registry / sweet-search / 2.7.0

sweet-search@2.7.0

⚠ Under review

Local code search for AI agents: six fast, purpose-built tools that return ranked answers, not raw grep. Because maybe grep isn't all you need... 🍬

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 254 file(s), 5.56 MB of source, external domains: 127.0.0.1, api.cerebras.ai, api.groq.com, api.jina.ai, api.mistral.ai, api.voyageai.com, github.com, huggingface.co, nodejs.org

Source & flagged code

7 flagged

package.jsonView file

Lines 66-106json

66 "scripts/install-tool-enforcement.js",

67 "scripts/hooks/",

68 "core/training/query-router/features/",

69 "core/training/query-router/output/v45_router_d4.js",

70 "core/training/query-router/output/v46_router_d4.js",

71 "core/prompt-optimization/data/p7-final/",

72 "eval/agent-read-workflows/bin/ss-search"

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-banner.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

crates/wasm-router/pkg/query_router_wasm.jsView file

266const wasmPath = `${__dirname}/query_router_wasm_bg.wasm`; L267: const wasmBytes = require('fs').readFileSync(wasmPath); L268: const wasmModule = new WebAssembly.Module(wasmBytes);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

crates/wasm-router/pkg/query_router_wasm.jsView on unpkg · L266

core/indexing/index-codebase-v21.jsView file

35// enable. libuv reads this lazily on first thread pool use. L36: if (process.env.SWEET_SEARCH_UV_THREADPOOL_SIZE && !process.env.UV_THREADPOOL_SIZE) { L37: process.env.UV_THREADPOOL_SIZE = process.env.SWEET_SEARCH_UV_THREADPOOL_SIZE; ... L121: // Animated banner (best-effort; interactive TTY only, never in CI / quiet / stdin-fed runs). L122: if (!quiet && !help && !filesFromStdin && process.stdout.isTTY && !process.env.CI && !process.env.NO_BANNER && !process.env.SWEET_SEARCH_NO_BANNER) { L123: try { const { showBanner } = await import('../banner/render-banner.js'); await showBanner({ clear: true }); } catch { /* non-fatal */ } ... L136: } else { L137: applyPersistedLiModel(process.env.SWEET_SEARCH_PROJECT_ROOT || process.cwd()); L138: } ... L446: // form silently no-op'd under three real-world conditions: L447: // 1. `npm install ../sweet-search-private` (file install) symlinks L448: // `node_modules/sweet-search/` to the source — `process.argv[1]` is the

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

core/indexing/index-codebase-v21.jsView on unpkg · L35

core/search/search-fusion.jsView file

41if (result.name) return String(result.name); L42: if (process.env.DEBUG_CATCHES) { L43: _fallbackKeyCount++; L44: if (_fallbackKeyCount <= 5 || _fallbackKeyCount % 100 === 0) { L45: process.stderr.write(`[search-fusion] fallback hash dedup path used (${_fallbackKeyCount})\n`); L46: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

core/search/search-fusion.jsView on unpkg · L41

core/infrastructure/model-fetcher.jsView file

89const raw = readFileSync(sidecarPath, 'utf-8'); L90: const parsed = JSON.parse(raw); L91: if (!parsed || typeof parsed !== 'object') return null; ... L297: // never to a custom hfEndpoint, which may be an untrusted mirror. L298: const hfToken = process.env.HF_TOKEN || process.env.HUGGING_FACE_HUB_TOKEN; L299: if (hfToken && url.startsWith('https://huggingface.co/')) { L300: headers['Authorization'] = `Bearer ${hfToken}`; ... L318: L319: process.stderr.write(`[ModelFetcher] ${isResume ? 'Resuming' : 'Downloading'} ${filePath} from ${hfId}...`); L320:

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

core/infrastructure/model-fetcher.jsView on unpkg · L89

crates/wasm-router/pkg/query_router_wasm_bg.wasmView file

•path = crates/wasm-router/pkg/query_router_wasm_bg.wasm kind = wasm_module sizeBytes = 201196 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

crates/wasm-router/pkg/query_router_wasm_bg.wasmView on unpkg

core/search/session-daemon-prewarm.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = sweet-search@2.6.14 matchedIdentity = npm:c3dlZXQtc2VhcmNo:2.6.14 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

core/search/session-daemon-prewarm.mjsView on unpkg

Findings

1 Critical2 High6 Medium6 Low

CriticalPrevious Version Dangerous Deltacore/search/session-daemon-prewarm.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighCredential Exfiltrationcore/infrastructure/model-fetcher.js

MediumDynamic Requirecrates/wasm-router/pkg/query_router_wasm.js

MediumUnsafe Vm Contextcore/indexing/index-codebase-v21.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Modulecrates/wasm-router/pkg/query_router_wasm_bg.wasm

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptocore/search/search-fusion.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

core/indexing/index-codebase-v21.jsView file

Lines 15-55javascript

15 * Incremental Mode (default - RECOMMENDED):

16 * - Code graph: ALWAYS full rebuild (relationships span files) - ensures GraphRAG accuracy

17 * - Summaries: Auto-regenerated for changed files (uses Cerebras GLM-4.6 for speed)

18 * - Vectors: Only changed files reindexed

19 * - HNSW: Rebuilt from changed files

20 *

21 * Usage:

22 * node index-codebase-v21.js # Incremental (default)

23 * node index-codebase-v21.js --full # Full reindex

24 * node index-codebase-v21.js --graph-only # Only code graph

25 * node index-codebase-v21.js --vectors-only # Only vectors + HNSW

26 * node index-codebase-v21.js --dry-run # Preview only

27 */

29// ── Optional: bump libuv worker thread pool ──

30//

31// Only useful in opt-in hybrid CPU+GPU mode (SWEET_SEARCH_LI_HYBRID=1 or

32// SWEET_SEARCH_EMBED_HYBRID=1) where multiple concurrent napi async ops

33// fight for the default 4-thread libuv pool. Pure-GPU and pure-CPU paths

34// don't need this. Set SWEET_SEARCH_UV_THREADPOOL_SIZE=64 (or higher) to

35// enable. libuv reads this lazily on first thread pool use.

36if (process.env.SWEET_SEARCH_UV_THREADPOOL_SIZE && !process.env.UV_THREADPOOL_SIZE) {

37 process.env.UV_THREADPOOL_SIZE = process.env.SWEET_SEARCH_UV_THREADPOOL_SIZE;

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

core/indexing/index-codebase-v21.jsView on unpkg · L35

38}

40import { existsSync } from 'fs';

41import { DB_PATHS, LATE_INTERACTION_CONFIG } from '../infrastructure/config/index.js';

42import { applyPersistedLiModel } from '../infrastructure/init-config.js';

43import { resolveRelationshipTargets } from '../graph/relationship-resolver.js';

44import { getStats as getIncrementalStats } from './incremental-tracker.js';

45import { ARTIFACT_THRESHOLDS } from './artifact-builder.js';

47// Sub-module imports (used in main + re-exported for backward compatibility)

48import {

49 isWalSafe, configureJournalMode,

50 colors, setQuietMode, isQuietMode, setVerboseMode, log, logProgress, logError,

51 atomicSwapDatabase,

52 readFilesFromStdin, discoverFiles,

53} from './indexer-utils.js';

54import {

55 buildCodeGraph, createVectorSchema, ensureVectorSchema,

core/search/search-fusion.jsView file

Lines 21-61javascript

21 'lexical': 0.85, // Alias

22 'conceptual': 0.25, // Heavy semantic

23 'semantic': 0.25, // Alias

24 'structural': 0.90, // Lexical + graph

25 'mixed': 0.55, // Balanced

26 'hybrid': 0.55, // Alias

27};

29// =============================================================================

30// Pure helpers (no `this`)

31// =============================================================================

33/**

34 * Get unique key for a result.

35 * Pure function — no `this`. On prototype because callers use this.getResultKey().

36 */

37export function getResultKey(result) {

38 // Use stable identity fields first.

39 if (result.id) return String(result.id);

40 if (result.file && result.startLine != null) return `${result.file}:${result.startLine}`;

41 if (result.name) return String(result.name);

42 if (process.env.DEBUG_CATCHES) {

43 _fallbackKeyCount++;

44 if (_fallbackKeyCount <= 5 || _fallbackKeyCount % 100 === 0) {

45 process.stderr.write(`[search-fusion] fallback hash dedup path used (${_fallbackKeyCount})\n`);

46 }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

core/search/search-fusion.jsView on unpkg · L41

47 }

48 // Fallback: deterministic hash of the full result to avoid key collisions.

49 // Truncated JSON (the previous approach) could merge distinct results during fusion.

50 return createHash('md5').update(JSON.stringify(result || {})).digest('hex');

51}

53/**

54 * Min-max normalization for score fusion.

55 * Scales scores to [0, 1] range. Pure function — no `this`.

56 */

57export function minMaxNormalize(scores) {

58 if (!scores || scores.length === 0) return [];

59 if (scores.length === 1) return [1.0];

61 const min = Math.min(...scores);

core/infrastructure/model-fetcher.jsView file

Lines 69-109javascript

69// Mandatory invariants — any change that weakens these regresses security:

70// 1. The cache NEVER skips verification against a NEW expected hash. A

71// caller supplying `expectedSha256 = X` gets a fresh stream unless the

72// cache already holds a positive record for X.

73// 2. The in-process Map is invalidated on every explicit `fetchModelFile`

74// atomic rename (see `invalidateVerifiedSidecar` before the rename).

75// 3. A positive record is written ONLY after a successful streaming hash.

76// `recordVerified` is never called without a prior `computeFileHash`

77// that matched `expectedSha256`.

79const _verificationMemCache = new Map();

81function verifiedSidecarPath(filePath) {

82 return filePath + '.verified.json';

83}

85function readVerifiedSidecar(filePath) {

86 const sidecarPath = verifiedSidecarPath(filePath);

87 if (!existsSync(sidecarPath)) return null;

88 try {

89 const raw = readFileSync(sidecarPath, 'utf-8');

90 const parsed = JSON.parse(raw);

91 if (!parsed || typeof parsed !== 'object') return null;

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

core/infrastructure/model-fetcher.jsView on unpkg · L89

92 return parsed;

93 } catch {

94 return null;

95 }

96}

98function writeVerifiedSidecar(filePath, record) {

99 try {

100 writeFileSync(verifiedSidecarPath(filePath), JSON.stringify(record));

101 } catch {

102 // Best-effort — a failed sidecar write just means the next run re-verifies.

103 }

104}

105

106function invalidateVerifiedSidecar(filePath) {

107 try {

108 unlinkSync(verifiedSidecarPath(filePath));

109 } catch (err) {