registry  /  claude-code-panel  /  0.9.1

claude-code-panel@0.9.1

Zero-dependency local dashboard for Claude Code: commands, skills, agents, plugins, workflows, sessions and a ccusage-accurate token usage dashboard

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 79.5 KB of source, external domains: 127.0.0.1

Source & flagged code

2 flagged · loading source
server.jsView file
10*/ L11: const http = require('http'); L12: const https = require('https'); ... L17: L18: const PORT = process.env.PORT || 4321; L19: const PROXY_PORT = process.env.PROXY_PORT || Number(PORT) + 1; ... L29: if (process.env.CCP_RC_FILE) return process.env.CCP_RC_FILE.split(',').filter(Boolean); // 测试用 L30: const home = os.homedir(); L31: const targets = new Set(); ... L33: const candidates = [ L34: '.zshrc', '.zprofile', // zsh（macOS 默认） L35: '.bashrc', '.bash_profile', // bash
Medium
Install Persistence

Source writes installer persistence such as shell profile or service configuration.

server.jsView on unpkg · L10
scripts/gen-demo-data.pyView file
•path = scripts/gen-demo-data.py kind = build_helper sizeBytes = 16856 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/gen-demo-data.pyView on unpkg

Findings

5 Medium4 Low
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceserver.js
MediumShips Build Helperscripts/gen-demo-data.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings