registry / wayari / 0.1.1

wayari@0.1.1

Ship PRs while you sleep. Merge them with your eyes open. The Wayari software factory from a terminal.

Static Scan Results

scanned 26d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 3 file(s), 1.16 MB of source, external domains: 127.0.0.1, github.com

Source & flagged code

2 flagged

dist/wayari.mjsView file

12import { openSync } from "node:fs"; L13: import { spawn as spawn3 } from "node:child_process"; L14: import { homedir as homedir6 } from "node:os"; L15: import { basename as basename3, dirname as dirname12, join as join41, resolve as resolve6 } from "node:path"; L16: import { fileURLToPath } from "node:url"; ... L301: try { L302: parsed = JSON.parse(line); L303: } catch { ... L348: if (line.startsWith("## ")) { L349: doc.sections.push({ heading: line.trimEnd(), body: [] }); L350: continue; ... L930: blurb: "Takes finished work the last mile and verifies it landed.",

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/wayari.mjsView on unpkg · L12

bin/wayari.mjsView file

•matchType = normalized_sha256 matchedPackage = wayari@0.3.1 matchedPath = bin/wayari.mjs matchedIdentity = npm:d2F5YXJp:0.3.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/wayari.mjsView on unpkg

Source & flagged code

2 flagged · loading source

dist/wayari.mjsView file

wayari@0.1.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code