registry  /  token-trace-manager  /  0.7.5

token-trace-manager@0.7.5

Proxy local universal de rastreio de tokens de LLM para TUIs de código (Claude Code, Codex, OpenCode, Gemini CLI, Kilo...), com labels por tarefa, dashboard local e auto-link que preserva redirects prévios (z.ai/GLM/...).

Static Scan Results

scanned 7h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 17 file(s), 156 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.openai.com, generativelanguage.googleapis.com, openrouter.ai

Source & flagged code

1 flagged · loading source
bin/ttm.mjsView file
•matchType = previous_version_dangerous_delta matchedPackage = token-trace-manager@0.7.2 matchedIdentity = npm:dG9rZW4tdHJhY2UtbWFuYWdlcg:0.7.2 similarity = 0.647 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/ttm.mjsView on unpkg

Findings

1 High2 Medium5 Low
HighPrevious Version Dangerous Deltabin/ttm.mjs
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings