registry / @unbrained/pm-cli / 2026.7.9

@unbrained/pm-cli@2026.7.9

Git-native project management CLI for humans and agents.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 455 file(s), 10.6 MB of source, external domains: 127.0.0.1, github.com, json-schema.org, pm-cli.unbrained.dev, schema.unbrained.dev, www.npmjs.com

Source & flagged code

7 flagged

dist/core/search/background-refresh.jsView file

Lines 1-27javascript

1/**

2 * @module core/search/background-refresh

3 *

4 * Powers search, embeddings, and semantic retrieval behavior for Background Refresh.

5 */

7!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f10096ab-4dea-55ca-a631-6cb087bf9c4a")}catch(e){}}();

8import { spawn } from "node:child_process";

9import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

10import path from "node:path";

11import { pathExists, readFileIfExists, writeFileAtomic } from "../fs/fs-utils.js";

12import { acquireLock } from "../lock/lock.js";

13import { resolvePmPackageRootFromModule } from "../packages/root.js";

14import { readSettings } from "../store/settings.js";

15import { toErrorMessage } from "../shared/primitives.js";

16import { resolveSettingsWithSemanticRuntimeDefaults } from "./semantic-defaults.js";

17/**

18 * Shared lock id for any process that rewrites the local vector store. Reindex

19 * and the background mutation-refresh worker both acquire this so they never

20 * write concurrently and corrupt the store. Exported so `pm reindex` reuses the

21 * same id rather than duplicating the literal.

22 */

23export const REINDEX_LOCK_ID = "reindex";

24const PENDING_QUEUE_REL_PATH = "search/pending-refresh.json";

25const PENDING_QUEUE_GATE_REL_PATH = "search/pending-refresh.gate.lock";

26const PENDING_QUEUE_GATE_STALE_MS = 30_000;

27const SEARCH_REFRESH_INLINE_ENV = "PM_SEARCH_REFRESH_INLINE";

dist/cli/commands/test.jsView file

Lines 783-823javascript

783 }

784 pipeCloseGraceTimer = setTimeout(() => {

785 settle({

786 code: exitCode,

787 signal: exitSignal,

788 }, true);

789 }, linkedTestPipeCloseGraceMs());

790 pipeCloseGraceTimer.unref?.();

dist/core/extensions/loader.jsView file

Lines 726-766javascript

726}

727/**

728 * Implements load extensions for the public runtime surface of this module.

729 */

730export async function loadExtensions(options) {

731 const discovery = await discoverExtensions(options);

732

dist/cli-bundle/chunks/chunk-DBV5A7FT.jsView file

Lines 663-703javascript

663 total_inputs: normalizedInputs.length,

664 phase: "start"

665 });

666 vectors.push(...await executeBatchWithAdaptiveSplit(provider, batch, String(batchIndex + 1), runtime.timeoutMs, runtime.maxRetries, warnings));

667 completedInputs += batch.length;

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

Lines 82-112javascript

82 }

83 }

84 const server = await importLaunchModule(target);

85 if (!server) {

86 return false;

87 }

88 server.startMcpServer

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Source & flagged code

7 flagged · loading source

dist/core/search/background-refresh.jsView file

7!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)... L8: import { spawn } from "node:child_process"; L9: import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

7Cross-file remote execution chain: dist/core/search/background-refresh.js spawns dist/core/search/semantic-defaults.js; helper contains network access plus dynamic code execution. L7: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)... L8: import { spawn } from "node:child_process"; L9: import { mkdirSync, rmSync, statSync } from "node:fs"; ... L43: export function [redacted]() { L44: if (parseBooleanTrueLike(process.env[SEARCH_REFRESH_INLINE_ENV])) { L45: return true; ... L116: try { L117: const parsed = JSON.parse(raw); L118: if (!Array.isArray(parsed.ids)) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

dist/cli/commands/test.jsView file

803env, L804: shell: true, L805: windowsHide: true,

High

Shell

Package source references shell execution.

dist/cli/commands/test.jsView on unpkg · L803

dist/core/extensions/loader.jsView file

746const importHref = await resolveExtensionImportHref(extension, options); L747: const module = await import(importHref); L748: loaded.push({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/extensions/loader.jsView on unpkg · L746

dist/cli-bundle/chunks/chunk-DBV5A7FT.jsView file

683// dist/core/search/semantic-defaults.js L684: import { spawnSync } from "node:child_process"; L685: var DISABLE_AUTO_DEFAULTS_ENV = "PM_DISABLE_OLLAMA_AUTO_DEFAULTS"; L686: var OLLAMA_MODEL_ENV = "PM_OLLAMA_MODEL"; L687: var DEFAULT_OLLAMA_BASE_URL = "http://localhost:11434"; L688: var RECOMMENDED_OLLAMA_EMBEDDING_MODEL = "qwen3-embedding:0.6b"; ... L695: function isAutoDefaultsDisabled() { L696: const raw = toOptionalNonEmptyString(process.env[DISABLE_AUTO_DEFAULTS_ENV]); L697: if (!raw) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli-bundle/chunks/chunk-DBV5A7FT.jsView on unpkg · L683

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

102if (!(await launchServer(process.env.PM_CLI_MCP_SERVER)) && !(await launchServer(await locateRepoServer()))) { L103: const child = spawn("npx", ["-y", "--package=@unbrained/pm-cli@latest", "pm-mcp"], { stdio: "inherit", env: process.env, shell: process.platform === "win32" }); L104: child.on("exit", (code, signal) => {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

plugins/pm-codex/scripts/pm-mcp-server.mjsView on unpkg · L102

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Findings

5 High5 Medium5 Low

HighChild Processdist/core/search/background-refresh.js

HighShelldist/cli/commands/test.js

HighSame File Env Network Executiondist/cli-bundle/chunks/chunk-DBV5A7FT.js

HighCross File Remote Execution Contextdist/core/search/background-refresh.js

HighRuntime Package Installplugins/pm-codex/scripts/pm-mcp-server.mjs

MediumDynamic Requiredist/core/extensions/loader.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/install.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/core/search/background-refresh.jsView file

Lines 1-27javascript

1/**

2 * @module core/search/background-refresh

3 *

4 * Powers search, embeddings, and semantic retrieval behavior for Background Refresh.

5 */

8import { spawn } from "node:child_process";

9import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

10import path from "node:path";

11import { pathExists, readFileIfExists, writeFileAtomic } from "../fs/fs-utils.js";

12import { acquireLock } from "../lock/lock.js";

13import { resolvePmPackageRootFromModule } from "../packages/root.js";

14import { readSettings } from "../store/settings.js";

15import { toErrorMessage } from "../shared/primitives.js";

16import { resolveSettingsWithSemanticRuntimeDefaults } from "./semantic-defaults.js";

17/**

18 * Shared lock id for any process that rewrites the local vector store. Reindex

19 * and the background mutation-refresh worker both acquire this so they never

20 * write concurrently and corrupt the store. Exported so `pm reindex` reuses the

21 * same id rather than duplicating the literal.

22 */

23export const REINDEX_LOCK_ID = "reindex";

24const PENDING_QUEUE_REL_PATH = "search/pending-refresh.json";

25const PENDING_QUEUE_GATE_REL_PATH = "search/pending-refresh.gate.lock";

26const PENDING_QUEUE_GATE_STALE_MS = 30_000;

27const SEARCH_REFRESH_INLINE_ENV = "PM_SEARCH_REFRESH_INLINE";

dist/cli/commands/test.jsView file

Lines 783-823javascript

783 }

784 pipeCloseGraceTimer = setTimeout(() => {

785 settle({

786 code: exitCode,

787 signal: exitSignal,

788 }, true);

789 }, linkedTestPipeCloseGraceMs());

790 pipeCloseGraceTimer.unref?.();

dist/core/extensions/loader.jsView file

Lines 726-766javascript

726}

727/**

728 * Implements load extensions for the public runtime surface of this module.

729 */

730export async function loadExtensions(options) {

731 const discovery = await discoverExtensions(options);

732

dist/cli-bundle/chunks/chunk-DBV5A7FT.jsView file

Lines 663-703javascript

663 total_inputs: normalizedInputs.length,

664 phase: "start"

665 });

666 vectors.push(...await executeBatchWithAdaptiveSplit(provider, batch, String(batchIndex + 1), runtime.timeoutMs, runtime.maxRetries, warnings));

667 completedInputs += batch.length;

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

Lines 82-112javascript

82 }

83 }

84 const server = await importLaunchModule(target);

85 if (!server) {

86 return false;

87 }

88 server.startMcpServer

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg