devrites: Suspicious npm security report (Warn)

Loading npm security reports…

Source & flagged code

3 flagged

engine/internal/lib/adoption_test.goView file

Lines 29-69text

29 mustWrite(t, filepath.Join(root, "archive", "large", "decisions.md"), decision)

30 var out, err bytes.Buffer

32 if code := Decisions(root, []string{"index"}, &out, &err); code != 0 {

33 t.Fatalf("code=%d stderr=%s", code, err.String())

34 }

35 indexed, readErr := os.ReadFile(filepath.Join(root, "decisions-index.jsonl"))

36 if readErr != nil {

37 t.Fatal(readErr)

38 }

39 if !bytes.Contains(indexed, []byte("searchable-tail")) {

40 t.Fatal("long decision was silently omitted from the index")

41 }

42}

44func TestSecretScanBlocksHighSeverityTouchedFile(t *testing.T) {

45 project := t.TempDir()

46 root := filepath.Join(project, ".devrites")

47 mustWrite(t, filepath.Join(root, "ACTIVE"), "leak\n")

48 mustWrite(t, filepath.Join(root, "work", "leak", "touched-files.md"), "- secrets.txt\n")

49 mustWrite(t, filepath.Join(project, "secrets.txt"), "token=ghp_abcdefghijklmnopqrstuvwxyzABCDE12345\n")

Critical

Critical Secret

Package contains a critical-looking secret pattern.

engine/internal/lib/adoption_test.goView on unpkg · L49

Critical

Secret Pattern

GitHub personal access token in engine/internal/lib/adoption_test.go

engine/internal/lib/adoption_test.goView on unpkg · L49

50 var out, err bytes.Buffer

51 if code := SecretScan(root, nil, &out, &err); code != 3 {

52 t.Fatalf("want block rc=3 got %d stdout=%s stderr=%s", code, out.String(), err.String())

53 }

54}

56func TestSpecDedupeSearchesScratchPRDs(t *testing.T) {

57 project := t.TempDir()

58 root := filepath.Join(project, ".devrites")

59 mustWrite(t, filepath.Join(project, ".scratch", "webhooks", "PRD.md"), "# Webhook retries\nAdd retry backoff for failed webhooks.\n")

60 var out, err bytes.Buffer

61 if code := SpecDedupe(root, []string{"webhook", "retry", "backoff"}, &out, &err); code != 0 {

62 t.Fatalf("code=%d stderr=%s", code, err.String())

63 }

64 if !strings.Contains(out.String(), ".scratch/webhooks/PRD.md") {

65 t.Fatalf("missing dedupe hit:\n%s", out.String())

66 }

67}

69func TestBoundedCommandOutputStopsLongRunningProcess(t *testing.T) {

uninstall.shView file

•path = uninstall.sh kind = build_helper sizeBytes = 1612 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

uninstall.shView on unpkg

Source & flagged code

3 flagged · loading source

engine/internal/lib/adoption_test.goView file

49patternName = github_pat severity = critical line = 49 matchedText = mustWrit...\n")

Critical

Critical Secret

Package contains a critical-looking secret pattern.

engine/internal/lib/adoption_test.goView on unpkg · L49

49patternName = github_pat severity = critical line = 49 matchedText = mustWrit...\n")

Critical

Secret Pattern

GitHub personal access token in engine/internal/lib/adoption_test.go

engine/internal/lib/adoption_test.goView on unpkg · L49

uninstall.shView file

•path = uninstall.sh kind = build_helper sizeBytes = 1612 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

uninstall.shView on unpkg

devrites: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

3 flagged

engine/internal/lib/adoption_test.goView file

Lines 29-69text

29 mustWrite(t, filepath.Join(root, "archive", "large", "decisions.md"), decision)

30 var out, err bytes.Buffer

32 if code := Decisions(root, []string{"index"}, &out, &err); code != 0 {

33 t.Fatalf("code=%d stderr=%s", code, err.String())

34 }

35 indexed, readErr := os.ReadFile(filepath.Join(root, "decisions-index.jsonl"))

36 if readErr != nil {

37 t.Fatal(readErr)

38 }

39 if !bytes.Contains(indexed, []byte("searchable-tail")) {

40 t.Fatal("long decision was silently omitted from the index")

41 }

42}

44func TestSecretScanBlocksHighSeverityTouchedFile(t *testing.T) {

45 project := t.TempDir()

46 root := filepath.Join(project, ".devrites")

47 mustWrite(t, filepath.Join(root, "ACTIVE"), "leak\n")

48 mustWrite(t, filepath.Join(root, "work", "leak", "touched-files.md"), "- secrets.txt\n")

49 mustWrite(t, filepath.Join(project, "secrets.txt"), "token=ghp_abcdefghijklmnopqrstuvwxyzABCDE12345\n")

Critical

Critical Secret

Package contains a critical-looking secret pattern.

engine/internal/lib/adoption_test.goView on unpkg · L49

Critical

Secret Pattern

GitHub personal access token in engine/internal/lib/adoption_test.go

engine/internal/lib/adoption_test.goView on unpkg · L49

50 var out, err bytes.Buffer

51 if code := SecretScan(root, nil, &out, &err); code != 3 {

52 t.Fatalf("want block rc=3 got %d stdout=%s stderr=%s", code, out.String(), err.String())

53 }

54}

56func TestSpecDedupeSearchesScratchPRDs(t *testing.T) {

57 project := t.TempDir()

58 root := filepath.Join(project, ".devrites")

59 mustWrite(t, filepath.Join(project, ".scratch", "webhooks", "PRD.md"), "# Webhook retries\nAdd retry backoff for failed webhooks.\n")

60 var out, err bytes.Buffer

61 if code := SpecDedupe(root, []string{"webhook", "retry", "backoff"}, &out, &err); code != 0 {

62 t.Fatalf("code=%d stderr=%s", code, err.String())

63 }

64 if !strings.Contains(out.String(), ".scratch/webhooks/PRD.md") {

65 t.Fatalf("missing dedupe hit:\n%s", out.String())

66 }

67}

69func TestBoundedCommandOutputStopsLongRunningProcess(t *testing.T) {

uninstall.shView file

•path = uninstall.sh kind = build_helper sizeBytes = 1612 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

uninstall.shView on unpkg

devrites@3.0.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code