registry / sentrik / 1.7.0

sentrik@1.7.0

Governance runtime for AI-generated code. Scan, gate, and trace compliance automatically.

Static Scan Results

scanned 20h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

UrlStrings

Manifest

NoLicense

scanned 2 file(s), 6.96 KB of source, external domains: docs.sentrik.dev, github.com

Source & flagged code

3 flagged

package.jsonView file

Lines 21-47json

21 "homepage": "https://sentrik.dev",

22 "bugs": {

23 "url": "https://github.com/maxgerhardson/sentrik-community/issues"

24 },

25 "repository": {

26 "type": "git",

27 "url": "https://github.com/maxgerhardson/sentrik-community.git"

28 },

29 "license": "SEE LICENSE IN LICENSE_PROPRIETARY.txt",

30 "author": "Max Gerhardson",

31 "files": [

32 "run.js",

33 "install.js",

34 "README.md",

35 "LICENSE_PROPRIETARY.txt"

36 ],

37 "bin": {

38 "sentrik": "run.js"

39 },

40 "scripts": {

41 "postinstall": "node install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L41

42 },

43 "engines": {

44 "node": ">=16"

45 }

46}

install.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2"use strict";

4/**

5 * postinstall script — downloads the platform-specific Sentrik binary

6 * from GitHub Releases.

7 */

9const fs = require("fs");

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code