registry / wienerdog / 0.3.1

wienerdog@0.3.1

Give your AI a memory, habits, and a daily routine — with nothing but files. One-line setup for Claude Code and Codex CLI.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 47 file(s), 281 KB of source, external domains: 127.0.0.1, github.com, registry.npmjs.org, www.apple.com, www.googleapis.com

Source & flagged code

3 flagged

src/core/vault.jsView file

Lines 1-26javascript

1'use strict';

3const fs = require('node:fs');

4const os = require('node:os');

5const path = require('node:path');

6const crypto = require('node:crypto');

7const { execFileSync, spawnSync } = require('node:child_process');

8const { WienerdogError } = require('./errors');

9const manifestLib = require('./manifest');

11const TEMPLATE_ROOT = path.join(__dirname, '..', '..', 'templates', 'vault');

13/** @returns {string} today's date as YYYY-MM-DD, or WIENERDOG_FAKE_TODAY if set. */

14function today() {

15 if (process.env.WIENERDOG_FAKE_TODAY) return process.env.WIENERDOG_FAKE_TODAY;

16 return new Date().toISOString().slice(0, 10);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/vault.jsView on unpkg · L6

17}

19/** @param {string[]} args @param {string} cwd @returns {boolean} true if git exited 0. */

20function gitOk(args, cwd) {

21 const result = spawnSync('git', args, { cwd });

22 return !result.error && result.status === 0;

23}

25/** @throws {WienerdogError} if git is not installed. */

26function assertGitInstalled() {

src/scheduler/generators.jsView file

Lines 1-24javascript

1'use strict';

3const fs = require('node:fs');

4const path = require('node:path');

5const { spawnSync } = require('node:child_process');

templates/hooks/codex-session-end.shView file

•path = templates/hooks/codex-session-end.sh kind = build_helper sizeBytes = 944 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/hooks/codex-session-end.shView on unpkg

Source & flagged code

3 flagged · loading source

src/core/vault.jsView file

6const crypto = require('node:crypto'); L7: const { execFileSync, spawnSync } = require('node:child_process'); L8: const { WienerdogError } = require('./errors'); ... L10: L11: const TEMPLATE_ROOT = path.join(__dirname, '..', '..', 'templates', 'vault'); L12: ... L14: function today() { L15: if (process.env.WIENERDOG_FAKE_TODAY) return process.env.WIENERDOG_FAKE_TODAY; L16: return new Date().toISOString().slice(0, 10);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/vault.jsView on unpkg · L6

src/scheduler/generators.jsView file

4const path = require('node:path'); L5: const { spawnSync } = require('node:child_process'); L6: ... L222: // must never spawn the real scheduler. Injected loaders are unaffected. L223: if (process.env.WIENERDOG_LOADER_NOOP) return { status: 0 }; L224: const r = spawnSync(argv[0], argv.slice(1)); ... L240: function ensureCatchup(paths, opts = {}) { L241: if (process.platform !== 'darwin') return { changed: false }; L242: const loader = opts.loader || defaultCatchupLoader; ... L247: const plistPath = path.join(launchAgentsDir(paths.home), `${label}.plist`); L248: const unload = ['launchctl', 'bootout', `gui/${uid}/${label}`]; L249:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/scheduler/generators.jsView on unpkg · L4

templates/hooks/codex-session-end.shView file

•path = templates/hooks/codex-session-end.sh kind = build_helper sizeBytes = 944 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/hooks/codex-session-end.shView on unpkg

Findings

5 Medium5 Low

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesrc/scheduler/generators.js

MediumShips Build Helpertemplates/hooks/codex-session-end.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptosrc/core/vault.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

src/core/vault.jsView file

Lines 1-26javascript

1'use strict';

3const fs = require('node:fs');

4const os = require('node:os');

5const path = require('node:path');

6const crypto = require('node:crypto');

7const { execFileSync, spawnSync } = require('node:child_process');

8const { WienerdogError } = require('./errors');

9const manifestLib = require('./manifest');

11const TEMPLATE_ROOT = path.join(__dirname, '..', '..', 'templates', 'vault');

13/** @returns {string} today's date as YYYY-MM-DD, or WIENERDOG_FAKE_TODAY if set. */

14function today() {

15 if (process.env.WIENERDOG_FAKE_TODAY) return process.env.WIENERDOG_FAKE_TODAY;

16 return new Date().toISOString().slice(0, 10);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/vault.jsView on unpkg · L6

17}

19/** @param {string[]} args @param {string} cwd @returns {boolean} true if git exited 0. */

20function gitOk(args, cwd) {

21 const result = spawnSync('git', args, { cwd });

22 return !result.error && result.status === 0;

23}

25/** @throws {WienerdogError} if git is not installed. */

26function assertGitInstalled() {

src/scheduler/generators.jsView file

Lines 1-24javascript

1'use strict';

3const fs = require('node:fs');

4const path = require('node:path');

5const { spawnSync } = require('node:child_process');

templates/hooks/codex-session-end.shView file

•path = templates/hooks/codex-session-end.sh kind = build_helper sizeBytes = 944 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/hooks/codex-session-end.shView on unpkg