registry  /  vibe-lm  /  0.2.2

vibe-lm@0.2.2

A comprehensive set of agentic tools for LM Studio: file operations, web fetching/search, memory, SSH, and an autonomous vibe_bridge keep-alive loop.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 16 file(s), 341 KB of source, external domains: example.com, one.com, search.example.com, two.com

Source & flagged code

6 flagged · loading source
tests/test_build.shView file
•path = tests/test_build.sh kind = payload_in_excluded_dir sizeBytes = 1418 magicHex = [redacted]
High
Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tests/test_build.shView on unpkg
•path = tests/test_build.sh kind = build_helper sizeBytes = 1418 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tests/test_build.shView on unpkg
release/vibeLM-v0.2.2.zipView file
•path = release/vibeLM-v0.2.2.zip kind = high_entropy_blob sizeBytes = 121657 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

release/vibeLM-v0.2.2.zipView on unpkg
•path = release/vibeLM-v0.2.2.zip kind = compressed_blob sizeBytes = 121657 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

release/vibeLM-v0.2.2.zipView on unpkg
•path = release/vibeLM-v0.2.2.zip kind = nested_archive_needs_inspection sizeBytes = 121657 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

release/vibeLM-v0.2.2.zipView on unpkg
tests/tools.test.tsView file
153patternName = generic_password severity = medium line = 153 matchedText = password...nt",
Medium
Secret Pattern

Hardcoded password in tests/tools.test.ts

tests/tools.test.tsView on unpkg · L153

Findings

2 High6 Medium5 Low
HighShips High Entropy Blobrelease/vibeLM-v0.2.2.zip
HighPayload In Excluded Dirtests/test_build.sh
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertests/test_build.sh
MediumShips Compressed Blobrelease/vibeLM-v0.2.2.zip
MediumStructural Risk Force Deep Review
MediumSecret Patterntests/tools.test.ts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionrelease/vibeLM-v0.2.2.zip