registry  /  tracepulse  /  0.9.26

tracepulse@0.9.26

Runtime feedback MCP server for AI coding agents. ViewGraph sees the UI - TracePulse feels the backend.

Static Scan Results

scanned 10h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
CopyleftLicense
scanned 15 file(s), 320 KB of source, external domains: 127.0.0.1, registry.npmjs.org

Source & flagged code

1 flagged · loading source
bin/tracepulse.cmdView file
•path = bin/tracepulse.cmd kind = build_helper sizeBytes = 143 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/tracepulse.cmdView on unpkg

Findings

4 Medium6 Low
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/tracepulse.cmd
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License