registry / orizu / 0.5.0

orizu@0.5.0

Orizu is a platform that helps you build continually learning agents and other LLM applications. It does so in a scientific, measurable manner by first helping you build evals and then helping you hill climb on them.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 95 file(s), 1.57 MB of source, external domains: 127.0.0.1, docs.orizu.ai, fonts.googleapis.com, github.com, orizu.ai, preview.example.com, www.w3.org

Source & flagged code

6 flagged

dist/hosted-runtime-assets.jsView file

Lines 189-217javascript

189 const insecureHosts = Array.isArray(ctx.insecureHttpHosts)

190 ? ctx.insecureHttpHosts.map(function (h) { return String(h).toLowerCase() })

191 : []

192 const httpAllowed = protocol === 'http' && insecureHosts.indexOf(host) !== -1

193 if (protocol && protocol !== 'https' && !httpAllowed) { log('refusing non-https protocol'); return 0 }

194 const expectedHost = String(ctx.host || 'github.com').toLowerCase()

195 if (host && host !== expectedHost) { log('refusing host ' + host); return 0 }

196

197 const bufferMs = typeof ctx.cacheBufferMs === 'number' ? ctx.cacheBufferMs : ${DEFAULT_CACHE_REFRESH_BUFFER_MS}

198 let cred = readCache(ctx.cacheFile, Date.now(), bufferMs)

199 if (!cred) {

200 try { cred = await mint(ctx) } catch (e) { log('mint failed: ' + (e && e.message)); return 1 }

201 writeCache(ctx.cacheFile, cred)

202 }

203

204 for (const key of Object.keys(input)) {

205 if (key === 'username' || key === 'password') continue

206 process.stdout.write(key + '=' + input[key] + '\\n')

207 }

208 process.stdout.write('username=' + cred.username + '\\n')

209 process.stdout.write('password=' + cred.password + '\\n')

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/hosted-runtime-assets.jsView on unpkg · L209

210 process.stdout.write('\\n')

211 return 0

212}

213

214main().then(code => process.exit(code)).catch(e => { log('fatal: ' + (e && e.message)); process.exit(1) })

215`;

216}

217

dist/workspace-sync.jsView file

Lines 26-66javascript

26 * and updates tracked-resource records; there is no read-only remote

27 * status in v0, spec §3.1 — but never writes local cache), `sync`

28 * (metadata-first; cache base advances ONLY on a `clean`

29 * convergence-confirmation), `pull` (metadata fast-forward, only when the

dist/hosted-harness-claude.jsView file

Lines 83-123javascript

83 * 6. The resumable agent session id is assigned LAZILY by the SDK at

84 * `system/init` — it does not exist before the first `runPrompt`. So

85 * `start()` returns the RESUME id if given, else `''`; the real id first

86 * reaches the bridge via the `ready`

dist/hosted-loop.jsView file

Lines 192-232javascript

192 return secrets;

193}

194/**

195 * Decide whether the loop is running the PRE-BAKED runtime image (ALI-1017).

196 * Prefers the explicit boot-context flag (the host KNOWS the image it passed);

197 * falls back to a belt read of the `/opt/orizu/prebaked.json` marker (validated

198 * via `parsePrebakedMarker`, so a stray file cannot trigger a skip). Either → true.

199 */

200function detectLoopPrebaked(flag) {

201

vendor/orizu-gepa-python/src/orizu_gepa/runner.pyView file

•path = vendor/orizu-gepa-python/src/orizu_gepa/runner.py kind = build_helper sizeBytes = 7381 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/orizu-gepa-python/src/orizu_gepa/runner.pyView on unpkg

src/hosted-runtime-assets.tsView file

Lines 245-273typescript

245 const insecureHosts = Array.isArray(ctx.insecureHttpHosts)

246 ? ctx.insecureHttpHosts.map(function (h) { return String(h).toLowerCase() })

247 : []

248 const httpAllowed = protocol

Source & flagged code

6 flagged · loading source

dist/hosted-runtime-assets.jsView file

209patternName = generic_password severity = medium line = 209 matchedText = process....\n')

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/hosted-runtime-assets.jsView on unpkg · L209

dist/workspace-sync.jsView file

46*/ L47: import { spawnSync } from 'child_process'; L48: import { createHash } from 'crypto';

High

Child Process

Package source references child process execution.

dist/workspace-sync.jsView on unpkg · L46

dist/hosted-harness-claude.jsView file

103const specifier = CLAUDE_AGENT_SDK_SPECIFIER; L104: const mod = (await import(specifier)); L105: if (!mod || typeof mod.query !== 'function') {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/hosted-harness-claude.jsView on unpkg · L103

dist/hosted-loop.jsView file

212function installOpenCodePinned(version) { L213: const command = `bun add -g opencode-ai@${version} >/dev/null 2>&1 || ` + L214: `npm install -g opencode-ai@${version} >/dev/null 2>&1`; L215: const res = spawnSync('bash', ['-c', command], { encoding: 'utf8' }); L216: const ok = (res.status ?? 1) === 0;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/hosted-loop.jsView on unpkg · L212

vendor/orizu-gepa-python/src/orizu_gepa/runner.pyView file

•path = vendor/orizu-gepa-python/src/orizu_gepa/runner.py kind = build_helper sizeBytes = 7381 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/orizu-gepa-python/src/orizu_gepa/runner.pyView on unpkg

src/hosted-runtime-assets.tsView file

265patternName = generic_password severity = medium line = 265 matchedText = process....\n')

Medium

Secret Pattern

Hardcoded password in src/hosted-runtime-assets.ts

src/hosted-runtime-assets.tsView on unpkg · L265

Findings

3 High7 Medium5 Low

HighChild Processdist/workspace-sync.js

HighShell

HighRuntime Package Installdist/hosted-loop.js

MediumSecret Patterndist/hosted-runtime-assets.js

MediumDynamic Requiredist/hosted-harness-claude.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpervendor/orizu-gepa-python/src/orizu_gepa/runner.py

MediumStructural Risk Force Deep Review

MediumSecret Patternsrc/hosted-runtime-assets.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

dist/hosted-runtime-assets.jsView file

Lines 189-217javascript

189 const insecureHosts = Array.isArray(ctx.insecureHttpHosts)

190 ? ctx.insecureHttpHosts.map(function (h) { return String(h).toLowerCase() })

191 : []

192 const httpAllowed = protocol === 'http' && insecureHosts.indexOf(host) !== -1

193 if (protocol && protocol !== 'https' && !httpAllowed) { log('refusing non-https protocol'); return 0 }

194 const expectedHost = String(ctx.host || 'github.com').toLowerCase()

195 if (host && host !== expectedHost) { log('refusing host ' + host); return 0 }

196

197 const bufferMs = typeof ctx.cacheBufferMs === 'number' ? ctx.cacheBufferMs : ${DEFAULT_CACHE_REFRESH_BUFFER_MS}

198 let cred = readCache(ctx.cacheFile, Date.now(), bufferMs)

199 if (!cred) {

200 try { cred = await mint(ctx) } catch (e) { log('mint failed: ' + (e && e.message)); return 1 }

201 writeCache(ctx.cacheFile, cred)

202 }

203

204 for (const key of Object.keys(input)) {

205 if (key === 'username' || key === 'password') continue

206 process.stdout.write(key + '=' + input[key] + '\\n')

207 }

208 process.stdout.write('username=' + cred.username + '\\n')

209 process.stdout.write('password=' + cred.password + '\\n')

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/hosted-runtime-assets.jsView on unpkg · L209

210 process.stdout.write('\\n')

211 return 0

212}

213

214main().then(code => process.exit(code)).catch(e => { log('fatal: ' + (e && e.message)); process.exit(1) })

215`;

216}

217

dist/workspace-sync.jsView file

Lines 26-66javascript

26 * and updates tracked-resource records; there is no read-only remote

27 * status in v0, spec §3.1 — but never writes local cache), `sync`

28 * (metadata-first; cache base advances ONLY on a `clean`

29 * convergence-confirmation), `pull` (metadata fast-forward, only when the

dist/hosted-harness-claude.jsView file

Lines 83-123javascript

83 * 6. The resumable agent session id is assigned LAZILY by the SDK at

84 * `system/init` — it does not exist before the first `runPrompt`. So

85 * `start()` returns the RESUME id if given, else `''`; the real id first

86 * reaches the bridge via the `ready`

dist/hosted-loop.jsView file

Lines 192-232javascript

192 return secrets;

193}

194/**

195 * Decide whether the loop is running the PRE-BAKED runtime image (ALI-1017).

196 * Prefers the explicit boot-context flag (the host KNOWS the image it passed);

197 * falls back to a belt read of the `/opt/orizu/prebaked.json` marker (validated

198 * via `parsePrebakedMarker`, so a stray file cannot trigger a skip). Either → true.

199 */

200function detectLoopPrebaked(flag) {

201

vendor/orizu-gepa-python/src/orizu_gepa/runner.pyView file

•path = vendor/orizu-gepa-python/src/orizu_gepa/runner.py kind = build_helper sizeBytes = 7381 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/orizu-gepa-python/src/orizu_gepa/runner.pyView on unpkg

src/hosted-runtime-assets.tsView file

Lines 245-273typescript

245 const insecureHosts = Array.isArray(ctx.insecureHttpHosts)

246 ? ctx.insecureHttpHosts.map(function (h) { return String(h).toLowerCase() })

247 : []

248 const httpAllowed = protocol