registry  /  strikethroo  /  3.7.0

strikethroo@3.7.0

Task management for AI coding assistants

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 215 file(s), 5.18 MB of source, external domains: base-ui.com, chevrotain.io, en.wikipedia.org, github.com, jquery.org, langium.org, lodash.com, mateuaguilo.com, openjsf.org, reactjs.org, tldrlegal.com, underscorejs.org, www.w3.org

Source & flagged code

1 flagged · loading source
dist/prompts.jsView file
13exports.promptForConflicts = promptForConflicts; L14: const inquirer_1 = __importDefault(require("inquirer")); L15: const diff_1 = require("diff");
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/prompts.jsView on unpkg · L13

Findings

5 Medium7 Low
MediumDynamic Requiredist/prompts.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings