registry / commandmate / 0.8.0

commandmate@0.8.0

A local control plane for agent CLIs — orchestration and visibility for Claude Code, Codex, Gemini CLI, and more across Git worktrees

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 190 file(s), 1.12 MB of source, external domains: cli.github.com, github.com, nodejs.org, opencode.ai

3 flagged

.next/server/app/apple-icon.png.bodyView file

•path = .next/server/app/apple-icon.png.body kind = high_entropy_blob sizeBytes = 11287 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/apple-icon.png.bodyView on unpkg

•path = .next/server/app/apple-icon.png.body kind = payload_in_excluded_dir sizeBytes = 11287 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/apple-icon.png.bodyView on unpkg

.next/server/app/api/worktrees/[id]/marp-render/route.jsView file

•path = .next/server/app/api/worktrees/[id]/marp-render/route.js kind = oversized_source_file sizeBytes = 3565727 magicHex = [redacted]

3 flagged · loading source

.next/server/app/apple-icon.png.bodyView file