wildcat-harness@0.2.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

wildcat-harness@0.2.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

7 flagged

dist/evals.jsView file

Lines 435-475javascript

435 lines.push("## Proposed");

436 for (const item of proposed) {

437 lines.push("");

438 lines.push(`### ${item.title}`);

439 lines.push("");

440 lines.push(`- id: \`${item.id}\``);

441 lines.push(`- target: ${item.target}`);

442 lines.push(`- purpose: ${item.purpose}`);

443 lines.push(`- status: ${item.method}`);

444 }

445 lines.push("");

446 return `${lines.join("\n")}\n`;

447};

448export const applyEvalsManifest = (repoRoot, evals = EVALS) => {

449 const path = manifestFile(repoRoot);

450 writeFileSync(path, renderEvalsManifest(evals), "utf8");

451 return path;

452};

453export const renderEvalsStatus = (status) => {

454 const lines = [

455 `Evals: ${status.active ? "active" : "inactive"} (root EVALS.md ${status.manifestPresent ? "present" : "not yet generated"}).`,

456 ` ${status.total} eval(s): ${status.runnable} runnable, ${status.proposed} proposed.`,

457 ""

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/evals.jsView on unpkg · L455

458 ];

459 return `${lines.join("\n")}\n`;

460};

461export const renderEvalsProposal = (proposal) => {

462 if (proposal.missingManifest) {

463 return `No root EVALS.md yet. Run \`wildcat evals apply\` to generate it (${proposal.unlisted.length} eval(s), ${proposal.proposed.length} proposed).\n`;

464 }

465 const parts = [];

466 parts.push(proposal.unlisted.length === 0

467 ? "Root EVALS.md is in sync with the eval registry."

468 : `Root EVALS.md is missing ${proposal.unlisted.length} eval(s): ${proposal.unlisted.join(", ")}. Run \`wildcat evals apply\`.`);

469 parts.push(`Proposed evals awaiting their consuming feature: ${proposal.proposed.join(", ")}.`);

470 return `${parts.join("\n")}\n`;

471};

472export const renderEvalsRun = (report) => {

473 const lines = ["Wildcat evals run", ""];

474 for (const result of report.results) {

475 lines.push(`${result.passed ? "PASS" : "FAIL"} ${result.id} (score ${result.score.toFixed(2)})`);

dist/version.jsView file

Lines 1-5javascript

1import { createRequire } from "node:module";

2const require = createRequire(import.meta.url);

3const packageJson = require(

dist/config-schemas.d.tsView file

Lines 18-58typescript

18 "mobile-app": "mobile-app";

19 "backend-service": "backend-service";

20 "automation-job": "automation-job";

21 "agent-tooling": "agent-tooling";

22 "browser-extension"

Lines 286-405typescript

286 disabled: "disabled";

287 }>>>;

288}, z.core.$strict>;

289export interface WildcatProjectConfig extends z.infer<typeof wildcatProjectConfigSchema> {

290}

291export declare const wildcatProfileProjectClassSchema: z.ZodObject<{

292 overlays: z.ZodDefault<z.ZodArray<z.ZodString>>;

293}, z.core.$strict>;

294export declare const wildcatPresetDefaultsSchema: z.ZodObject<{

295 tracker: z.ZodDefault<z.ZodEnum<{

296 disabled: "disabled";

297 "github-project": "github-project";

298 local: "local";

299 }>>;

300 workflow: z.ZodDefault<z.ZodEnum<{

301 simple: "simple";

302 idc: "idc";

303 }>>;

304 secrets: z.ZodDefault<z.ZodEnum<{

305 disabled: "disabled";

306 onepassword: "onepassword";

Medium

Secret Pattern

Hardcoded password in dist/config-schemas.d.ts

dist/config-schemas.d.tsView on unpkg · L306

307 environment: "environment";

308 "hosted-secret-store": "hosted-secret-store";

309 }>>;

310 obsidian: z.ZodDefault<z.ZodEnum<{

311 disabled: "disabled";

312 "repo-is-vault": "repo-is-vault";

313 mirror: "mirror";

314 }>>;

315 automation: z.ZodDefault<z.ZodEnum<{

316 active: "active";

317 advisory: "advisory";

318 stubbed: "stubbed";

319 off: "off";

320 proposal: "proposal";

321 }>>;

322 docs: z.ZodDefault<z.ZodEnum<{

323 core: "core";

324 full: "full";

325 }>>;

326}, z.core.$strict>;

327export declare const wildcatPresetSchema: z.ZodObject<{

328 defaults: z.ZodObject<{

329 tracker: z.ZodDefault<z.ZodEnum<{

330 disabled: "disabled";

331 "github-project": "github-project";

332 local: "local";

333 }>>;

334 workflow: z.ZodDefault<z.ZodEnum<{

335 simple: "simple";

336 idc: "idc";

337 }>>;

338 secrets: z.ZodDefault<z.ZodEnum<{

339 disabled: "disabled";

340 onepassword: "onepassword";

Medium

Secret Pattern

Hardcoded password in dist/config-schemas.d.ts

dist/config-schemas.d.tsView on unpkg · L340

341 environment: "environment";

342 "hosted-secret-store": "hosted-secret-store";

343 }>>;

344 obsidian: z.ZodDefault<z.ZodEnum<{

345 disabled: "disabled";

346 "repo-is-vault": "repo-is-vault";

347 mirror: "mirror";

348 }>>;

349 automation: z.ZodDefault<z.ZodEnum<{

350 active: "active";

351 advisory: "advisory";

352 stubbed: "stubbed";

353 off: "off";

354 proposal: "proposal";

355 }>>;

356 docs: z.ZodDefault<z.ZodEnum<{

357 core: "core";

358 full: "full";

359 }>>;

360 }, z.core.$strict>;

365export interface WildcatPreset extends z.infer<typeof wildcatPresetSchema> {

366}

367export declare const SNAPSHOT_VERSION = 1;

368export declare const wildcatProfileSnapshotSchema: z.ZodObject<{

369 snapshot_version: z.ZodDefault<z.ZodNumber>;

370 captured_at: z.ZodString;

371 selected_preset: z.ZodString;

372 project_class: z.ZodString;

373 defaults: z.ZodObject<{

374 tracker: z.ZodDefault<z.ZodEnum<{

375 disabled: "disabled";

376 "github-project": "github-project";

377 local: "local";

378 }>>;

379 workflow: z.ZodDefault<z.ZodEnum<{

380 simple: "simple";

381 idc: "idc";

382 }>>;

383 secrets: z.ZodDefault<z.ZodEnum<{

384 disabled: "disabled";

385 onepassword: "onepassword";

Medium

Secret Pattern

Hardcoded password in dist/config-schemas.d.ts

dist/config-schemas.d.tsView on unpkg · L385

386 environment: "environment";

387 "hosted-secret-store": "hosted-secret-store";

388 }>>;

389 obsidian: z.ZodDefault<z.ZodEnum<{

390 disabled: "disabled";

391 "repo-is-vault": "repo-is-vault";

392 mirror: "mirror";

393 }>>;

394 automation: z.ZodDefault<z.ZodEnum<{

395 active: "active";

396 advisory: "advisory";

397 stubbed: "stubbed";

398 off: "off";

399 proposal: "proposal";

400 }>>;

401 docs: z.ZodDefault<z.ZodEnum<{

402 core: "core";

403 full: "full";

404 }>>;

405 }, z.core.$strict>;