registry / @serovaai/ficta / 0.1.2

@serovaai/ficta@0.1.2

Keep your registered secrets out of the LLM — local redaction proxy for coding agents

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 47 file(s), 386 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.openai.com, chatgpt.com

Source & flagged code

1 flagged

bin/ficta.mjsView file

Lines 2-25javascript

2// Published packages run the compiled CLI from dist/.

3// Source checkouts keep using tsx so locally installed shims do not require a build step.

4import { spawn } from "node:child_process";

5import { existsSync } from "node:fs";

6import { dirname, join } from "node:path";

7import { fileURLToPath, pathToFileURL } from "node:url";

9const root = join(dirname(fileURLToPath(import.meta.url)), "..");

10const srcCli = join(root, "src", "cli.ts");

11const distCli = join(root, "dist", "cli.js");

13if (existsSync(srcCli)) {

14 const tsxBin = process.platform === "win32" ? "tsx.cmd" : "tsx";

15 const tsx = join(root, "node_modules", ".bin", tsxBin);

16 const child = spawn(tsx, [srcCli, ...process.argv.slice(2)], { stdio: "inherit" });

17 child.on("exit", (code) => process.exit(code ?? 0));

18 child.on("error", (error) => {

19 process.stderr.write(`ficta: ${error.message}\n`);

20 process.exit(1);

21 });

22} else {

23 await import(pathToFileURL(distCli).href);

24}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ficta.mjsView on unpkg · L22

Source & flagged code

1 flagged · loading source

bin/ficta.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code