registry  /  atlasbound  /  0.10.0

atlasbound@0.10.0

AtlasBound , AI agents, bound to your codebase. Local-first closed-world code intelligence for AI coding agents (extract -> gate -> serve). Zero runtime dependencies.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 78 file(s), 393 KB of source, external domains: zftcplzrrajxuhdqyhlb.supabase.co

Source & flagged code

4 flagged · loading source
engine/lib/cloud.cjsView file
1patternName = supabase_service_key severity = critical line = 1 matchedText = "use str...on};
Critical
Critical Secret

Package contains a critical-looking secret pattern.

engine/lib/cloud.cjsView on unpkg · L1
1patternName = supabase_service_key severity = critical line = 1 matchedText = "use str...on};
Critical
Secret Pattern

Supabase service role key (JWT) in engine/lib/cloud.cjs

engine/lib/cloud.cjsView on unpkg · L1
packs/ts-supabase/lib/ts.cjsView file
1"use strict";const fs=require("fs"),path=require("path"),_cache={product:void 0,byTarget:new Map};function tsFor(targetRepo){if(process.env.ATLASBOUND_TS_DISABLE==="1")return null;...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

packs/ts-supabase/lib/ts.cjsView on unpkg · L1
intake/resume/active.cjsView file
1#!/usr/bin/env node L2: "use strict";const fs=require("fs"),path=require("path"),crypto=require("crypto"),{execSync,execFileSync}=require("child_process"),P=require("../paths.cjs"),INTAKE_ROOT=P.INTAKE_RO...
Low
Weak Crypto

Package source references weak cryptographic algorithms.

intake/resume/active.cjsView on unpkg · L1

Findings

2 Critical3 Medium6 Low
CriticalCritical Secretengine/lib/cloud.cjs
CriticalSecret Patternengine/lib/cloud.cjs
MediumDynamic Requirepacks/ts-supabase/lib/ts.cjs
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowWeak Cryptointake/resume/active.cjs
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License