registry / agency-lang / 0.7.7
agency-lang@0.7.7
The Agency language
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/scripts/agency.test.jsView file
4import * as path from "path";
L5: import { execFile } from "child_process";
L6: import { promisify } from "util";
High
Child Process
Package source references child process execution.
dist/scripts/agency.test.jsView on unpkg · L4dist/lib/runtime/ipc.jsView file
348env: { ...process.env, AGENCY_IPC: "1" },
L349: execArgv: [`--max-old-space-size=${memoryMb}`],
L350: ...(args.cwd ? { cwd: args.cwd } : {}),
High
dist/lib/ir/prettyPrint.test.jsView file
201// eslint-disable-next-line no-eval
L202: expect(eval(printTs(node))).toBe("a\\");
L203: });
Findings
3 High4 Medium5 Low
HighChild Processdist/scripts/agency.test.js
HighShelldist/lib/runtime/ipc.js
HighSame File Env Network Executiondist/lib/stdlib/oauth.js
MediumDynamic Requiredist/lib/optimize/optimizerModule.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
LowScripts Present
LowEvaldist/lib/ir/prettyPrint.test.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to agency-lang@0.7.7.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.7.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.