registry / getleash / 0.7.0

getleash@0.7.0

See what your Claude Code agents did last night. Fleet report, costs, loops, dead crons — in 10 seconds. Free cloud dashboard across machines.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 58.1 KB of source, external domains: getleash.vercel.app, github.com

Source & flagged code

1 flagged

dist/index.jsView file

Lines 8-48javascript

8var __hasOwnProp = Object.prototype.hasOwnProperty;

9var __commonJS = (cb, mod) => function __require() {

10 return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

11};

12var __copyProps = (to, from, except, desc) => {

13 if (from && typeof from === "object" || typeof from === "function") {

14 for (let key of __getOwnPropNames(from))

15 if (!__hasOwnProp.call(to, key) && key !== except)

16 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

17 }

18 return to;

19};

20var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

21 // If the importer is in node compatibility mode or this is not an ESM

22 // file that has been converted to a CommonJS file using a Babel-

23 // compatible transform (i.e. "__esModule" has not been set), then set

24 // "default" to the CommonJS "module.exports" for node compatibility.

25 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

26 mod

27));

29// package.json

30var require_package = __commonJS({

31 "package.json"(exports2, module2) {

32 module2.exports = {

33 name: "getleash",

34 version: "0.7.0",

35 description: "See what your Claude Code agents did last night. Fleet report, costs, loops, dead crons \u2014 in 10 seconds. Free cloud dashboard across machines.",

36 keywords: [

37 "claude-code",

38 "agents",

39 "observability",

40 "cost",

41 "monitoring",

42 "cron",

43 "launchd"

44 ],

45 license: "MIT",

46 repository: {

47 type: "git",

48 url: "git+https://github.com/VicKayro/leash.git"

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L28

Source & flagged code

1 flagged · loading source

dist/index.jsView file

28L29: // package.json L30: var require_package = __commonJS({ ... L47: type: "git", L48: url: "git+https://github.com/VicKayro/leash.git" L49: }, ... L110: function configDir() { L111: return process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), ".claude"); L112: } ... L119: let h = 5381; L120: for (let i = 0; i < s.length; i++) h = (h << 5) + h + s.charCodeAt(i) | 0; L121: return h.toString(36);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L28

Findings

3 Medium4 Low

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/index.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 8-48javascript

8var __hasOwnProp = Object.prototype.hasOwnProperty;

9var __commonJS = (cb, mod) => function __require() {

10 return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

11};

12var __copyProps = (to, from, except, desc) => {

13 if (from && typeof from === "object" || typeof from === "function") {

14 for (let key of __getOwnPropNames(from))

15 if (!__hasOwnProp.call(to, key) && key !== except)

16 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

17 }

18 return to;

19};

20var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

21 // If the importer is in node compatibility mode or this is not an ESM

22 // file that has been converted to a CommonJS file using a Babel-

23 // compatible transform (i.e. "__esModule" has not been set), then set

24 // "default" to the CommonJS "module.exports" for node compatibility.

25 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

26 mod

27));

29// package.json

30var require_package = __commonJS({

31 "package.json"(exports2, module2) {

32 module2.exports = {

33 name: "getleash",

34 version: "0.7.0",

35 description: "See what your Claude Code agents did last night. Fleet report, costs, loops, dead crons \u2014 in 10 seconds. Free cloud dashboard across machines.",

36 keywords: [

37 "claude-code",

38 "agents",

39 "observability",

40 "cost",

41 "monitoring",

42 "cron",

43 "launchd"

44 ],

45 license: "MIT",

46 repository: {

47 type: "git",

48 url: "git+https://github.com/VicKayro/leash.git"

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L28