registry / pantheon-cli / 0.2.59

pantheon-cli@0.2.59

Carry agent conscience between AI coding agents. Hand off a conversation in one agent, resume it in another.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.69 MB of source, external domains: fetch.spec.whatwg.org, github.com, json-schema.org, mimesniff.spec.whatwg.org, pantheon-ui-web.vercel.app, raw.githubusercontent.com, spec.openapis.org, stackoverflow.com, tools.ietf.org, webidl.spec.whatwg.org, www.pantheonvault.space, www.safaribooksonline.com, www.w3.org

Source & flagged code

2 flagged

dist/pantheon.mjsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/pantheon.mjs: // ../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/code.js "../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/code.js"(exports) { // ../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/scope.js "../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/scope.js"(exports) { // ../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/index.js "../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/codegen/index.js"(exports) { // ../../node_modules/.pnpm/ajv@8.20.0/node_modules/ajv/dist/compile/util.js "../../node_modules/.pnp

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/pantheon.mjsView on unpkg

2953sourceCode = this.opts.code.process(sourceCode, sch); L2954: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2955: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pantheon.mjsView on unpkg · L2953

Source & flagged code

2 flagged · loading source

dist/pantheon.mjsView file

pantheon-cli@0.2.59

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code