `${proc...
L96: }
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/cli/opencontext.jsView on unpkg · L17 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli/opencontext.jsView on unpkg 11190const isOldNode = typeof process2?.versions?.node === "string" && parseInt(process2.versions.node.split(".")) < 20;
L11191: throw new Error("`File` is not defined as a global, which is required for file uploads." + (isOldNode ? " Update to Node 20 LTS or newer, or set `globalThis.File` to `import('node:...
L11192: }
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/cli/opencontext.jsView on unpkg · L11190 •path = dist/cli/opencontext.js
kind = oversized_cli_entrypoint
sizeBytes = 8258499
magicHex = [redacted]
MediumOversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/cli/opencontext.jsView on unpkg