registry / carto-md / 2.1.1

carto-md@2.1.1

Structural intelligence + episodic memory for AI coding tools. Indexes your codebase into SQLite — routes, models, import graph, blast radius, domains — and exposes ~75 MCP tools (validate_diff, get_change_plan, did_we_discuss_this, get_predictive_risk, …

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 141 file(s), 1.11 MB of source, external domains: aka.ms, api.anthropic.com, api.groq.com, api.openai.com, api.together.xyz, generativelanguage.googleapis.com, github.com, nodejs.org, openrouter.ai, registry.npmjs.org, www.npmjs.com

Source & flagged code

5 flagged

package.jsonView file

Lines 1-35json

2 "name": "carto-md",

3 "version": "2.1.1",

4 "description": "Structural intelligence + episodic memory for AI coding tools. Indexes your codebase into SQLite — routes, models, import graph, blast radius, domains — and exposes ~75 MCP tools (validate_diff, get_change_plan, did_we_discuss_this, get_predictive_risk, …) for Cursor, Claude Code, Codex, Kiro, and any other MCP client.",

5 "bin": {

6 "carto": "src/cli/index.js"

7 },

8 "main": "./index.js",

9 "scripts": {

10 "test": "node test/test.js",

11 "test:correctness": "node test/correctness.js",

12 "test:benchmark": "node test/benchmark.js",

13 "test:bench-ci": "node test/bench-ci.js",

14 "test:audit-supabase": "node test/audit-supabase.js",

15 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L15

16 "bench:bitmap": "node bench/bitmap-validation/index.js",

17 "bench:scale": "node bench/scale-test/index.js"

18 },

19 "dependencies": {

20 "@agentclientprotocol/sdk": "^0.22.1",

21 "@babel/parser": "^7.29.3",

22 "@modelcontextprotocol/sdk": "^1.0.0",

23 "better-sqlite3": "11.7.0",

24 "chokidar": "^3.6.0",

25 "tree-sitter": "0.25.0"

26 },

27 "optionalDependencies": {

28 "tree-sitter-c-sharp": "0.21.3",

29 "tree-sitter-cpp": "0.23.4",

30 "tree-sitter-go": "0.25.0",

31 "tree-sitter-java": "0.23.5",

32 "tree-sitter-javascript": "0.25.0",

33 "tree-sitter-python": "0.25.0",

34 "tree-sitter-rust": "0.24.0",

35 "tree-sitter-typescript": "0.23.2"

scripts/gen-api-docs.jsView file

Lines 7-47javascript

7 * Usage:

8 * node scripts/gen-api-docs.js # writes docs/api/

9 * node scripts/gen-api-docs.js --dry-run # print to stdout, no writes

10 */

index.jsView file

Lines 1-26javascript

1'use strict';

3/**

4 * carto-md — public module API

5 *

6 * Usage:

7 * const { StoreAdapter } = require('carto-md');

8 * const carto = new StoreAdapter();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L6

9 * await carto.index('/path/to/project');

10 *

11 * // Get everything an editor agent needs for a file

src/rules/engine.jsView file

Lines 1-21javascript

1'use strict';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/rules/engine.jsView on unpkg · L1

3/**

4 * Rule engine — gap detection.

5 *

6 * A gap is a claim, grounded in a Carto fact, that the code violates

7 * a rule. The engine iterates a rule library, gates each rule by the

8 * project's stated intent (product_type), and collects the grounded

9 * findings.

10 *

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/gen-api-docs.jsView file

27// eslint-disable-next-line no-new-func L28: return (new Function(`return ${arrayLiteral}`))(); L29: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

scripts/gen-api-docs.jsView on unpkg · L27

index.jsView file

6* Usage: L7: * const { StoreAdapter } = require('carto-md'); L8: * const carto = new StoreAdapter();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L6

src/rules/engine.jsView file

1'use strict'; L2:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/rules/engine.jsView on unpkg · L1

Findings

1 High5 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requireindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalscripts/gen-api-docs.js

LowWeak Cryptosrc/rules/engine.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

package.jsonView file

Lines 1-35json

2 "name": "carto-md",

3 "version": "2.1.1",

5 "bin": {

6 "carto": "src/cli/index.js"

7 },

8 "main": "./index.js",

9 "scripts": {

10 "test": "node test/test.js",

11 "test:correctness": "node test/correctness.js",

12 "test:benchmark": "node test/benchmark.js",

13 "test:bench-ci": "node test/bench-ci.js",

14 "test:audit-supabase": "node test/audit-supabase.js",

15 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L15

16 "bench:bitmap": "node bench/bitmap-validation/index.js",

17 "bench:scale": "node bench/scale-test/index.js"

18 },

19 "dependencies": {

20 "@agentclientprotocol/sdk": "^0.22.1",

21 "@babel/parser": "^7.29.3",

22 "@modelcontextprotocol/sdk": "^1.0.0",

23 "better-sqlite3": "11.7.0",

24 "chokidar": "^3.6.0",

25 "tree-sitter": "0.25.0"

26 },

27 "optionalDependencies": {

28 "tree-sitter-c-sharp": "0.21.3",

29 "tree-sitter-cpp": "0.23.4",

30 "tree-sitter-go": "0.25.0",

31 "tree-sitter-java": "0.23.5",

32 "tree-sitter-javascript": "0.25.0",

33 "tree-sitter-python": "0.25.0",

34 "tree-sitter-rust": "0.24.0",

35 "tree-sitter-typescript": "0.23.2"

scripts/gen-api-docs.jsView file

Lines 7-47javascript

7 * Usage:

8 * node scripts/gen-api-docs.js # writes docs/api/

9 * node scripts/gen-api-docs.js --dry-run # print to stdout, no writes

10 */

index.jsView file

Lines 1-26javascript

1'use strict';

3/**

4 * carto-md — public module API

5 *

6 * Usage:

7 * const { StoreAdapter } = require('carto-md');

8 * const carto = new StoreAdapter();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L6

9 * await carto.index('/path/to/project');

10 *

11 * // Get everything an editor agent needs for a file

src/rules/engine.jsView file

Lines 1-21javascript

1'use strict';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/rules/engine.jsView on unpkg · L1

3/**

4 * Rule engine — gap detection.

5 *

6 * A gap is a claim, grounded in a Carto fact, that the code violates

7 * a rule. The engine iterates a rule library, gates each rule by the

8 * project's stated intent (product_type), and collects the grounded

9 * findings.

10 *