registry / openstylus / 0.3.0

openstylus@0.3.0

Brand-neutral, code-on-disk canvas for iterating on rendered React/CSS assets. One local node-24 process hosts a Streamable-HTTP canvas-loop MCP + a first-party SSE channel + the web UI over one node:sqlite sidecar; the engine is config-parameterized and

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

CopyleftLicense

scanned 108 file(s), 2.10 MB of source, external domains: github.com, html.spec.whatwg.org, pro.reactflow.dev, reactflow.dev, reactjs.org, storybook.js.org, testing-library.com, testing-playground.com, www.w3.org

Source & flagged code

2 flagged

dist/web/assets/realm-CH8qO-W7.jsView file

256patternName = generic_password severity = medium line = 256 matchedText = `+t),t},...r"?`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/web/assets/realm-CH8qO-W7.jsView on unpkg · L256

dist/ds/manifest.jsView file

Lines 244-284javascript

244}

245/**

246 * Read a manifest from disk and validate it. Two formats, one recommendation:

247 * • `.json` — THE convention (every shipped DS uses it): an inert declaration, re-read fresh on every

248 * projection, statically reviewable (the diff IS the declaration), `$schema`-validated in editors,

249 * and readable by tools that must never execute the DS. The conformance gate's declaration-keyed

250 * behavior (e.g. the `kind:"asset"` exemption) rests on these bytes being deliberate and inert.

251 * • `.ts`/`.js` — the composition escape hatch (a module's `default` or `manifest` export) for a DS

252 * that legitimately computes/composes its declaration. EXECUTED to read; same Zod validation.

253 */

254export async function loadManifestFile(absPath) {

255 if (!existsSync(absPath)) {

256 return invalid([{ field: "(file)", message: `manifest not found at ${absPath}` }]);

257 }

258 let raw;

259 try {

260 if (absPath.endsWith(".json")) {

261 raw = JSON.parse(readFileSync(absPath, "utf8"));

262 }

263 else {

264 // Bust the ESM module cache with the file's mtime so an EDITED module manifest is re-read live —

265 // "re-derivation is registration" must hold for both formats (a plain `import(absPath)` freezes

266 // the first read for the life of the process). An unchanged file re-uses its cached module, so

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/ds/manifest.jsView on unpkg · L264

267 // module instances stay bounded by edit count. `pathToFileURL` keeps the specifier a real URL

268 // (a raw absolute path cannot carry a query and breaks on drive-letter platforms). The param is

269 // `t` — Vite's own HMR cache-bust convention, which its transform pipeline strips; an arbitrary

270 // query name is misread as a loader hint under a Vite-driven runtime (vitest), a plain opaque

271 // query under bare node either way.

272 // (Truncated to integer ms: a fractional mtime puts a `.` in the URL tail, which an esbuild-backed

273 // transform then misreads as the file extension → "Invalid loader value".)

274 const url = pathToFileURL(absPath);

275 url.searchParams.set("t", String(Math.trunc(statSync(absPath).mtimeMs)));

276 const mod = (await import(__rewriteRelativeImportExtension(url.href)));

277 raw = mod.default ?? mod.manifest;

278 }

279 }

280 catch (e) {

281 return invalid([{ field: "(file)", message: `could not read manifest: ${e.message}` }]);

282 }

283 return loadManifest(raw);

284}

Source & flagged code

2 flagged · loading source

dist/web/assets/realm-CH8qO-W7.jsView file

256patternName = generic_password severity = medium line = 256 matchedText = `+t),t},...r"?`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/web/assets/realm-CH8qO-W7.jsView on unpkg · L256

dist/ds/manifest.jsView file

264// Bust the ESM module cache with the file's mtime so an EDITED module manifest is re-read live — L265: // "re-derivation is registration" must hold for both formats (a plain `import(absPath)` freezes L266: // the first read for the life of the process). An unchanged file re-uses its cached module, so

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/ds/manifest.jsView on unpkg · L264

Findings

6 Medium7 Low

MediumSecret Patterndist/web/assets/realm-CH8qO-W7.js

MediumDynamic Requiredist/ds/manifest.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Source & flagged code

2 flagged

dist/web/assets/realm-CH8qO-W7.jsView file

256patternName = generic_password severity = medium line = 256 matchedText = `+t),t},...r"?`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/web/assets/realm-CH8qO-W7.jsView on unpkg · L256

dist/ds/manifest.jsView file

Lines 244-284javascript

244}

245/**

246 * Read a manifest from disk and validate it. Two formats, one recommendation:

247 * • `.json` — THE convention (every shipped DS uses it): an inert declaration, re-read fresh on every

248 * projection, statically reviewable (the diff IS the declaration), `$schema`-validated in editors,

249 * and readable by tools that must never execute the DS. The conformance gate's declaration-keyed

250 * behavior (e.g. the `kind:"asset"` exemption) rests on these bytes being deliberate and inert.

251 * • `.ts`/`.js` — the composition escape hatch (a module's `default` or `manifest` export) for a DS

252 * that legitimately computes/composes its declaration. EXECUTED to read; same Zod validation.

253 */

254export async function loadManifestFile(absPath) {

255 if (!existsSync(absPath)) {

256 return invalid([{ field: "(file)", message: `manifest not found at ${absPath}` }]);

257 }

258 let raw;

259 try {

260 if (absPath.endsWith(".json")) {

261 raw = JSON.parse(readFileSync(absPath, "utf8"));

262 }

263 else {

264 // Bust the ESM module cache with the file's mtime so an EDITED module manifest is re-read live —

265 // "re-derivation is registration" must hold for both formats (a plain `import(absPath)` freezes

266 // the first read for the life of the process). An unchanged file re-uses its cached module, so

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/ds/manifest.jsView on unpkg · L264

267 // module instances stay bounded by edit count. `pathToFileURL` keeps the specifier a real URL

268 // (a raw absolute path cannot carry a query and breaks on drive-letter platforms). The param is

269 // `t` — Vite's own HMR cache-bust convention, which its transform pipeline strips; an arbitrary

270 // query name is misread as a loader hint under a Vite-driven runtime (vitest), a plain opaque

271 // query under bare node either way.

272 // (Truncated to integer ms: a fractional mtime puts a `.` in the URL tail, which an esbuild-backed

273 // transform then misreads as the file extension → "Invalid loader value".)

274 const url = pathToFileURL(absPath);

275 url.searchParams.set("t", String(Math.trunc(statSync(absPath).mtimeMs)));

276 const mod = (await import(__rewriteRelativeImportExtension(url.href)));

277 raw = mod.default ?? mod.manifest;

278 }

279 }

280 catch (e) {

281 return invalid([{ field: "(file)", message: `could not read manifest: ${e.message}` }]);

282 }

283 return loadManifest(raw);

284}