registry / @yeshwanthyk/runtime-effect / 0.3.0

@yeshwanthyk/runtime-effect@0.3.0

Effect-powered runtime layer for Marvin agents (config, hooks, tools, LSP, sessions).

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 173 KB of source

Source & flagged code

1 flagged

dist/hooks/loader.jsView file

Lines 1-24javascript

1/**

2 * Hook loader - discovers and loads TypeScript hook modules.

3 *

4 * Hooks are loaded from ~/.config/marvin/hooks/*.ts (non-recursive).

5 * Uses Bun's native import() which handles TypeScript directly.

6 */

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/hooks/loader.jsView on unpkg · L4

7var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {

8 if (typeof path === "string" && /^\.\.?\//.test(path)) {

9 return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx

10 return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase

11 });

12 }

13 return path;

14};

15import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";

16import { createRequire } from "node:module";

17import { homedir } from "node:os";

18import { dirname, isAbsolute, join, resolve } from "node:path";

19import { fileURLToPath, pathToFileURL } from "node:url";

20import { validateHookDescriptor, issueFromError } from "../extensibility/validation.js";

21/**

22 * Create a HookAPI instance that collects handlers.

23 * Returns the API and functions to set handlers later.

24 */

Source & flagged code

1 flagged · loading source

dist/hooks/loader.jsView file

4* Hooks are loaded from ~/.config/marvin/hooks/*.ts (non-recursive). L5: * Uses Bun's native import() which handles TypeScript directly. L6: */

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code