registry / @siddharthakatiyar/contextos / 0.2.5

@siddharthakatiyar/contextos@0.2.5

Intelligent context routing for AI coding assistants via MCP

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 74 file(s), 145 KB of source

Source & flagged code

1 flagged

dist/src/core/chunker/code-chunker.jsView file

Lines 1-21javascript

1import crypto from 'crypto';

2import { estimateTokens } from '../../utils/tokens.js';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/core/chunker/code-chunker.jsView on unpkg · L1

3import { hashContent } from '../../utils/hash.js';

4import { extractKeywords } from './index.js';

5export function chunkCode(doc, options) {

6 const chunks = [];

7 const maxTokens = options.maxChunkTokens || 1500;

8 for (const symbol of doc.symbols) {

9 // Only chunk meaningful symbols, skipping basic variable declarations if we had them

10 if (['import', 'variable'].includes(symbol.kind) && doc.symbols.length > 50) {

11 // In large files, maybe skip individual imports, but for now we keep them

12 }

13 const titleContext = symbol.parent ? `${symbol.parent} > ${symbol.name}` : symbol.name;

14 let tokens = estimateTokens(symbol.body);

15 // If body is huge (e.g. large struct), we'd split it, but for V1 we keep it as one

16 chunks.push(createCodeChunk(symbol, titleContext, doc.filePath, doc.language, options));

17 }

18 // Also create a "File Summary" chunk that lists all symbols for high-level graph

19 const summaryContent = doc.symbols.map(s => `- [${s.kind}] ${s.name}`).join('\n');

20 if (summaryContent.trim().length > 0) {

21 const summaryHashVal = hashContent(summaryContent);

Source & flagged code

1 flagged · loading source

dist/src/core/chunker/code-chunker.jsView file

1import crypto from 'crypto'; L2: import { estimateTokens } from '../../utils/tokens.js';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/core/chunker/code-chunker.jsView on unpkg · L1

Findings

1 Medium5 Low

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/src/core/chunker/code-chunker.js

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/src/core/chunker/code-chunker.jsView file

Lines 1-21javascript

1import crypto from 'crypto';

2import { estimateTokens } from '../../utils/tokens.js';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/core/chunker/code-chunker.jsView on unpkg · L1

3import { hashContent } from '../../utils/hash.js';

4import { extractKeywords } from './index.js';

5export function chunkCode(doc, options) {

6 const chunks = [];

7 const maxTokens = options.maxChunkTokens || 1500;

8 for (const symbol of doc.symbols) {

9 // Only chunk meaningful symbols, skipping basic variable declarations if we had them

10 if (['import', 'variable'].includes(symbol.kind) && doc.symbols.length > 50) {

11 // In large files, maybe skip individual imports, but for now we keep them

12 }

13 const titleContext = symbol.parent ? `${symbol.parent} > ${symbol.name}` : symbol.name;

14 let tokens = estimateTokens(symbol.body);

15 // If body is huge (e.g. large struct), we'd split it, but for V1 we keep it as one

16 chunks.push(createCodeChunk(symbol, titleContext, doc.filePath, doc.language, options));

17 }

18 // Also create a "File Summary" chunk that lists all symbols for high-level graph

19 const summaryContent = doc.symbols.map(s => `- [${s.kind}] ${s.name}`).join('\n');

20 if (summaryContent.trim().length > 0) {

21 const summaryHashVal = hashContent(summaryContent);