registry  /  quay-ai-factory  /  0.4.1

quay-ai-factory@0.4.1

Quay — Autonomous AI Software Factory. Self-hosted AI agents, MCP integration, customizable pipelines, real-time Mission Control dashboard, cost transparency, and full audit trails.

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 46 file(s), 218 KB of source, external domains: api.anthropic.com, api.cerebras.ai, api.groq.com, api.openai.com, api.together.xyz, generativelanguage.googleapis.com, github.com, openrouter.ai

Source & flagged code

2 flagged · loading source
scripts/test-quay.shView file
•path = scripts/test-quay.sh kind = build_helper sizeBytes = 27475 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/test-quay.shView on unpkg
src/server/agents/agentRunner.tsView file
•matchType = previous_version_dangerous_delta matchedPackage = quay-ai-factory@0.3.0 matchedIdentity = npm:cXVheS1haS1mYWN0b3J5:0.3.0 similarity = 0.977 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/server/agents/agentRunner.tsView on unpkg

Findings

1 High4 Medium5 Low
HighPrevious Version Dangerous Deltasrc/server/agents/agentRunner.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/test-quay.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings