@tritard/waterbrother@0.17.3: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@tritard/waterbrother@0.17.3: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

6 flagged · loading source

src/codebase-index.jsView file

2import path from "node:path"; L3: import { execFile } from "node:child_process"; L4: import { promisify } from "node:util"; ... L246: const raw = await fs.readFile(indexPath, "utf8"); L247: existingIndex = JSON.parse(raw); L248: } catch {}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/codebase-index.jsView on unpkg · L2

src/listen-agent.jsView file

3Trigger-reachable persistence chain: scripts.start -> bin/waterbrother.js -> src/cli.js -> src/listen-agent.js L3: import path from "node:path"; L4: import { spawnSync } from "node:child_process"; L5: import { fileURLToPath } from "node:url"; ... L9: export function agentPlistPath() { L10: return path.join(os.homedir(), "Library/LaunchAgents", `${LABEL}.plist`); L11: } ... L13: export async function installListenAgent() { L14: if (process.platform !== "darwin") { L15: throw new Error("Launch agent install is macOS only."); ... L51: await fs.writeFile(dest, plist); L52: spawnSync("launchctl", ["bootout", `gui/${process.getuid()}/${LABEL}`], { stdio: "ignore" }); L53: spawnSync("launchctl", ["unload", dest], { stdio: "ignore" });

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

src/listen-agent.jsView on unpkg · L3

3import path from "node:path"; L4: import { spawnSync } from "node:child_process"; L5: import { fileURLToPath } from "node:url"; ... L9: export function agentPlistPath() { L10: return path.join(os.homedir(), "Library/LaunchAgents", `${LABEL}.plist`); L11: } ... L13: export async function installListenAgent() { L14: if (process.platform !== "darwin") { L15: throw new Error("Launch agent install is macOS only."); ... L51: await fs.writeFile(dest, plist); L52: spawnSync("launchctl", ["bootout", `gui/${process.getuid()}/${LABEL}`], { stdio: "ignore" }); L53: spawnSync("launchctl", ["unload", dest], { stdio: "ignore" });

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/listen-agent.jsView on unpkg · L3

src/cli.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. src/cli.js: import readline from "node:readline"; getSuggestedLocalBaseUrl, shouldRetryDefaultLocalBaseUrl { name: "/onboarding", description: "Print onboarding/API key guide" }, --api-key <key> Provider API key baseUrl: context.runtime.baseUrl, baseUrl: context.runtime.baseUrl, baseUrl: runtime.baseUrl,

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

src/cli.jsView on unpkg

src/dependency-sentinel/deep-scan.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/dependency-sentinel/deep-scan.js#virtual:normalized:round1View on unpkg

package.jsonView file

6"bin": { "waterbrother": "bin/waterbrother.js" }, "files": [ "bin/", "src/", "README.md", "LICENSE", "package.json" ], "scripts": { "start": "node bin/waterbrother.js", "dev": "node --watch bin/waterbrother.js", "check": "node -e \"import('./src/cli.js')\"",

Low

Suspicious Lifecycle Evidence

The manifest exposes a CLI but has no preinstall, install, or postinstall hook.

package.jsonView on unpkg · L6

Source & flagged code

6 flagged

src/codebase-index.jsView file

Lines 1-22javascript

1import fs from "node:fs/promises";

2import path from "node:path";

3import { execFile } from "node:child_process";

4import { promisify } from "node:util";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/codebase-index.jsView on unpkg · L2

5import { createHash } from "node:crypto";

6

7const exec = promisify(execFile);

8

9/**

10 * Codebase indexing — pre-index the project so the model gets

11 * relevant context, not the whole file.

12 *

13 * Cursor uses tree-sitter + embeddings + vector DB.

14 * WB starts simpler: function/class chunking via regex + TF-IDF

15 * relevance scoring. No external dependencies.

16 *

17 * The index lives in .waterbrother/index.json and is incrementally

18 * updated via content hashing (only re-index changed files).

19 */

20

21const INDEX_DIR = ".waterbrother";

22const INDEX_FILE = "codebase-index.json";

src/listen-agent.jsView file

Lines 1-23javascript

1import fs from "node:fs/promises";

2import os from "node:os";

3import path from "node:path";

4import { spawnSync } from "node:child_process";

src/cli.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. src/cli.js: import readline from "node:readline"; getSuggestedLocalBaseUrl, shouldRetryDefaultLocalBaseUrl { name: "/onboarding", description: "Print onboarding/API key guide" }, --api-key <key> Provider API key baseUrl: context.runtime.baseUrl, baseUrl: context.runtime.baseUrl, baseUrl: runtime.baseUrl,

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

src/cli.jsView on unpkg

src/dependency-sentinel/deep-scan.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/dependency-sentinel/deep-scan.js#virtual:normalized:round1View on unpkg

package.jsonView file

Lines 1-26json

1{

2 "name": "@tritard/waterbrother",

3 "version": "0.17.3",

4 "description": "Waterbrother: bring-your-own-model coding CLI with local tools, sessions, operator modes, and approval controls",

5 "type": "module",