registry / pi-antigravity-rotator / 2.3.1

pi-antigravity-rotator@2.3.1

Multi-account rotation proxy for Google Antigravity with per-model routing, real-time quota tracking, and infringement detection

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 603 KB of source, external domains: accounts.google.com, cdn.jsdelivr.net, daily-cloudcode-pa.googleapis.com, daily-cloudcode-pa.sandbox.googleapis.com, discord.gg, fonts.googleapis.com, github.com, ko-fi.com, oauth2.googleapis.com, registry.npmjs.org, support.google.com, telemetry.dragont.ec, www.googleapis.com

Source & flagged code

2 flagged

src/version-check.tsView file

Lines 1-23typescript

1// Version check and self-update functionality

2// Polls npm registry periodically to detect new releases

4import { execSync } from "node:child_process";

5import { readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

src/version-check.tsView on unpkg · L3

6import { join, dirname } from "node:path";

7import { fileURLToPath } from "node:url";

8import { logger } from "./logger.js";

10const versionLogger = logger.child("version-check");

12export interface UpdateInfo {

13 currentVersion: string;

14 latestVersion: string | null;

15 updateAvailable: boolean;

16 checkedAt: number;

17}

19const PACKAGE_NAME = "pi-antigravity-rotator";

20const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}`;

21const CHECK_INTERVAL_MS = 30 * 60 * 1000; // 30 minutes

23let cachedInfo: UpdateInfo = {

Lines 142-182typescript

142 * Stop periodic version checking.

143 */

144export function stopVersionChecker(): void {

145 if (checkTimer) {

146 clearInterval(checkTimer);

147 checkTimer = null;

148 }

149}

150

Source & flagged code

2 flagged · loading source

src/version-check.tsView file

3L4: import { execSync } from "node:child_process"; L5: import { readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

src/version-check.tsView on unpkg · L3

162const cmd = isGlobal L163: ? `npm install -g ${PACKAGE_NAME}@latest` L164: : `npm install ${PACKAGE_NAME}@latest`; ... L167: L168: const output = execSync(cmd, { L169: encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/version-check.tsView on unpkg · L162

Findings

3 High3 Medium4 Low

HighChild Processsrc/version-check.ts

HighShell

HighRuntime Package Installsrc/version-check.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

src/version-check.tsView file

Lines 1-23typescript

1// Version check and self-update functionality

2// Polls npm registry periodically to detect new releases

4import { execSync } from "node:child_process";

5import { readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

src/version-check.tsView on unpkg · L3

6import { join, dirname } from "node:path";

7import { fileURLToPath } from "node:url";

8import { logger } from "./logger.js";

10const versionLogger = logger.child("version-check");

12export interface UpdateInfo {

13 currentVersion: string;

14 latestVersion: string | null;

15 updateAvailable: boolean;

16 checkedAt: number;

17}

19const PACKAGE_NAME = "pi-antigravity-rotator";

20const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}`;

21const CHECK_INTERVAL_MS = 30 * 60 * 1000; // 30 minutes

23let cachedInfo: UpdateInfo = {

Lines 142-182typescript

142 * Stop periodic version checking.

143 */

144export function stopVersionChecker(): void {

145 if (checkTimer) {

146 clearInterval(checkTimer);

147 checkTimer = null;

148 }

149}

150