registry / mycelium-mind / 0.1.0

mycelium-mind@0.1.0

Mycelium Mind is a fully offline, schema-driven, multi-vault compiler pipeline and wiki engine built on top of **Obsidian** and **MkDocs**, powered by local LLMs via an OpenAI-compatible API.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 24 file(s), 169 KB of source, external domains: cdnjs.cloudflare.com

Source & flagged code

1 flagged

build/utils/overview-runner.jsView file

Lines 1-21javascript

1import * as fs from 'fs';

2import * as path from 'path';

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

build/utils/overview-runner.jsView on unpkg · L1

3import vm from 'node:vm';

4import YAML from 'yaml';

5import { readFrontmatter } from './fs-utils.js';

6import { gitCommit } from './git.js';

7// Recursively find files

8function walkSync(dir, ext) {

9 let results = [];

10 if (!fs.existsSync(dir))

11 return results;

12 const list = fs.readdirSync(dir);

13 for (const file of list) {

14 const filePath = path.join(dir, file);

15 const stat = fs.statSync(filePath);

16 if (stat && stat.isDirectory()) {

17 results = results.concat(walkSync(filePath, ext));

18 }

19 else if (file.endsWith(ext)) {

20 results.push(filePath);

21 }

Source & flagged code

1 flagged · loading source

build/utils/overview-runner.jsView file

1import * as fs from 'fs'; L2: import * as path from 'path';

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

build/utils/overview-runner.jsView on unpkg · L1

Findings

3 Medium6 Low

MediumUnsafe Vm Contextbuild/utils/overview-runner.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

1 flagged

build/utils/overview-runner.jsView file

Lines 1-21javascript

1import * as fs from 'fs';

2import * as path from 'path';

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

build/utils/overview-runner.jsView on unpkg · L1

3import vm from 'node:vm';

4import YAML from 'yaml';

5import { readFrontmatter } from './fs-utils.js';

6import { gitCommit } from './git.js';

7// Recursively find files

8function walkSync(dir, ext) {

9 let results = [];

10 if (!fs.existsSync(dir))

11 return results;

12 const list = fs.readdirSync(dir);

13 for (const file of list) {

14 const filePath = path.join(dir, file);

15 const stat = fs.statSync(filePath);

16 if (stat && stat.isDirectory()) {

17 results = results.concat(walkSync(filePath, ext));

18 }

19 else if (file.endsWith(ext)) {

20 results.push(filePath);

21 }