registry  /  bobbytools  /  3.1.0

bobbytools@3.1.0

AI Provider Manager & CLI Launcher — manage multiple AI providers, accounts, and models, then launch any CLI tool with the right environment variables

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 11 file(s), 90.9 KB of source, external domains: 127.0.0.1, ai.genfity.com, api-inference.huggingface.co, api.anthropic.com, api.cerebras.ai, api.cf.com, api.chutes.ai, api.cloudflare.com, api.cohere.com, api.deepinfra.com, api.deepseek.com, api.endpoints.anyscale.com, api.fireworks.ai, api.groq.com, api.lepton.ai, api.mistral.ai, api.moonshot.cn, api.novita.ai, api.openai.com, api.perplexity.ai, api.sambanova.ai, api.siliconflow.cn, api.studio.nebius.ai, api.together.xyz, api.upstage.ai, api.x.ai, dashscope-intl.aliyuncs.com, generativelanguage.googleapis.com, integrate.api.nvidia.com, models.inference.ai.azure.com, open.bigmodel.cn, openrouter.ai

Source & flagged code

1 flagged · loading source
src/index.jsView file
•matchType = previous_version_dangerous_delta matchedPackage = bobbytools@3.0.0 matchedIdentity = npm:Ym9iYnl0b29scw:3.0.0 similarity = 0.909 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.jsView on unpkg

Findings

1 High2 Medium4 Low
HighPrevious Version Dangerous Deltasrc/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings