registry / relayfile / 0.10.32

relayfile@0.10.32

CLI for relayfile — real-time filesystem for humans and agents

Static Scan Results

scanned 12h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 7.29 KB of source, external domains: github.com

Source & flagged code

4 flagged

package.jsonView file

Lines 1-35json

2 "name": "relayfile",

3 "version": "0.10.32",

4 "description": "CLI for relayfile — real-time filesystem for humans and agents",

5 "bin": {

6 "relayfile": "scripts/run.js"

7 },

8 "files": [

9 "bin",

10 "scripts"

11 ],

12 "scripts": {

13 "build": "node scripts/build-binaries.js",

14 "prepack": "npm run build",

15 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L15

16 },

17 "publishConfig": {

18 "access": "public"

19 },

20 "repository": {

21 "type": "git",

22 "url": "git+https://github.com/AgentWorkforce/relayfile.git",

23 "directory": "packages/cli"

24 },

25 "license": "Apache-2.0",

26 "keywords": [

27 "relayfile",

28 "filesystem",

29 "sync",

30 "agent",

31 "collaboration",

32 "cli"

33 ],

34 "engines": {

35 "node": ">=18"

scripts/run.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { spawnSync } = require("child_process");

4const fs = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/run.js

bin/relayfile-cli-linux-amd64View file

•path = bin/relayfile-cli-linux-amd64 kind = native_binary sizeBytes = 8052888 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/relayfile-cli-linux-amd64View on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code