registry / vibe-coding-master / 0.7.6

vibe-coding-master@0.7.6

Local GUI session cockpit for Claude Code role sessions.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 121 file(s), 1.84 MB of source, external domains: github.com, ilinkai.weixin.qq.com, open.feishu.cn, open.larksuite.com, react.dev, www.w3.org

Source & flagged code

1 flagged

package.jsonView file

Lines 4-44json

4 "description": "Local GUI session cockpit for Claude Code role sessions.",

5 "type": "module",

6 "files": [

7 "dist",

8 "dist-frontend",

9 "scripts",

10 "README.md"

11 ],

12 "bin": {

13 "vcm": "dist/main.js"

14 },

15 "engines": {

16 "node": "^20.0.0 || >=22.0.0"

17 },

18 "publishConfig": {

19 "access": "public"

20 },

21 "scripts": {

22 "clean": "node scripts/clean-build.mjs",

23 "fix:node-pty": "node scripts/fix-node-pty-spawn-helper.mjs",

24 "postinstall": "node scripts/fix-node-pty-spawn-helper.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

25 "verify:package": "node scripts/verify-package.mjs",

26 "harness:install": "node scripts/install-vcm-harness.mjs",

27 "harness:uninstall": "node scripts/uninstall-vcm-harness.mjs",

28 "prepack": "npm run build && npm run verify:package",

29 "dev": "tsx src/main.ts --dev",

30 "build": "npm run clean && tsc -p tsconfig.node.json && vite build",

31 "start": "node dist/main.js",

32 "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.node.json --noEmit",

33 "test": "vitest run",

34 "test:e2e:backend": "vitest run tests/e2e/backend",

35 "test:watch": "vitest",

36 "e2e": "playwright test"

37 },

38 "dependencies": {

39 "@fastify/static": "^9.1.3",

40 "@larksuiteoapi/node-sdk": "^1.67.0",

41 "@xterm/addon-fit": "^0.10.0",

42 "@xterm/addon-web-links": "^0.11.0",

43 "@xterm/xterm": "^5.5.0",

44 "execa": "^9.6.0",

Source & flagged code

1 flagged · loading source

package.jsonView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code