registry / kcgrouter / 0.2.1

kcgrouter@0.2.1

Lightweight AI proxy gateway — route chat completions to upstream providers

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 153 file(s), 565 KB of source, external domains: api.anthropic.com, api.commandcode.ai, api.openai.com, api.xiaomimimo.com, codewhisperer.us-east-1.amazonaws.com, generativelanguage.googleapis.com, q.us-east-1.amazonaws.com, www.w3.org

Source & flagged code

3 flagged

src/cli/daemon.tsView file

Lines 14-54typescript

14 process.kill(pid, 0);

15 return true;

16 } catch {

17 return false;

18 }

19}

21export function getPid(): number | null {

22 try {

23 return Number.parseInt(readFileSync(PID_FILE, "utf-8").trim(), 10);

24 } catch {

25 return null;

26 }

27}

29/** Spawn daemon without exiting — used by menu auto-start */

30export function spawnDaemon(cwd: string): number | null {

31 if (isRunning()) return getPid();

33 mkdirSync(KCGRouter_HOME, { recursive: true });

35 const child = spawn(["nohup", "bun", "src/index.ts"], {

36 cwd,

High

Child Process

Package source references child process execution.

src/cli/daemon.tsView on unpkg · L34

37 stdio: ["ignore", "ignore", "ignore"],

38 detached: true,

39 env: { ...process.env, NODE_ENV: "production" },

40 });

42 writeFileSync(PID_FILE, String(child.pid));

43 child.unref();

44 return child.pid;

45}

47/** Spawn daemon and exit — used by `kcgrouter --daemon` CLI flag */

48export function startDaemon(cwd: string) {

49 const pid = spawnDaemon(cwd);

50 if (pid && !isRunning()) {

51 console.log(`\n Server failed to start. Check ${LOG_FILE}\n`);

52 return;

53 }

54 console.log(`\n Server started in background (PID: ${pid})`);

src/cli/menu.tsView file

Lines 139-179typescript

139 p.note(

140 `Status: ${GREEN}Running${R}\nPID: ${info.pid}\nUptime: ${info.uptime}\nURL: http://localhost:${port}\nLog: ~/.kcgrouter/server.log`

Source & flagged code

3 flagged · loading source

src/cli/daemon.tsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code