registry / pi-harness-runtime / 0.3.1

pi-harness-runtime@0.3.1

[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 26 file(s), 155 KB of source

Source & flagged code

1 flagged

harness/e2e/playwright-runner.tsView file

Lines 222-253typescript

222 async evaluate<T>(fn: () => T): Promise<T> {

223 if (!this.page) throw new Error("Browser not started");

224 return this.page.evaluate(fn);

225 }

226

227 /**

228 * Get current URL

229 */

230 async getUrl(): Promise<string> {

231 if (!this.page) throw new Error("Browser not started");

232 return this.page.url();

233 }

234

235 /**

236 * Assert a condition

237 */

238 async assert(condition: string, message?: string): Promise<boolean> {

239 if (!this.page) throw new Error("Browser not started");

240

241 const result = await this.page.evaluate((cond: unknown) => {

242 // eslint-disable-next-line no-eval

243 return eval(String(cond)) as boolean; // eslint-disable-line

244 }, condition);

Low

Eval

Package source references a known benign dynamic code generation pattern.

harness/e2e/playwright-runner.tsView on unpkg · L242

245

246 if (!result && message) {

247 throw new Error(message);

248 }

249

250 return result;

251 }

252}

253

Source & flagged code

1 flagged · loading source

harness/e2e/playwright-runner.tsView file

242// eslint-disable-next-line no-eval L243: return eval(String(cond)) as boolean; // eslint-disable-line L244: }, condition);

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code