registry / commitgate / 0.1.2

commitgate@0.1.2

CommitGate — Builder↔Reviewer(Claude↔Codex) fail-closed 커밋 게이트: 리뷰·승인·증거 없인 커밋을 통과시키지 않는 AI REQ 워크플로 kit (req:new/review-codex/doctor/commit)

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 152 KB of source

Source & flagged code

1 flagged

bin/commitgate.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * commitgate bin 런처(Stage A).

4 * npm bin은 TS를 직접 실행 못 하므로 tsx ESM 로더를 얹어 init.ts를 실행한다.

5 *

6 * ⚠️ tsx는 반드시 **이 런처(=패키지) 기준**으로 해소해야 한다(호출 cwd 아님).

7 * npx로 실행하면 cwd=대상 repo인데 그곳엔 아직 tsx가 없을 수 있어,

8 * bare `--import tsx`/cwd-상대 해소는 init 전에 ERR_MODULE_NOT_FOUND로 실패한다(REQ-2026-001 design R1 P1).

9 * `import ... from 'tsx/esm/api'`는 이 .mjs(패키지 node_modules) 기준으로 정적 해소되므로 cwd 무관.

10 * (node:module의 register('tsx/esm')는 tsx v4가 deprecated --loader로 간주해 거부 → tsx 자체 API 사용.)

11 * (Stage B에서 init.ts를 JS로 빌드하면 이 런처는 제거 가능.)

12 */

13import { register } from 'tsx/esm/api'

14import { fileURLToPath, pathToFileURL } from 'node:url'

15import { dirname, join } from 'node:path'

17register()

19const initTs = pathToFileURL(join(dirname(fileURLToPath(import.meta.url)), 'init.ts')).href

20const mod = await import(initTs)

21mod.main(process.argv.slice(2))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/commitgate.mjsView on unpkg · L19

Source & flagged code

1 flagged · loading source

bin/commitgate.mjsView file

19const initTs = pathToFileURL(join(dirname(fileURLToPath(import.meta.url)), 'init.ts')).href L20: const mod = await import(initTs) L21: mod.main(process.argv.slice(2))

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code