registry / @unbrained/pm-cli / 2026.6.30

@unbrained/pm-cli@2026.6.30

Git-native project management CLI for humans and agents.

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 472 file(s), 9.35 MB of source, external domains: 127.0.0.1, github.com, json-schema.org, pm-cli.unbrained.dev, schema.unbrained.dev, www.npmjs.com

Source & flagged code

7 flagged

dist/core/search/background-refresh.jsView file

Lines 1-27javascript

1/**

2 * @module core/search/background-refresh

3 *

4 * Powers search, embeddings, and semantic retrieval behavior for Background Refresh.

5 */

7!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7027f9f4-1b49-50e4-ae82-7c5b9f7bf956")}catch(e){}}();

8import { spawn } from "node:child_process";

9import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

10import path from "node:path";

11import { pathExists, readFileIfExists, writeFileAtomic } from "../fs/fs-utils.js";

12import { acquireLock } from "../lock/lock.js";

13import { resolvePmPackageRootFromModule } from "../packages/root.js";

14import { readSettings } from "../store/settings.js";

15import { toErrorMessage } from "../shared/primitives.js";

16import { resolveSettingsWithSemanticRuntimeDefaults } from "./semantic-defaults.js";

17/**

18 * Shared lock id for any process that rewrites the local vector store. Reindex

19 * and the background mutation-refresh worker both acquire this so they never

20 * write concurrently and corrupt the store. Exported so `pm reindex` reuses the

21 * same id rather than duplicating the literal.

22 */

23export const REINDEX_LOCK_ID = "reindex";

24const PENDING_QUEUE_REL_PATH = "search/pending-refresh.json";

25const PENDING_QUEUE_GATE_REL_PATH = "search/pending-refresh.gate.lock";

26const PENDING_QUEUE_GATE_STALE_MS = 30_000;

27// Bounded reindex-lock retry for the background worker (~3.2s worst case).

dist/cli/commands/test.jsView file

Lines 673-713javascript

673 process.kill(-pid, "SIGKILL");

674 return;

675 }

676 catch {

677 // Fall back to direct child kill when no process group is available.

678 }

679 try {

680 process.kill(pid, "SIGKILL"

dist/core/extensions/loader.jsView file

Lines 650-690javascript

650 return baseUrl.href;

651}

652/**

653 * Implements load extensions for the public runtime surface of this module.

654 */

655export async function loadExtensions(options) {

656 const discovery = await

dist/cli-bundle/chunks/chunk-D5LYZVGB.jsView file

Lines 486-526javascript

486 };

487 }

488 return {

489 maxCharacters: providerDefaultLimit,

490 warning: configuredMaxCharacters === void 0 || configuredMaxCharacters === null ? null : SEARCH_EMBEDDING_CORPUS_MAX_CHARACTERS_INVALID_WARNING

491 };

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * pm-cli native MCP server launcher (Claude Code / Codex plugin).

4 *

5 * This file is auto-generated by scripts/gen-plugin-mcp-wrappers.mjs.

6 * Do not edit directly.

7 *

8 * Resolution order:

9 * 1. PM_CLI_MCP_SERVER env var (explicit path)

10 * 2. dist/mcp/server.js walking up from this file (repo checkout)

11 * 3. npx -y --package=@unbrained/pm-cli@latest pm-mcp (installed via npm)

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Source & flagged code

7 flagged · loading source

dist/core/search/background-refresh.jsView file

7!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)... L8: import { spawn } from "node:child_process"; L9: import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

7Cross-file remote execution chain: dist/core/search/background-refresh.js spawns dist/core/search/semantic-defaults.js; helper contains network access plus dynamic code execution. L7: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)... L8: import { spawn } from "node:child_process"; L9: import { mkdirSync, rmSync, statSync } from "node:fs"; ... L46: export function [redacted]() { L47: if (parseBooleanTrueLike(process.env[SEARCH_REFRESH_INLINE_ENV])) { L48: return true; ... L119: try { L120: const parsed = JSON.parse(raw); L121: if (!Array.isArray(parsed.ids)) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

dist/cli/commands/test.jsView file

693env, L694: shell: true, L695: windowsHide: true,

High

Shell

Package source references shell execution.

dist/cli/commands/test.jsView on unpkg · L693

dist/core/extensions/loader.jsView file

670const importHref = await resolveExtensionImportHref(extension, options); L671: const module = await import(importHref); L672: loaded.push({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/extensions/loader.jsView on unpkg · L670

dist/cli-bundle/chunks/chunk-D5LYZVGB.jsView file

506// dist/core/search/semantic-defaults.js L507: import { spawnSync } from "node:child_process"; L508: var DISABLE_AUTO_DEFAULTS_ENV = "PM_DISABLE_OLLAMA_AUTO_DEFAULTS"; L509: var OLLAMA_MODEL_ENV = "PM_OLLAMA_MODEL"; L510: var DEFAULT_OLLAMA_BASE_URL = "http://localhost:11434"; L511: var DEFAULT_OLLAMA_MODEL = "qwen3-embedding:0.6b"; ... L518: function isAutoDefaultsDisabled() { L519: const raw = toOptionalNonEmptyString(process.env[DISABLE_AUTO_DEFAULTS_ENV]); L520: if (!raw) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli-bundle/chunks/chunk-D5LYZVGB.jsView on unpkg · L506

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

10* 2. dist/mcp/server.js walking up from this file (repo checkout) L11: * 3. npx -y --package=@unbrained/pm-cli@latest pm-mcp (installed via npm) L12: */ L13: import { spawn } from "node:child_process"; L14: import { access } from "node:fs/promises";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

plugins/pm-codex/scripts/pm-mcp-server.mjsView on unpkg · L10

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

Findings

5 High5 Medium5 Low

HighChild Processdist/core/search/background-refresh.js

HighShelldist/cli/commands/test.js

HighSame File Env Network Executiondist/cli-bundle/chunks/chunk-D5LYZVGB.js

HighCross File Remote Execution Contextdist/core/search/background-refresh.js

HighRuntime Package Installplugins/pm-codex/scripts/pm-mcp-server.mjs

MediumDynamic Requiredist/core/extensions/loader.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/install.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/core/search/background-refresh.jsView file

Lines 1-27javascript

1/**

2 * @module core/search/background-refresh

3 *

4 * Powers search, embeddings, and semantic retrieval behavior for Background Refresh.

5 */

8import { spawn } from "node:child_process";

9import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

10import path from "node:path";

11import { pathExists, readFileIfExists, writeFileAtomic } from "../fs/fs-utils.js";

12import { acquireLock } from "../lock/lock.js";

13import { resolvePmPackageRootFromModule } from "../packages/root.js";

14import { readSettings } from "../store/settings.js";

15import { toErrorMessage } from "../shared/primitives.js";

16import { resolveSettingsWithSemanticRuntimeDefaults } from "./semantic-defaults.js";

17/**

18 * Shared lock id for any process that rewrites the local vector store. Reindex

19 * and the background mutation-refresh worker both acquire this so they never

20 * write concurrently and corrupt the store. Exported so `pm reindex` reuses the

21 * same id rather than duplicating the literal.

22 */

23export const REINDEX_LOCK_ID = "reindex";

24const PENDING_QUEUE_REL_PATH = "search/pending-refresh.json";

25const PENDING_QUEUE_GATE_REL_PATH = "search/pending-refresh.gate.lock";

26const PENDING_QUEUE_GATE_STALE_MS = 30_000;

27// Bounded reindex-lock retry for the background worker (~3.2s worst case).

dist/cli/commands/test.jsView file

Lines 673-713javascript

673 process.kill(-pid, "SIGKILL");

674 return;

675 }

676 catch {

677 // Fall back to direct child kill when no process group is available.

678 }

679 try {

680 process.kill(pid, "SIGKILL"

dist/core/extensions/loader.jsView file

Lines 650-690javascript

650 return baseUrl.href;

651}

652/**

653 * Implements load extensions for the public runtime surface of this module.

654 */

655export async function loadExtensions(options) {

656 const discovery = await

dist/cli-bundle/chunks/chunk-D5LYZVGB.jsView file

Lines 486-526javascript

486 };

487 }

488 return {

489 maxCharacters: providerDefaultLimit,

490 warning: configuredMaxCharacters === void 0 || configuredMaxCharacters === null ? null : SEARCH_EMBEDDING_CORPUS_MAX_CHARACTERS_INVALID_WARNING

491 };

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * pm-cli native MCP server launcher (Claude Code / Codex plugin).

4 *

5 * This file is auto-generated by scripts/gen-plugin-mcp-wrappers.mjs.

6 * Do not edit directly.

7 *

8 * Resolution order:

9 * 1. PM_CLI_MCP_SERVER env var (explicit path)

10 * 2. dist/mcp/server.js walking up from this file (repo checkout)

11 * 3. npx -y --package=@unbrained/pm-cli@latest pm-mcp (installed via npm)

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg