registry / llm-relay / 0.1.0

llm-relay@0.1.0

Loopback Anthropic-Messages-API proxy that validates and repairs tool-call responses in flight, routing across multi-provider LLM backends.

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 30 file(s), 182 KB of source, external domains: 127.0.0.1, aistudio.google.com, api.anthropic.com, api.cerebras.ai, api.groq.com, api.mistral.ai, api.openai.com, api.sambanova.ai, build.nvidia.com, cloud.cerebras.ai, cloud.sambanova.ai, console.anthropic.com, console.groq.com, generativelanguage.googleapis.com, integrate.api.nvidia.com, ollama.com, openrouter.ai, platform.openai.com, registry.npmjs.org

Source & flagged code

1 flagged

dist/self-update.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = llm-relay@0.0.14 matchedIdentity = npm:bGxtLXJlbGF5:0.0.14 similarity = 0.852 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/self-update.jsView on unpkg

Source & flagged code

1 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code