registry / @tryinget/pi-session-compaction / 0.2.0
@tryinget/pi-session-compaction@0.2.0
Dedicated Pi package for custom session compaction summaries.
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
DynamicRequireFilesystem
HighEntropyStrings
NoLicense
Source & flagged code
2 flaggedextensions/session-compaction/handler.jsView file
520try {
L521: return await import("@earendil-works/pi-ai");
L522: } catch (primaryError) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
extensions/session-compaction/handler.jsView on unpkg · L520package.jsonView file
•dependencies changed=@tryinget/pi-model-selection
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgFindings
1 Critical1 Medium4 Low
CriticalManifest Confusionpackage.json
MediumDynamic Requireextensions/session-compaction/handler.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @tryinget/pi-session-compaction@0.2.0.
See all versions of @tryinget/pi-session-compaction for other recorded verdicts.
- Review the evidence and your use of @tryinget/pi-session-compaction@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.