registry / dev-loops / 0.9.0

dev-loops@0.9.0

⚠ Under review

Agent-harness-agnostic dev-loop infrastructure (Pi and Claude Code) for reusable local and remote development loops

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 161 file(s), 2.07 MB of source, external domains: github.com, www.w3.org

Oversized source lightweight scan

scripts/loop/inspect-run-viewer/vendor/mermaid.min.js3.16 MB file, sampled 256 KB

ChildProcessHighEntropyStringsMinifiedUrlStringsgithub.comwww.w3.org

Source & flagged code

6 flagged

extension/post-merge-update.tsView file

Lines 81-121typescript

81 ?? trimToNull(result.stdout)

82 ?? (result.killed

83 ? 'command was killed before completing'

84 : (typeof result.code === 'number' ? `exit code ${result.code}` : 'exit code unavailable'));

85}

87function getBashCommandFromToolResult(event: ToolResultLike | null | undefined): string | null {

88 if (!event || event.toolName !== 'bash') {

89 return null;

90 }

91 const command = event.input?.command;

92 return typeof command === 'string' ? command : null;

93}

95function notify(ctx: Pick<HarnessContext, 'hasUI' | 'ui'>, message: string, level: 'info' | 'warning' | 'error' = 'info'): void {

96 if (ctx.hasUI) {

97 ctx.ui.notify(message, level);

98 }

99}

100

101async function defaultResolveRepoContext(exec: ExtensionHarnessAdapter['exec'], cwd: string): Promise<RepoContext> {

102 const rootResult = await exec('git rev-parse --show-toplevel', {

103 cwd,

High

Child Process

Package source references child process execution.

extension/post-merge-update.tsView on unpkg · L101

104 timeout: REPO_RESOLUTION_TIMEOUT_MS,

105 });

106 if (rootResult.code !== 0) {

107 return { repoRoot: null, repoSlug: null };

108 }

109

110 const repoRoot = trimToNull(rootResult.stdout);

111 if (!repoRoot) {

112 return { repoRoot: null, repoSlug: null };

113 }

114

115 const remoteResult = await exec('git config --get remote.origin.url', {

116 cwd: repoRoot,

117 timeout: REPO_RESOLUTION_TIMEOUT_MS,

118 });

119 if (remoteResult.code !== 0) {

120 return { repoRoot, repoSlug: null };

121 }

scripts/loop/ui-review-provision.mjsView file

Lines 134-174javascript

134

135/**

136 * Ensure the worktree owns its node_modules before installing. linkOnInit can

137 * symlink node_modules into the primary checkout; running `npm install` through

138 * that symlink would write into the primary's real node_modules — mutating

139 * shared deps. Replace a symlinked node_modules with a real (empty) directory so

140 * the install is isolated to the worktree, leaving the primary untouched.

141 *

142 * Note: materializing to an empty dir makes `npm install` reinstall the full

143 * tree (not just the lock delta). If that install cost matters, copy the

144 * primary's real node_modules into the worktree first for an incremental

scripts/github/build-adjacent-bundle.mjsView file

Lines 94-134javascript

94 return BINARY_EXTENSIONS.has(base.slice(dot).toLowerCase());

95}

97/**

98 * Heuristic binary-content sniff: a NUL byte within the first 8KB marks the

99 * file as binary regardless of extension (covers extension-less binaries).

100 * @param {Buffer} buf

101 * @returns

scripts/loop/inspect-run-viewer/vendor/mermaid.min.jsView file

•path = scripts/loop/inspect-run-viewer/vendor/mermaid.min.js kind = oversized_source_file sizeBytes = 3312967 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

scripts/loop/inspect-run-viewer/vendor/mermaid.min.jsView on unpkg

Source & flagged code

6 flagged · loading source

extension/post-merge-update.tsView file

101async function defaultResolveRepoContext(exec: ExtensionHarnessAdapter['exec'], cwd: string): Promise<RepoContext> { L102: const rootResult = await exec('git rev-parse --show-toplevel', { L103: cwd,

High

Child Process

Package source references child process execution.

extension/post-merge-update.tsView on unpkg · L101

scripts/loop/ui-review-provision.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dev-loops@0.7.1 matchedIdentity = npm:ZGV2LWxvb3Bz:0.7.1 similarity = 0.658 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/loop/ui-review-provision.mjsView on unpkg

216const cwd = runCwd; L217: const child = spawn(recipe.command, { cwd, shell: true, detached: true, stdio: "ignore" }); L218: child.unref();

High

Shell

Package source references shell execution.

scripts/loop/ui-review-provision.mjsView on unpkg · L216

154} catch { L155: return false; // absent — npm install creates a real dir L156: } ... L166: const materialized = ensureOwnNodeModules(worktreePath); L167: execFileSync("npm", ["install"], { cwd: worktreePath, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }); L168: return Promise.resolve({ ok: true, detail: materialized ? "npm install (materialized own node_modules)" : "npm install" });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/loop/ui-review-provision.mjsView on unpkg · L154

scripts/github/build-adjacent-bundle.mjsView file

114* - import ... from "x" / export ... from "x" L115: * - import("x") (dynamic import) L116: * - require("x")

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/github/build-adjacent-bundle.mjsView on unpkg · L114

scripts/loop/inspect-run-viewer/vendor/mermaid.min.jsView file

•path = scripts/loop/inspect-run-viewer/vendor/mermaid.min.js kind = oversized_source_file sizeBytes = 3312967 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

scripts/loop/inspect-run-viewer/vendor/mermaid.min.jsView on unpkg

Findings

1 Critical4 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltascripts/loop/ui-review-provision.mjs

HighChild Processextension/post-merge-update.ts

HighShellscripts/loop/ui-review-provision.mjs

HighRuntime Package Installscripts/loop/ui-review-provision.mjs

HighOversized Source Filescripts/loop/inspect-run-viewer/vendor/mermaid.min.js

MediumDynamic Requirescripts/github/build-adjacent-bundle.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

extension/post-merge-update.tsView file

Lines 81-121typescript

81 ?? trimToNull(result.stdout)

82 ?? (result.killed

83 ? 'command was killed before completing'

84 : (typeof result.code === 'number' ? `exit code ${result.code}` : 'exit code unavailable'));

85}

87function getBashCommandFromToolResult(event: ToolResultLike | null | undefined): string | null {

88 if (!event || event.toolName !== 'bash') {

89 return null;

90 }

91 const command = event.input?.command;

92 return typeof command === 'string' ? command : null;

93}

95function notify(ctx: Pick<HarnessContext, 'hasUI' | 'ui'>, message: string, level: 'info' | 'warning' | 'error' = 'info'): void {

96 if (ctx.hasUI) {

97 ctx.ui.notify(message, level);

98 }

99}

100

101async function defaultResolveRepoContext(exec: ExtensionHarnessAdapter['exec'], cwd: string): Promise<RepoContext> {

102 const rootResult = await exec('git rev-parse --show-toplevel', {

103 cwd,

High

Child Process

Package source references child process execution.

extension/post-merge-update.tsView on unpkg · L101

104 timeout: REPO_RESOLUTION_TIMEOUT_MS,

105 });

106 if (rootResult.code !== 0) {

107 return { repoRoot: null, repoSlug: null };

108 }

109

110 const repoRoot = trimToNull(rootResult.stdout);

111 if (!repoRoot) {

112 return { repoRoot: null, repoSlug: null };

113 }

114

115 const remoteResult = await exec('git config --get remote.origin.url', {

116 cwd: repoRoot,

117 timeout: REPO_RESOLUTION_TIMEOUT_MS,

118 });

119 if (remoteResult.code !== 0) {

120 return { repoRoot, repoSlug: null };

121 }

scripts/loop/ui-review-provision.mjsView file

Lines 134-174javascript

134

135/**

136 * Ensure the worktree owns its node_modules before installing. linkOnInit can

137 * symlink node_modules into the primary checkout; running `npm install` through

138 * that symlink would write into the primary's real node_modules — mutating

139 * shared deps. Replace a symlinked node_modules with a real (empty) directory so

140 * the install is isolated to the worktree, leaving the primary untouched.

141 *

142 * Note: materializing to an empty dir makes `npm install` reinstall the full

143 * tree (not just the lock delta). If that install cost matters, copy the

144 * primary's real node_modules into the worktree first for an incremental

scripts/github/build-adjacent-bundle.mjsView file

Lines 94-134javascript

94 return BINARY_EXTENSIONS.has(base.slice(dot).toLowerCase());

95}

97/**

98 * Heuristic binary-content sniff: a NUL byte within the first 8KB marks the

99 * file as binary regardless of extension (covers extension-less binaries).

100 * @param {Buffer} buf

101 * @returns

scripts/loop/inspect-run-viewer/vendor/mermaid.min.jsView file

•path = scripts/loop/inspect-run-viewer/vendor/mermaid.min.js kind = oversized_source_file sizeBytes = 3312967 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

scripts/loop/inspect-run-viewer/vendor/mermaid.min.jsView on unpkg

Lines 196-236javascript

196 }

197 const pending = out.split("\n").map((l) => l.trim()).filter((l) => l.length > 0);

198 const re = new RegExp(recipe.migrate.destructivePattern, "iu");

199 const destructive = pending.filter((l) => re.test(l));

200 return Promise.resolve({ pending, destructive, detail: `${pending.length} line(s) from status` });

201}

202

203function applyMigrations({ recipe, runCwd }) {

204 const cwd = runCwd;

205 try {

206 runShell(recipe.migrate.applyCommand, cwd);

207 return Promise.resolve({ ok: true, applied: 1, detail: "apply command ran" });

208 } catch (err) {

209 const msg = (err.stderr ?? err.message ?? "migration apply failed").toString().trim();

210 return Promise.resolve({ ok: false, applied: 0, detail: `apply failed: ${msg}` });

211 }

212}

213

214/** Spawn the boot command detached so the app stays up after this CLI exits. */

215function bootApp({ recipe, runCwd }) {

216 const cwd = runCwd;

217 const child = spawn(recipe.command, { cwd, shell: true, detached: true, stdio: "ignore" });

218 child.unref();

High

Shell

Package source references shell execution.

scripts/loop/ui-review-provision.mjsView on unpkg · L216

219 return Promise.resolve({ pid: child.pid ?? null, detail: `spawned: ${recipe.command}` });

220}

221

222/** HTTP(S) readiness probe: resolve true on a 2xx/3xx response, false otherwise. */

223function probe(url) {

224 return new Promise((resolve) => {

225 let client;

226 try {

227 client = new URL(url).protocol === "https:" ? https : http;

228 } catch {

229 resolve(false);

230 return;

231 }

232 const req = client.get(url, (res) => {

233 const ok = typeof res.statusCode === "number" && res.statusCode >= 200 && res.statusCode < 400;

234 res.resume();

235 resolve(ok);

236 });