registry / autotel-devtools / 28.0.0

autotel-devtools@28.0.0

Standalone OTLP receiver with web UI for local development

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 36 file(s), 1.57 MB of source, external domains: fonts.googleapis.com, svelte.dev, tailwindcss.com, www.w3.org

Source & flagged code

1 flagged

dist/http-DD3SVQJp.cjsView file

Lines 7-47javascript

7var __hasOwnProp = Object.prototype.hasOwnProperty;

8var __copyProps = (to, from, except, desc) => {

9 if (from && typeof from === "object" || typeof from === "function") {

10 for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {

11 key = keys[i];

12 if (!__hasOwnProp.call(to, key) && key !== except) {

13 __defProp(to, key, {

14 get: ((k) => from[k]).bind(null, key),

15 enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable

16 });

17 }

18 }

19 }

20 return to;

21};

22var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod ||

23 value: mod,

24 enumerable: true

25}) : target, mod));

27//#endregion

28const require_wire = require('./wire-CHU1PkMo.cjs');

29const require_json_fields = require('./json-fields-DZFlNqT2.cjs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/http-DD3SVQJp.cjsView on unpkg · L27

30const require_trace_root = require('./trace-root-BMa667jK.cjs');

31const require_parse = require('./parse-BDF92kdK.cjs');

32const require_resource_utils = require('./resource-utils-DjHJB6uc.cjs');

33let node_http = require("node:http");

34let ws = require("ws");

35let autotel_agents = require("autotel-agents");

36let node_sqlite = require("node:sqlite");

37let node_crypto = require("node:crypto");

38let node_zlib = require("node:zlib");

39let node_fs = require("node:fs");

40let node_path = require("node:path");

41node_path = __toESM(node_path, 1);

42let node_url = require("node:url");

43let protobufjs = require("protobufjs");

44protobufjs = __toESM(protobufjs, 1);

46//#region src/server/error-aggregator.ts

47var ErrorAggregator = class {

Source & flagged code

1 flagged · loading source

dist/http-DD3SVQJp.cjsView file

27//#endregion L28: const require_wire = require('./wire-CHU1PkMo.cjs'); L29: const require_json_fields = require('./json-fields-DZFlNqT2.cjs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/http-DD3SVQJp.cjsView on unpkg · L27

Findings

4 Medium4 Low

MediumDynamic Requiredist/http-DD3SVQJp.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to autotel-devtools@28.0.0.

See all versions of autotel-devtools for other recorded verdicts.

Review the evidence and your use of autotel-devtools@28.0.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 03:00:08.616Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.