registry / hyn-view / 1.6.0

hyn-view@1.6.0

Network-first, ultra-low-overhead terminal system monitor for Ubuntu Server. Pure bash, zero runtime dependencies, themeable, with email/push alerting, daily reports, scheduled speed tests and read-only Highway (hw-os) node tracking.

AI Security Review

scanned 14d ago · by lpm-firewall-ai

The manifest contains no install lifecycle hook, and the inspected entrypoint loads package-local libraries. The flagged Python file is test infrastructure; the inspected evidence does not establish malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

Running the installed CLI or its test scripts.

Impact

No confirmed harmful effect.

Mechanism

The CLI loads local shell libraries; the flagged Python file is a local test HTTP mock. No malicious behavior was established.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a CLI and has no preinstall, install, or postinstall hook.
The flagged Python file identifies itself as a local test mock and uses Python's HTTP server.
The CLI resolves its install directory and loads package-local shell libraries.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

Source & flagged code

6 flagged

test/cloud-mock.pyView file

Lines 1-21text

1"""Local PostgREST mock used by test/cloud-integration.sh."""

3import base64

4import json

5import sys

6from http.server import BaseHTTPRequestHandler, HTTPServer

9LOG = sys.argv[2]

10state = {"polls": 0, "node_status": "active"}

Low

Ai Review Evidence

The flagged Python file identifies itself as a local test mock and uses Python's HTTP server.

test/cloud-mock.pyView on unpkg · L1

13class Handler(BaseHTTPRequestHandler):

14 def log_message(self, *args):

15 pass

17 def do_GET(self):

18 # Test-only lever to flip the node's administrative status.

19 if self.path.startswith("/status/"):

20 state["node_status"] = self.path.rsplit("/", 1)[-1]

21 self.send_response(200)

•path = test/cloud-mock.py kind = payload_in_excluded_dir sizeBytes = 5633 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/cloud-mock.pyView on unpkg

•path = test/cloud-mock.py kind = build_helper sizeBytes = 5633 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

test/cloud-mock.pyView on unpkg

bin/hynView file

Lines 12-52text

12if ((BASH_VERSINFO[0] < 4 || (BASH_VERSINFO[0] == 4 && BASH_VERSINFO[1] < 3))); then

13 printf 'hyn: needs bash 4.3 or newer (found %s)\n' "${BASH_VERSION:-unknown}" >&2

14 exit 1

15fi

17# Resolve through symlinks: npm installs the command as a symlink in the global

18# bin dir, so $0 is not where the library lives.

19_self=${BASH_SOURCE[0]}

20while [[ -L $_self ]]; do

21 _target=$(readlink "$_self")

22 if [[ $_target == /* ]]; then

23 _self=$_target

24 else

package.jsonView file

Lines 1-25json

2 "name": "hyn-view",

3 "version": "1.6.0",

4 "description": "Network-first, ultra-low-overhead terminal system monitor for Ubuntu Server. Pure bash, zero runtime dependencies, themeable, with email/push alerting, daily reports, scheduled speed tests and read-only Highway (hw-os) node tracking.",

5 "bin": {

Source & flagged code

6 flagged · loading source

test/cloud-mock.pyView file

•path = test/cloud-mock.py kind = payload_in_excluded_dir sizeBytes = 5633 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/cloud-mock.pyView on unpkg

•path = test/cloud-mock.py kind = build_helper sizeBytes = 5633 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

test/cloud-mock.pyView on unpkg

1"""Local PostgREST mock used by test/cloud-integration.sh.""" import base64 import json import sys from http.server import BaseHTTPRequestHandler, HTTPServer LOG = sys.argv[2] state = {"polls": 0, "node_status": "acti

Low

Ai Review Evidence

The flagged Python file identifies itself as a local test mock and uses Python's HTTP server.

test/cloud-mock.pyView on unpkg · L1

bin/hynView file

Findings

2 High2 Medium4 Low

HighPayload In Excluded Dirtest/cloud-mock.py

HighSemantic Analysis Limitedbin/hyn

MediumShips Build Helpertest/cloud-mock.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencetest/cloud-mock.py

LowAi Review Evidencebin/hyn

Affected versions and remediation

This report applies to hyn-view@1.6.0.

See all versions of hyn-view for other recorded verdicts.

Review the evidence and your use of hyn-view@1.6.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 19:15:45.353Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.