registry / @workover/cli / 0.1.0

@workover/cli@0.1.0

Workover command line — sign in and cowork on your documents from the terminal.

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 1 file(s), 4.17 KB of source, external domains: api.workover.dev

Source & flagged code

3 flagged

bin/workover.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2// Workover CLI — Phase 1: `login` / `logout` / `whoami` via the device-authorization flow (RFC 8628).

3// Auth only for now; document/coworking commands (and the MCP server) build on the stored token.

4import {

5 readFileSync,

6 writeFileSync,

7 mkdirSync,

8 existsSync,

9 chmodSync,

Source & flagged code

3 flagged · loading source

bin/workover.mjsView file

13import { join } from 'path'; L14: import { spawn } from 'child_process'; L15:

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code