registry  /  @seanyao/roll  /  4.702.4

@seanyao/roll@4.702.4

Roll — Roll out features with AI agents

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 274 KB of source, external domains: api.github.com
Oversized source lightweight scan
dist/roll.mjs11.9 MB file, sampled 256 KB
FilesystemChildProcessEnvironmentVarsCryptoShellHighEntropyStringsUrlStringsapi.github.com

Source & flagged code

3 flagged · loading source
lib/agent_usage/kimi_emit.pyView file
•path = lib/agent_usage/kimi_emit.py kind = build_helper sizeBytes = 4309 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/agent_usage/kimi_emit.pyView on unpkg
dist/roll.mjsView file
•path = dist/roll.mjs kind = oversized_source_file sizeBytes = 12478416 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/roll.mjsView on unpkg
•path = dist/roll.mjs kind = oversized_cli_entrypoint sizeBytes = 12478416 magicHex = [redacted]
Medium
Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/roll.mjsView on unpkg

Findings

1 High5 Medium4 Low
HighOversized Source Filedist/roll.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperlib/agent_usage/kimi_emit.py
MediumOversized Cli Entrypointdist/roll.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings