registry  /  reasoning.run  /  0.4.0

reasoning.run@0.4.0

A private reasoner for your terminal. Direct conversation or grounded multi-agent research, GPU-native and fully local. No API keys, no inference servers.

Static Scan Results

scanned 23h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 124 KB of source, external domains: apps.lloyal.ai, github.com, huggingface.co, models.lloyal.ai

Source & flagged code

1 flagged · loading source
package.jsonView file
•Remote tarball dependency specs: @lloyal-labs/corpus-app@https://apps.lloyal.ai/v1/bundles/lloyal__corpus-1.2.0.tgz, @lloyal-labs/web-app@https://apps.lloyal.ai/v1/bundles/lloyal__web-1.2.0.tgz
Medium
Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

3 Medium5 Low
MediumNetwork
MediumEnvironment Vars
MediumRemote Tarball Dependencypackage.json
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings