registry / ark-runtime-kernel / 1.1.0

ark-runtime-kernel@1.1.0

Architectural Runtime Kernel — governance for Hexagonal + Event-Driven + DDD systems

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 390 KB of source

Source & flagged code

1 flagged

bin/ark-mcp.mjsView file

Lines 64-104javascript

64 }

65}

67function resolveInRoot(root, maybePath) {

68 if (!maybePath) return undefined;

69 return path.isAbsolute(maybePath) ? maybePath : path.join(root, maybePath);

70}

72function inferLayer(filePath, config, root) {

73 if (!filePath) return undefined;

74 return layerForFile(root, filePath, config.layers);

75}

77async function loadArk() {

78 const url = new URL('../dist/index.js', import.meta.url);

79 if (!fs.existsSync(url)) {

80 throw new Error(

81 'ark-mcp requires the built library at dist/index.js. Run "npm run build" first.'

82 );

83 }

84 try {

85 return await import(url.href);

86 } catch (err) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ark-mcp.mjsView on unpkg · L84

87 throw new Error(

88 `ark-mcp failed to load dist/index.js (rebuild with "npm run build"): ${

89 err instanceof Error ? err.message : String(err)

90 }`

91 );

92 }

93}

95async function loadOptionalTypeScript() {

96 try {

97 return await import('typescript');

98 } catch {

99 return undefined;

100 }

101}

102

103const SOURCE_FILE = /\.[cm]?[jt]sx?$/;

104

Source & flagged code

1 flagged · loading source

bin/ark-mcp.mjsView file

84try { L85: return await import(url.href); L86: } catch (err) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ark-mcp.mjsView on unpkg · L84

Findings

2 Medium3 Low

MediumDynamic Requirebin/ark-mcp.mjs

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

bin/ark-mcp.mjsView file

Lines 64-104javascript

64 }

65}

67function resolveInRoot(root, maybePath) {

68 if (!maybePath) return undefined;

69 return path.isAbsolute(maybePath) ? maybePath : path.join(root, maybePath);

70}

72function inferLayer(filePath, config, root) {

73 if (!filePath) return undefined;

74 return layerForFile(root, filePath, config.layers);

75}

77async function loadArk() {

78 const url = new URL('../dist/index.js', import.meta.url);

79 if (!fs.existsSync(url)) {

80 throw new Error(

81 'ark-mcp requires the built library at dist/index.js. Run "npm run build" first.'

82 );

83 }

84 try {

85 return await import(url.href);

86 } catch (err) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ark-mcp.mjsView on unpkg · L84

87 throw new Error(

88 `ark-mcp failed to load dist/index.js (rebuild with "npm run build"): ${

89 err instanceof Error ? err.message : String(err)

90 }`

91 );

92 }

93}

95async function loadOptionalTypeScript() {

96 try {

97 return await import('typescript');

98 } catch {

99 return undefined;

100 }

101}

102

103const SOURCE_FILE = /\.[cm]?[jt]sx?$/;

104