registry / @tea-agent/loop-agent / 0.7.4

@tea-agent/loop-agent@0.7.4

已弃用：此版本可能包含过时内容，请升级到最新版 npm i @tea-agent/loop-agent@latest

`loop-agent` 是面向 AI coding agent 的仓库级任务运行时和治理工具。它把一次研发任务组织成可生成、可校验、可执行、可恢复、可交接的 Agent DAG，并用 `.harness/`、`docs/` 和 shell verification 记录执行事实、长期治理资料和完成依据。

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

Manifest

NoLicenseWildcardDependency

scanned 268 file(s), 1.38 MB of source

Source & flagged code

3 flagged

bin/loop-agent.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { existsSync } from "node:fs";

3import { dirname, join } from "node:path";

4import { fileURLToPath, pathToFileURL } from "node:url";

6const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));

7const cliEntry = join(packageRoot, "dist", "cli.js");

9if (!existsSync(cliEntry)) {

10 console.error(

11 `loop-agent: cannot find built CLI at ${cliEntry}. Run \`npm run build\` before using the package bin.`,

12 );

13 process.exit(1);

14}

16try {

17 await import(pathToFileURL(cliEntry).href);

18} catch (error) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/loop-agent.jsView on unpkg · L16

19 console.error(error instanceof Error ? error.message : String(error));

20 process.exit(1);

21}

scripts/check-product-line-docs.shView file

•path = scripts/check-product-line-docs.sh kind = build_helper sizeBytes = 695 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-product-line-docs.shView on unpkg

dist/commands/init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tea-agent/loop-agent@0.7.3 matchedIdentity = npm:QHRlYS1hZ2VudC9sb29wLWFnZW50:0.7.3 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/init.jsView on unpkg

Source & flagged code

3 flagged · loading source

bin/loop-agent.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code