registry / @ninjamin/astra-os / 0.2.5

@ninjamin/astra-os@0.2.5

⚠ Under review

Astra OS — a portable agent harness that drives one coding agent (Pi SDK or claude, droid, opencode, hermes, codex) through five front-loaded software-factory gates: product intent, architecture with adversarial audit, program design contracts, DAG planni

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 18 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 39 file(s), 377 KB of source, external domains: astra.local, www.w3.org

Source & flagged code

10 flagged

package.jsonView file

Lines 8-48json

8 "url": "https://github.com/justjammin/ASTRA_OS"

9 },

10 "homepage": "https://github.com/justjammin/ASTRA_OS#readme",

11 "bugs": {

12 "url": "https://github.com/justjammin/ASTRA_OS/issues"

13 },

14 "bin": {

15 "astra": "bin/astra.mjs",

16 "astra-mcp": "lib/mcp-server.mjs"

17 },

18 "publishConfig": {

19 "access": "public"

20 },

21 "scripts": {

22 "test": "node --test test/*.test.mjs",

23 "viz": "node visualizer/server.mjs",

24 "mcp": "node lib/mcp-server.mjs",

25 "site:dev": "npx wrangler@4 dev --config site.wrangler.jsonc",

26 "site:deploy": "npx wrangler@4 deploy --config site.wrangler.jsonc",

27 "release:pack": "npm pack",

28 "postinstall": "node bin/astra.mjs install --postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 "prepublishOnly": "npm test"

30 },

31 "files": [

32 "bin/",

33 "lib/",

34 "visualizer/",

35 "skills/",

36 "commands/",

37 "site/",

38 "docs/harnesses/",

39 "agents/",

40 "assets/astra-os.svg",

41 ".claude-plugin/",

42 ".codex-plugin/",

43 ".factory-plugin/",

44 ".codex/",

45 "site.wrangler.jsonc",

46 "plugin.source.json",

47 "README.md",

48 "LICENSE",

bin/astra.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/astra.mjs#virtual:normalized:round1View on unpkg

461throw exit( L462: `clearing a gate is the human"s decision — surface this command instead of running it:\n astra approve ${gateId}`,\n 4,\n );\n }\n const { ok } = await checkGate(run.r... L463: process.exit(err.exitCode ?? 1);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/astra.mjs#virtual:normalized:round1View on unpkg · L461

bin/astra.mjsView file

Lines 31-71javascript

31} from "../lib/ledger.mjs";

32import { REL, runRoot } from "../lib/paths.mjs";

33import { runDesignGate, runExecution } from "../lib/pipeline.mjs";

34import { MAP_DIR, loadMap, hydrate, scan } from "../lib/rolemap.mjs";

35import

visualizer/server.mjsView file

•matchType = normalized_sha256 matchedPackage = @ninjamin/astra-os@0.2.4 matchedPath = visualizer/server.mjs matchedIdentity = npm:QG5pbmphbWluL2FzdHJhLW9z:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

visualizer/server.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @ninjamin/astra-os@0.2.1 matchedIdentity = npm:QG5pbmphbWluL2FzdHJhLW9z:0.2.1 similarity = 0.778 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

visualizer/server.mjsView on unpkg

lib/adapters.mjsView file

•matchType = normalized_sha256 matchedPackage = @ninjamin/astra-os@0.2.4 matchedPath = lib/adapters.mjs matchedIdentity = npm:QG5pbmphbWluL2FzdHJhLW9z:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/adapters.mjsView on unpkg

visualizer/template/markdown.jsView file

•matchType = normalized_sha256 matchedPackage = @ninjamin/astra-os@0.2.4 matchedPath = visualizer/template/markdown.js matchedIdentity = npm:QG5pbmphbWluL2FzdHJhLW9z:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

visualizer/template/markdown.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/astra.mjs install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/astra.mjs install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/astra.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/astra.mjs#virtual:normalized:round1View on unpkg

Findings

1 Critical7 High5 Medium5 Low

CriticalAi Agent Control Hijackbin/astra.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedbin/astra.mjs#virtual:normalized:round1

HighKnown Malware Source Similarityvisualizer/server.mjs

HighKnown Malware Source Similaritylib/adapters.mjs

HighKnown Malware Source Similaritybin/astra.mjs

HighKnown Malware Source Similarityvisualizer/template/markdown.js

HighPrevious Version Dangerous Deltavisualizer/server.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/astra.mjs#virtual:normalized:round1

MediumNetwork

Affected versions and remediation

This report applies to @ninjamin/astra-os@0.2.5.

See all versions of @ninjamin/astra-os for other recorded verdicts.

Review the evidence and your use of @ninjamin/astra-os@0.2.5 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 18:56:45.741Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.