registry / peerllm-host-cli / 2.1.11

peerllm-host-cli@2.1.11

Command-line PeerLLM host: serve decentralized AI compute from a headless machine.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 71 file(s), 437 KB of source, external domains: 127.0.0.1, api.peerllm.com, huggingface.co, nodejs.org, registry.npmjs.org

Source & flagged code

2 flagged

dist/core/paths.jsView file

Lines 1-24javascript

1import { createHash } from "node:crypto";

2import { homedir, platform, userInfo } from "node:os";

3import { join, resolve } from "node:path";

4function platformConfigDir() {

5 const home = homedir();

6 switch (platform()) {

7 case "darwin":

8 return join(home, "Library", "Application Support", "PeerLLM");

9 case "win32":

10 return join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "PeerLLM");

11 default:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/paths.jsView on unpkg · L4

12 return join(process.env.XDG_CONFIG_HOME ?? join(home, ".config"), "PeerLLM");

13 }

14}

15function platformLogsDir() {

16 return join(homedir(), "PeerLLM", "logs");

17}

18function platformRuntimeDir(configDir) {

19 if (platform() === "linux" && process.env.XDG_RUNTIME_DIR) {

20 return join(process.env.XDG_RUNTIME_DIR, "peerllm");

21 }

22 return configDir;

23}

24function ipcEndpointName(configDir, overridden) {

templates/windows/install-service.ps1View file

•path = templates/windows/install-service.ps1 kind = build_helper sizeBytes = 1194 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/windows/install-service.ps1View on unpkg

Source & flagged code

2 flagged · loading source

dist/core/paths.jsView file

4function platformConfigDir() { L5: const home = homedir(); L6: switch (platform()) { ... L9: case "win32": L10: return join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "PeerLLM"); L11: default:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/paths.jsView on unpkg · L4

templates/windows/install-service.ps1View file

•path = templates/windows/install-service.ps1 kind = build_helper sizeBytes = 1194 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/windows/install-service.ps1View on unpkg

Findings

4 Medium6 Low

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpertemplates/windows/install-service.ps1

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/core/paths.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/core/paths.jsView file

Lines 1-24javascript

1import { createHash } from "node:crypto";

2import { homedir, platform, userInfo } from "node:os";

3import { join, resolve } from "node:path";

4function platformConfigDir() {

5 const home = homedir();

6 switch (platform()) {

7 case "darwin":

8 return join(home, "Library", "Application Support", "PeerLLM");

9 case "win32":

10 return join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "PeerLLM");

11 default:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/paths.jsView on unpkg · L4

12 return join(process.env.XDG_CONFIG_HOME ?? join(home, ".config"), "PeerLLM");

13 }

14}

15function platformLogsDir() {

16 return join(homedir(), "PeerLLM", "logs");

17}

18function platformRuntimeDir(configDir) {

19 if (platform() === "linux" && process.env.XDG_RUNTIME_DIR) {

20 return join(process.env.XDG_RUNTIME_DIR, "peerllm");

21 }

22 return configDir;

23}

24function ipcEndpointName(configDir, overridden) {

templates/windows/install-service.ps1View file

•path = templates/windows/install-service.ps1 kind = build_helper sizeBytes = 1194 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/windows/install-service.ps1View on unpkg