registry / opencode-orchestrator / 2.0.2

opencode-orchestrator@2.0.2

Multi-agent mission control for OpenCode with Commander, Planner, Worker, and Reviewer workflows.

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 374 KB of source

Source & flagged code

2 flagged

bin/orchestrator-macos-arm64View file

•path = bin/orchestrator-macos-arm64 kind = native_binary sizeBytes = 4614960 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/orchestrator-macos-arm64View on unpkg

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = opencode-orchestrator@2.0.6 matchedIdentity = npm:b3BlbmNvZGUtb3JjaGVzdHJhdG9y:2.0.6 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

2 flagged · loading source

bin/orchestrator-macos-arm64View file

•path = bin/orchestrator-macos-arm64 kind = native_binary sizeBytes = 4614960 magicHex = [redacted]

opencode-orchestrator@2.0.2

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code