registry / @unbrained/pm-cli / 2026.7.2

@unbrained/pm-cli@2026.7.2

⚠ Under review

Git-native project management CLI for humans and agents.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 472 file(s), 9.53 MB of source, external domains: 127.0.0.1, github.com, json-schema.org, pm-cli.unbrained.dev, schema.unbrained.dev, www.npmjs.com

Source & flagged code

8 flagged

dist/core/search/background-refresh.jsView file

Lines 1-27javascript

1/**

2 * @module core/search/background-refresh

3 *

4 * Powers search, embeddings, and semantic retrieval behavior for Background Refresh.

5 */

7!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7027f9f4-1b49-50e4-ae82-7c5b9f7bf956")}catch(e){}}();

8import { spawn } from "node:child_process";

9import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

10import path from "node:path";

11import { pathExists, readFileIfExists, writeFileAtomic } from "../fs/fs-utils.js";

12import { acquireLock } from "../lock/lock.js";

13import { resolvePmPackageRootFromModule } from "../packages/root.js";

14import { readSettings } from "../store/settings.js";

15import { toErrorMessage } from "../shared/primitives.js";

16import { resolveSettingsWithSemanticRuntimeDefaults } from "./semantic-defaults.js";

17/**

18 * Shared lock id for any process that rewrites the local vector store. Reindex

19 * and the background mutation-refresh worker both acquire this so they never

20 * write concurrently and corrupt the store. Exported so `pm reindex` reuses the

21 * same id rather than duplicating the literal.

22 */

23export const REINDEX_LOCK_ID = "reindex";

24const PENDING_QUEUE_REL_PATH = "search/pending-refresh.json";

25const PENDING_QUEUE_GATE_REL_PATH = "search/pending-refresh.gate.lock";

26const PENDING_QUEUE_GATE_STALE_MS = 30_000;

27// Bounded reindex-lock retry for the background worker (~3.2s worst case).

dist/cli/commands/test.jsView file

Lines 661-701javascript

661 process.kill(-pid, "SIGKILL");

662 return;

663 }

664 catch {

665 // Fall back to direct child kill when no process group is available.

666 }

667 try {

668 process.kill(pid, "SIGKILL"

dist/core/extensions/loader.jsView file

Lines 719-759javascript

719 return baseUrl.href;

720}

721/**

722 * Implements load extensions for the public runtime surface of this module.

723 */

724export async function loadExtensions(options) {

725 const discovery = await

dist/cli-bundle/chunks/chunk-TPOFWBMY.jsView file

Lines 486-526javascript

486 };

487 }

488 return {

489 maxCharacters: providerDefaultLimit,

490 warning: configuredMaxCharacters === void 0 || configuredMaxCharacters === null ? null : SEARCH_EMBEDDING_CORPUS_MAX_CHARACTERS_INVALID_WARNING

491 };

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * pm-cli native MCP server launcher (Claude Code / Codex plugin).

4 *

5 * This file is auto-generated by scripts/gen-plugin-mcp-wrappers.mjs.

6 * Do not edit directly.

7 *

8 * Resolution order:

9 * 1. PM_CLI_MCP_SERVER env var (explicit path)

10 * 2. dist/mcp/server.js walking up from this file (repo checkout)

11 * 3. npx -y --package=@unbrained/pm-cli@latest pm-mcp (installed via npm)

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

dist/cli-bundle/chunks/chunk-3AZUFQK6.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @unbrained/pm-cli@2026.6.30 matchedIdentity = npm:QHVuYnJhaW5lZC9wbS1jbGk:2026.6.30 similarity = 0.350 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/cli-bundle/chunks/chunk-3AZUFQK6.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/core/search/background-refresh.jsView file

7!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)... L8: import { spawn } from "node:child_process"; L9: import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

7Cross-file remote execution chain: dist/core/search/background-refresh.js spawns dist/core/search/semantic-defaults.js; helper contains network access plus dynamic code execution. L7: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)... L8: import { spawn } from "node:child_process"; L9: import { mkdirSync, rmSync, statSync } from "node:fs"; ... L46: export function [redacted]() { L47: if (parseBooleanTrueLike(process.env[SEARCH_REFRESH_INLINE_ENV])) { L48: return true; ... L119: try { L120: const parsed = JSON.parse(raw); L121: if (!Array.isArray(parsed.ids)) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

dist/cli/commands/test.jsView file

681env, L682: shell: true, L683: windowsHide: true,

High

Shell

Package source references shell execution.

dist/cli/commands/test.jsView on unpkg · L681

dist/core/extensions/loader.jsView file

739const importHref = await resolveExtensionImportHref(extension, options); L740: const module = await import(importHref); L741: loaded.push({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/extensions/loader.jsView on unpkg · L739

dist/cli-bundle/chunks/chunk-TPOFWBMY.jsView file

506// dist/core/search/semantic-defaults.js L507: import { spawnSync } from "node:child_process"; L508: var DISABLE_AUTO_DEFAULTS_ENV = "PM_DISABLE_OLLAMA_AUTO_DEFAULTS"; L509: var OLLAMA_MODEL_ENV = "PM_OLLAMA_MODEL"; L510: var DEFAULT_OLLAMA_BASE_URL = "http://localhost:11434"; L511: var DEFAULT_OLLAMA_MODEL = "qwen3-embedding:0.6b"; ... L518: function isAutoDefaultsDisabled() { L519: const raw = toOptionalNonEmptyString(process.env[DISABLE_AUTO_DEFAULTS_ENV]); L520: if (!raw) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli-bundle/chunks/chunk-TPOFWBMY.jsView on unpkg · L506

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

10* 2. dist/mcp/server.js walking up from this file (repo checkout) L11: * 3. npx -y --package=@unbrained/pm-cli@latest pm-mcp (installed via npm) L12: */ L13: import { spawn } from "node:child_process"; L14: import { access } from "node:fs/promises";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

plugins/pm-codex/scripts/pm-mcp-server.mjsView on unpkg · L10

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

dist/cli-bundle/chunks/chunk-3AZUFQK6.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/cli-bundle/chunks/chunk-3AZUFQK6.jsView on unpkg

Findings

1 Critical5 High5 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/cli-bundle/chunks/chunk-3AZUFQK6.js

HighChild Processdist/core/search/background-refresh.js

HighShelldist/cli/commands/test.js

HighSame File Env Network Executiondist/cli-bundle/chunks/chunk-TPOFWBMY.js

HighCross File Remote Execution Contextdist/core/search/background-refresh.js

HighRuntime Package Installplugins/pm-codex/scripts/pm-mcp-server.mjs

MediumDynamic Requiredist/core/extensions/loader.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/install.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

dist/core/search/background-refresh.jsView file

Lines 1-27javascript

1/**

2 * @module core/search/background-refresh

3 *

4 * Powers search, embeddings, and semantic retrieval behavior for Background Refresh.

5 */

8import { spawn } from "node:child_process";

9import { mkdirSync, rmSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/core/search/background-refresh.jsView on unpkg · L7

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/core/search/background-refresh.jsView on unpkg · L7

10import path from "node:path";

11import { pathExists, readFileIfExists, writeFileAtomic } from "../fs/fs-utils.js";

12import { acquireLock } from "../lock/lock.js";

13import { resolvePmPackageRootFromModule } from "../packages/root.js";

14import { readSettings } from "../store/settings.js";

15import { toErrorMessage } from "../shared/primitives.js";

16import { resolveSettingsWithSemanticRuntimeDefaults } from "./semantic-defaults.js";

17/**

18 * Shared lock id for any process that rewrites the local vector store. Reindex

19 * and the background mutation-refresh worker both acquire this so they never

20 * write concurrently and corrupt the store. Exported so `pm reindex` reuses the

21 * same id rather than duplicating the literal.

22 */

23export const REINDEX_LOCK_ID = "reindex";

24const PENDING_QUEUE_REL_PATH = "search/pending-refresh.json";

25const PENDING_QUEUE_GATE_REL_PATH = "search/pending-refresh.gate.lock";

26const PENDING_QUEUE_GATE_STALE_MS = 30_000;

27// Bounded reindex-lock retry for the background worker (~3.2s worst case).

dist/cli/commands/test.jsView file

Lines 661-701javascript

661 process.kill(-pid, "SIGKILL");

662 return;

663 }

664 catch {

665 // Fall back to direct child kill when no process group is available.

666 }

667 try {

668 process.kill(pid, "SIGKILL"

dist/core/extensions/loader.jsView file

Lines 719-759javascript

719 return baseUrl.href;

720}

721/**

722 * Implements load extensions for the public runtime surface of this module.

723 */

724export async function loadExtensions(options) {

725 const discovery = await

dist/cli-bundle/chunks/chunk-TPOFWBMY.jsView file

Lines 486-526javascript

486 };

487 }

488 return {

489 maxCharacters: providerDefaultLimit,

490 warning: configuredMaxCharacters === void 0 || configuredMaxCharacters === null ? null : SEARCH_EMBEDDING_CORPUS_MAX_CHARACTERS_INVALID_WARNING

491 };

plugins/pm-codex/scripts/pm-mcp-server.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * pm-cli native MCP server launcher (Claude Code / Codex plugin).

4 *

5 * This file is auto-generated by scripts/gen-plugin-mcp-wrappers.mjs.

6 * Do not edit directly.

7 *

8 * Resolution order:

9 * 1. PM_CLI_MCP_SERVER env var (explicit path)

10 * 2. dist/mcp/server.js walking up from this file (repo checkout)

11 * 3. npx -y --package=@unbrained/pm-cli@latest pm-mcp (installed via npm)

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 2991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg

dist/cli-bundle/chunks/chunk-3AZUFQK6.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/cli-bundle/chunks/chunk-3AZUFQK6.jsView on unpkg