registry / alnair / 0.1.0

alnair@0.1.0

Give AI agents secure, temporary permissions — alnair init

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 24 file(s), 45.6 KB of source, external domains: alnair.ai

Source & flagged code

2 flagged

dist/backend.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/backend.jsView on unpkg · L1

3import { dirname, join, resolve } from "node:path";

4import { fileURLToPath } from "node:url";

5const DEFAULT_URL = "http://localhost:8080";

6export function defaultUrl() {

7 return process.env.ALNAIR_URL?.replace(/\/$/, "") || DEFAULT_URL;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/backend.jsView on unpkg · L1

9export async function isHealthy(url) {

10 try {

11 const res = await fetch(`${url}/healthz`, { signal: AbortSignal.timeout(1500) });

12 return res.ok;

13 }

14 catch {

15 return false;

16 }

17}

18/** Walk up from cwd / package location looking for the Go service module. */

19export function findServiceDir(cwd) {

20 if (process.env.ALNAIR_SERVICE_PATH && existsSync(process.env.ALNAIR_SERVICE_PATH)) {

21 return process.env.ALNAIR_SERVICE_PATH;

Source & flagged code

2 flagged · loading source

dist/backend.jsView file

1import { spawn } from "node:child_process"; L2: import { existsSync } from "node:fs";

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code