registry / pi-harness-runtime / 0.9.13

pi-harness-runtime@0.9.13

[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.

Static Scan Results

scanned 24d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 599 file(s), 2.66 MB of source, external domains: 127.0.0.1, api.dicebear.com, api.myai.example.com, api.openai.com, api.telegram.org, ntfy.sh, picsum.photos, platform.minimax.io, registry.npmjs.org

Source & flagged code

2 flagged

harness/e2e/playwright-runner.tsView file

Lines 149-189typescript

149 await this.page.waitForSelector(selector, {

150 timeout: timeoutMs ?? this.config.timeout,

151 });

152 }

153

154 /**

155 * Take a screenshot

156 */

157 async screenshot(path: string): Promise<void> {

158 if (!this.page) throw new Error("Browser not started");

159 await this.page.screenshot({ path, fullPage: true });

160 }

161

162 /**

163 * Assert a condition

164 */

165 async assert(condition: string, message?: string): Promise<boolean> {

166 if (!this.page) throw new Error("Browser not started");

167

168 const result = await this.page.evaluate((cond: unknown) => {

169 // eslint-disable-next-line no-eval

170 return eval(String(cond)) as boolean; // eslint-disable-line

171 }, condition);

Low

Eval

Package source references a known benign dynamic code generation pattern.

harness/e2e/playwright-runner.tsView on unpkg · L169

172

173 if (!result && message) {

174 throw new Error(message);

175 }

176

177 return result;

178 }

179

180 /**

181 * Get the underlying page for advanced operations

182 */

183 getPage() {

184 return this.page;

185 }

186

187 /**

188 * Start tracing for debugging

189 */

packages/mcp-adapter/dist/server.jsView file

Lines 124-164javascript

124 ];

125 const result = { prompts };

126 return { jsonrpc: "2.0", id, result };

127 }

128 case "ping": {

129 return {

Source & flagged code

2 flagged · loading source

harness/e2e/playwright-runner.tsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code