registry / u1s1-cli / 0.16.3

u1s1-cli@0.16.3

⚠ Under review

u1s1 — 有一说一,最省心的 AI 编程搭子。终端里用中文说需求,AI 帮你读文件、改代码、跑命令。

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 29 file(s), 1.16 MB of source, external domains: api.u1s1.io, github.com, reactjs.org, registry.npmjs.org, u1s1.io, www.w3.org

Source & flagged code

7 flagged

package.jsonView file

Lines 10-50json

10 "./embed": {

11 "types": "./dist/embed.d.ts",

12 "default": "./dist/embed.js"

13 },

14 "./package.json": "./package.json"

15 },

16 "files": [

17 "dist",

18 "webui-dist",

19 "bench",

20 "scripts"

21 ],

22 "engines": {

23 "node": ">=22.19.0"

24 },

25 "scripts": {

26 "build": "tsc",

27 "dev": "tsx src/index.ts",

28 "typecheck": "tsc --noEmit",

29 "prepublishOnly": "npm run build",

30 "postinstall": "node scripts/patch-pi.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

31 "package": "bash ../../scripts/package.sh",

32 "upload-release": "bash ../../scripts/upload-release.sh",

33 "release": "npm run package && npm run upload-release"

34 },

35 "keywords": [

36 "ai",

37 "cli",

38 "coding-agent",

39 "deepseek",

40 "u1s1"

41 ],

42 "license": "MIT",

43 "homepage": "https://u1s1.io",

44 "dependencies": {

45 "@earendil-works/pi-coding-agent": "0.84.2",

46 "@earendil-works/pi-tui": "0.84.2",

47 "typebox": "1.3.7"

48 },

49 "optionalDependencies": {

50 "pi-web-ui": "0.26.0"

dist/shell-doctor.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/shell-doctor.jsView on unpkg · L1

3import { dirname, join } from "node:path";

4import

dist/update.jsView file

Lines 1-21javascript

1import { execSync, spawnSync } from "node:child_process";

2import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";

3import { createRequire } from "node:module";

4import { tmpdir } from "node:os";

dist/web.jsView file

Lines 1-21javascript

1import { spawn, spawnSync } from "node:child_process";

2import { mkdirSync } from "node:fs";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/web.jsView on unpkg · L1

3import { createRequire } from "node:module";

dist/agent-setup.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agent-setup.js#virtual:normalized:round1View on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/shell-doctor.jsView file

1import { spawn } from "node:child_process"; L2: import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/shell-doctor.jsView on unpkg · L1

dist/update.jsView file

61* - Windows:正在运行的 node.exe 锁着自己,同进程装不了 —— 弹一个新的 L62: * PowerShell 窗口跑 install.ps1(脚本会先结束安装目录里残留的 node 进程, L63: * 包括本进程,属预期),本进程立刻退出把文件锁让出来。

High

Shell

Findings

7 High3 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/shell-doctor.js

HighShelldist/update.js

HighSandbox Evasion Gated Capabilitydist/update.js

HighCross File Remote Execution Contextdist/web.js

HighRuntime Package Installdist/update.js

HighSemantic Analysis Limiteddist/agent-setup.js#virtual:normalized:round1

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Low

Affected versions and remediation

This report applies to u1s1-cli@0.16.3.

See all versions of u1s1-cli for other recorded verdicts.

Review the evidence and your use of u1s1-cli@0.16.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-20 05:08:37.159Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.