registry / @tienne/gestalt / 0.40.0

@tienne/gestalt@0.40.0

TypeScript AI Development Harness - Gestalt psychology-driven requirement clarification

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 161 file(s), 688 KB of source, external domains: 127.0.0.1, cdn.jsdelivr.net, d3js.org, generativelanguage.googleapis.com, nodejs.org, registry.npmjs.org

Source & flagged code

3 flagged

dist/src/cli/commands/update.jsView file

Lines 1-21javascript

1import { execSync } from 'node:child_process';

2import { checkForUpdates } from '../../core/version.js';

High

Child Process

Package source references child process execution.

dist/src/cli/commands/update.jsView on unpkg · L1

3function hasBinary(name) {

4 try {

5 execSync(`which ${name}`, { stdio: 'pipe' });

6 return true;

7 }

8 catch {

9 return false;

10 }

11}

12function isCodexGestaltNpx() {

13 try {

14 const out = execSync('codex mcp get gestalt 2>/dev/null', { encoding: 'utf-8', stdio: 'pipe' });

15 return out.includes('npx') && out.includes('@tienne/gestalt');

16 }

17 catch {

18 return false;

19 }

20}

21export async function updateCommand() {

Lines 39-79javascript

39 console.log('● Claude Code 플러그인 업데이트 중...');

40 try {

41 execSync('claude plugin install gestalt@gestalt', { stdio: 'inherit' });

42 console.log('✅ Claude Code 플러그인 업데이트 완료!');

43 }

44 catch {

dist/src/core/version.jsView file

Lines 1-24javascript

1import { createRequire } from 'node:module';

2import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';

3import { join } from 'node:path';

4import { homedir } from 'node:os';

Source & flagged code

3 flagged · loading source

dist/src/cli/commands/update.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code