registry / pricekit / 0.1.0

pricekit@0.1.0

Pricing copilot for Dodo Payments credit billing — recommends your pricing model, computes the numbers in the open, provisions test-mode billing, and verifies the wiring.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 32.8 KB of source, external domains: github.com

Source & flagged code

2 flagged

bin/pricekit.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2// pricekit CLI entry point. Dispatches to the tsx-run scripts so the published

3// package needs no build step — just this shebang + tsx as a real dependency.

4import { fileURLToPath } from "node:url";

5import { dirname, join } from "node:path";

6import

Source & flagged code

2 flagged · loading source

bin/pricekit.jsView file

5import { dirname, join } from "node:path"; L6: import { spawn } from "node:child_process"; L7:

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code