TavernKeeper Scan Report

AventurasTeam/Aventuras

Commit 6d18d69 Reviewed Aug 10, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and contextual reviewer found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 88 low

What this review found

No material or immediate-danger item was identified.

Minor cautions

Dependency advisory RUSTSEC-2025-0080:pkg:d9db6230dfa23e8ba0fa93cf applies

Minor caution · high confidence

The project includes an older version of a Unicode library with a security notice, but there's no sign that an attacker could use that to cause harm here.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2025-0080:pkg:d9db6230dfa23e8ba0fa93cf to a dependency declared by this repository.

Contextual assessment: unic-common@0.9.0 has a known advisory, but no evidence of runtime reachability or attacker-controlled input was provided. It is a transitive dependency likely used for Unicode support in Rust, and exploitation in the Tauri app context is not demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Update unic-common to a patched version if a fix is available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2025-0080:pkg:d9db6230dfa23e8ba0fa93cf
File role: production
Source: src-tauri/Cargo.lock

zizmor reported unpinned-uses

Minor caution · high confidence

This workflow step uses a general version number for an action instead of locking it to a specific code. This is a standard best practice issue but not an active danger.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The android-actions/setup-android action at line 108 is referenced with a major version tag (v3) instead of a pinned commit SHA. An attacker who compromises the action's repository could replace the tagged version with malicious code, impacting the release pipeline. No evidence of such compromise exists.

Impact: low · Exploitability: unlikely

Developer action: Review the cited evidence and confirm the intended behavior.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:108

Dependency advisory RUSTSEC-2024-0414:pkg:e12ed7daa8c1d8360f101be8 applies

Minor caution · high confidence

The project uses an older Linux graphics library binding with a security notice, but there's no evidence an attacker can exploit it in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0414:pkg:e12ed7daa8c1d8360f101be8 to a dependency declared by this repository.

Contextual assessment: gdkx11-sys@0.18.2 has a known advisory, but no evidence of runtime reachability or attacker-controlled input was provided. This is a system-level FFI binding used by Tauri on Linux, and exploitation would require local access or a compromised display server, which is not demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Review if a newer version of the GTK/related Tauri dependencies is available and update accordingly.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0414:pkg:e12ed7daa8c1d8360f101be8
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory GHSA-72xf-g2v4-qvf3:pkg:2f098d09dffd8939e104e6f0 applies

Minor caution · medium confidence

This package has a known security issue, but the app does not appear to actually use it in a way that could be attacked.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-72xf-g2v4-qvf3:pkg:2f098d09dffd8939e104e6f0 to a dependency declared by this repository.

Contextual assessment: tough-cookie 2.5.0 has a known vulnerability (GHSA-72xf-g2v4-qvf3) related to cookie rejection bypass. The package is a transitive dependency (likely via request) and there is no evidence it is used at runtime in this Tauri-based desktop/mobile application. Even if present in the dependency tree, no attacker-controlled input path to the vulnerable code has been demonstrated.

Impact: none · Exploitability: unlikely

Developer action: Remove the unused transitive dependency or update tough-cookie to a patched version by updating the parent dependency that requires it.

Scanner: osv-scanner 2.4.0
Rule: GHSA-72xf-g2v4-qvf3:pkg:2f098d09dffd8939e104e6f0
File role: production
Source: package-lock.json

Dependency advisory GHSA-2mjp-6q6p-2qxm:pkg:6d96a46fadb25a056091e448 applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-2mjp-6q6p-2qxm:pkg:6d96a46fadb25a056091e448 to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 is flagged by GHSA-2mjp-6q6p-2qxm (HTTP request smuggling). undici is a production dependency used by the Vercel AI SDK for API calls to AI providers. No evidence shows that an attacker can control the HTTP request structure (method, path, headers) to trigger the vulnerability. The AI SDK constructs requests to hardcoded provider endpoints with user content in the body only. Thus runtime exploitability is not demonstrated.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later to receive the security patch.

Scanner: osv-scanner 2.4.0
Rule: GHSA-2mjp-6q6p-2qxm:pkg:6d96a46fadb25a056091e448
File role: production
Source: package-lock.json

Dependency advisory GHSA-m8rv-5g2x-5cg5:pkg:4960f6321d5eb83e948ad4ac applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-m8rv-5g2x-5cg5:pkg:4960f6321d5eb83e948ad4ac to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 is flagged by GHSA-m8rv-5g2x-5cg5 (HTTP headers injection). The same rationale applies: attacker control over HTTP headers in AI SDK calls is not demonstrated. The SDK uses fixed endpoints and header construction is not user-influenced.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later.

Scanner: osv-scanner 2.4.0
Rule: GHSA-m8rv-5g2x-5cg5:pkg:4960f6321d5eb83e948ad4ac
File role: production
Source: package-lock.json

Dependency advisory GHSA-g8m3-5g58-fq7m:pkg:e4124745cfdd4bc7b9a15ac1 applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-g8m3-5g58-fq7m:pkg:e4124745cfdd4bc7b9a15ac1 to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 is flagged by GHSA-g8m3-5g58-fq7m (HTTP request splitting). The same lack of demonstrated attacker control over request structure applies.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later.

Scanner: osv-scanner 2.4.0
Rule: GHSA-g8m3-5g58-fq7m:pkg:e4124745cfdd4bc7b9a15ac1
File role: production
Source: package-lock.json

zizmor reported unpinned-uses

Minor caution · high confidence

The action to set up Java is not locked to a specific version, so a future bad update could affect the build. This is a usual practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/setup-java at line 102 uses @v4 instead of a pinned SHA. This could allow a malicious update to the action's v4 tag to inject malicious code into the CI build.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/setup-java to a specific commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:102

Dependency advisory GHSA-v3r7-h72x-cjcm:pkg:3442b6d04e2f119213e16797 applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v3r7-h72x-cjcm:pkg:3442b6d04e2f119213e16797 to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 is flagged by GHSA-v3r7-h72x-cjcm (HTTP request smuggling via content-length). Same lack of demonstrated exploit path.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v3r7-h72x-cjcm:pkg:3442b6d04e2f119213e16797
File role: production
Source: package-lock.json

Dependency advisory GHSA-5v7r-6r5c-r473:pkg:db1c36cdfd066cb137608ca0 applies

Minor caution · medium confidence

This file-type detection library has a bug that could be used to slow down the app, but it's not clear it's used in a way an attacker could trigger.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-5v7r-6r5c-r473:pkg:db1c36cdfd066cb137608ca0 to a dependency declared by this repository.

Contextual assessment: file-type 16.5.4 has a ReDoS vulnerability (GHSA-5v7r-6r5c-r473) exploitable via a malicious file. The package is a transitive dependency (possibly via image processing code) and no evidence shows it is used to process attacker-supplied files at runtime in this app. Even if used, the impact would be a local denial of service (slowdown), which is low severity.

Impact: none · Exploitability: unlikely

Developer action: Update file-type to version 16.5.5 or later, or remove the unused dependency.

Scanner: osv-scanner 2.4.0
Rule: GHSA-5v7r-6r5c-r473:pkg:db1c36cdfd066cb137608ca0
File role: production
Source: package-lock.json

Dependency advisory GHSA-vrm6-8vpv-qv8q:pkg:0b992fe91b0b56ff0c3a69a0 applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-vrm6-8vpv-qv8q:pkg:0b992fe91b0b56ff0c3a69a0 to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 is flagged by GHSA-vrm6-8vpv-qv8q (HTTP request smuggling via malformed headers). Same lack of demonstrated exploit path as other undici advisories.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later.

Scanner: osv-scanner 2.4.0
Rule: GHSA-vrm6-8vpv-qv8q:pkg:0b992fe91b0b56ff0c3a69a0
File role: production
Source: package-lock.json

zizmor reported unpinned-uses

Minor caution · medium confidence

This official action uses a version tag instead of a fixed commit. It's a minor supply chain best-practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action actions/checkout@v4 is pinned to a mutable tag. Official action, low risk, but pinning to commit SHA is recommended. No exposure demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:43

Dependency advisory GHSA-vxpw-j846-p89q:pkg:2b5722d889310f1a977423f1 applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-vxpw-j846-p89q:pkg:2b5722d889310f1a977423f1 to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 is flagged by GHSA-vxpw-j846-p89q (HTTP response splitting). Same lack of demonstrated attacker control over response handling.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later.

Scanner: osv-scanner 2.4.0
Rule: GHSA-vxpw-j846-p89q:pkg:2b5722d889310f1a977423f1
File role: production
Source: package-lock.json

Dependency advisory RUSTSEC-2024-0411:pkg:7048d8a9d3d0f0ec2dd07bfe applies

Minor caution · high confidence

The project uses an older Wayland graphics library binding with a security notice, but there's no evidence an attacker can exploit it in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0411:pkg:7048d8a9d3d0f0ec2dd07bfe to a dependency declared by this repository.

Contextual assessment: gdkwayland-sys@0.18.2 has a known advisory, but no evidence of runtime reachability or attacker-controlled input was provided. This is a system-level FFI binding used by Tauri on Wayland sessions, and exploitation is not demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Review if a newer version of the GTK/related Tauri dependencies is available and update accordingly.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0411:pkg:7048d8a9d3d0f0ec2dd07bfe
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory RUSTSEC-2023-0071:pkg:ee975215c8fb081d4be2c2de applies

Minor caution · high confidence

The project includes an older RSA cryptography library with a known side-channel issue, but there's no evidence an attacker can actually exploit it in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2023-0071:pkg:ee975215c8fb081d4be2c2de to a dependency declared by this repository.

Contextual assessment: rsa@0.9.10 has a known advisory (RUSTSEC-2023-0071) regarding timing side channels. No evidence of runtime reachability or attacker-controlled input was provided. The crate is likely used by a transitive dependency (e.g., for SSH or certificate handling) and exploitation would require precise timing measurement, which is not demonstrated in the Tauri desktop context.

Impact: low · Exploitability: unlikely

Developer action: Update the rsa crate to a patched version if a direct dependency; otherwise monitor for transitive updates.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2023-0071:pkg:ee975215c8fb081d4be2c2de
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory GHSA-pxg6-pf52-xh8x:pkg:6da1e3539f31ff57c2a349c3 applies

Minor caution · medium confidence

This cookie-handling package has a minor bug, but the app doesn't use cookies in a way that could be exploited.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-pxg6-pf52-xh8x:pkg:6da1e3539f31ff57c2a349c3 to a dependency declared by this repository.

Contextual assessment: cookie 0.6.0 has a low-severity vulnerability (GHSA-pxg6-pf52-xh8x). The package is a transitive dependency of SvelteKit's server-side components, but this project uses adapter-static (static site generation), so no server-side cookie handling occurs at runtime. No attacker-controlled input path to the vulnerable code is demonstrated.

Impact: none · Exploitability: unlikely

Developer action: Update the parent dependency (likely @sveltejs/kit) to a version that uses a patched cookie package, or remove if not used.

Scanner: osv-scanner 2.4.0
Rule: GHSA-pxg6-pf52-xh8x:pkg:6da1e3539f31ff57c2a349c3
File role: production
Source: package-lock.json

zizmor reported cache-poisoning

Minor caution · low confidence

This step uses caching that could theoretically be compromised, but the likelihood is very low and no evidence of actual risk is present.

Technical evidence

Scanner reason: zizmor matched workflow-security rule cache-poisoning in this repository.

Contextual assessment: The setup-node cache step uses a generic cache key that could theoretically be poisoned, but the action is official and the cache is scoped to the workflow. Real-world exploitation requires a malicious npm package injection, which is not demonstrated.

Impact: low · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: cache-poisoning
File role: tooling
Source: .github/workflows/release.yml:46

zizmor reported unpinned-uses

Minor caution · high confidence

The Rust toolchain setup is not pinned to a specific version, which could change unexpectedly.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: dtolnay/rust-toolchain at line 97 uses @stable instead of a pinned SHA, making the build susceptible to unexpected changes in the Rust toolchain action behavior.

Impact: low · Exploitability: unlikely

Developer action: Pin dtolnay/rust-toolchain to a specific commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:97

Dependency advisory RUSTSEC-2024-0370:pkg:9b268f40461da81c7a1c55ed applies

Minor caution · high confidence

The project uses an older helper library for Rust macros with a security notice, but this library is only used during compilation and not in the final app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0370:pkg:9b268f40461da81c7a1c55ed to a dependency declared by this repository.

Contextual assessment: proc-macro-error@1.0.4 has a known advisory, but it is a development-time proc-macro crate not shipped in the final binary. No runtime impact exists. The supplied evidence does not demonstrate any exploitation path.

Impact: low · Exploitability: unlikely

Developer action: Update proc-macro-error to a patched version if it affects the build process; otherwise it can be addressed with a dependency bump.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0370:pkg:9b268f40461da81c7a1c55ed
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory GHSA-w5hq-g745-h8pq:pkg:557a6d9a353e8755eba18deb applies

Minor caution · medium confidence

This UUID generation library has a weakness, but the app likely doesn't use it in a security-sensitive way.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-w5hq-g745-h8pq:pkg:557a6d9a353e8755eba18deb to a dependency declared by this repository.

Contextual assessment: uuid 3.4.0 has a vulnerability (GHSA-w5hq-g745-h8pq) related to insecure randomness. The package is a transitive dependency of request (deprecated and not directly used). No evidence shows uuid is called at runtime with attacker-controlled input. The vulnerability would weaken UUID predictability, but no concrete attack path is demonstrated.

Impact: none · Exploitability: unlikely

Developer action: Update the parent dependency that pulls in uuid, or remove unused packages.

Scanner: osv-scanner 2.4.0
Rule: GHSA-w5hq-g745-h8pq:pkg:557a6d9a353e8755eba18deb
File role: production
Source: package-lock.json

Dependency advisory RUSTSEC-2024-0413:pkg:c2f358c9f3bc98a14e0c2abf applies

Minor caution · high confidence

The project uses an older accessibility library binding with a security notice, but there's no evidence an attacker can exploit it in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0413:pkg:c2f358c9f3bc98a14e0c2abf to a dependency declared by this repository.

Contextual assessment: atk@0.18.2 has a known advisory, but no evidence of runtime reachability or attacker-controlled input was provided. This is a system-level accessibility toolkit binding used by Tauri on Linux. Exploitation would require local access or a compromised environment, which is not demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Review if a newer version of the GTK/related Tauri dependencies is available and update accordingly.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0413:pkg:c2f358c9f3bc98a14e0c2abf
File role: production
Source: src-tauri/Cargo.lock

zizmor reported unpinned-uses

Minor caution · medium confidence

This third-party action uses a version tag instead of a fixed commit, which could allow an attacker to change the action's behavior after a tag update. This is a moderate supply chain hygiene issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action tauri-apps/tauri-action@v0 is pinned to a mutable tag. This third-party action has broad permissions (GITHUB_TOKEN, signing keys). Tag-based pinning increases supply chain risk. No compromise is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA after reviewing its current contents.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:66

Dependency advisory GHSA-wrw7-89jp-8q8g:pkg:4b30aae73f1836d87a5b008c applies

Minor caution · high confidence

The project uses an older core system library binding with a security notice, but there's no evidence an attacker can exploit it in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-wrw7-89jp-8q8g:pkg:4b30aae73f1836d87a5b008c to a dependency declared by this repository.

Contextual assessment: glib@0.18.5 has a known advisory (GHSA-wrw7-89jp-8q8g) but no evidence of runtime reachability or attacker-controlled input was provided. This is a core system library binding used by Tauri and GTK. Exploitation would require local access or a compromised environment, which is not demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Review if a newer version of the GTK/related Tauri dependencies is available and update accordingly.

Scanner: osv-scanner 2.4.0
Rule: GHSA-wrw7-89jp-8q8g:pkg:4b30aae73f1836d87a5b008c
File role: production
Source: src-tauri/Cargo.lock

zizmor reported unpinned-uses

Minor caution · high confidence

The checkout action is not locked to a specific version, which is a best practice concern.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/checkout at line 87 uses @v4 instead of a pinned SHA, which could be maliciously updated.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/checkout to a specific commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:87

zizmor reported cache-poisoning

Minor caution · low confidence

There's a theoretical risk that the cache used for Node packages could be tampered with, but it's unlikely and not shown to be exploitable.

Technical evidence

Scanner reason: zizmor matched workflow-security rule cache-poisoning in this repository.

Contextual assessment: Cache poisoning potential at line 90 from actions/setup-node with caching enabled. If an untrusted contribution modifies the cache key or input, the CI cache could contain malicious data. Scanner confidence is low, and no actual exploit path is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Ensure cache keys are derived from trusted inputs only, or disable caching if not needed.

Scanner: zizmor 1.28.0
Rule: cache-poisoning
File role: tooling
Source: .github/workflows/release.yml:90

Dependency advisory RUSTSEC-2025-0081:pkg:5c764120c78ffcfe5027b39c applies

Minor caution · high confidence

The project includes an older Unicode property library with a security notice, but there's no sign that an attacker could use that to cause harm here.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2025-0081:pkg:5c764120c78ffcfe5027b39c to a dependency declared by this repository.

Contextual assessment: unic-char-property@0.9.0 has a known advisory, but no evidence of runtime reachability or attacker-controlled input was provided. It is a transitive dependency for Unicode support, and exploitation in the Tauri app context is not demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Update unic-char-property to a patched version if a fix is available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2025-0081:pkg:5c764120c78ffcfe5027b39c
File role: production
Source: src-tauri/Cargo.lock

zizmor reported unpinned-uses

Minor caution · high confidence

The artifact upload action is not pinned, which is a best practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/upload-artifact at line 146 uses @v4 instead of a pinned SHA, exposing the pipeline to potential supply chain compromise.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/upload-artifact to a specific commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:146

zizmor reported unpinned-uses

Minor caution · medium confidence

This action is referenced by a version tag instead of a permanent commit ID. This is a minor supply chain hygiene issue, but there is no sign it has been tampered with.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action nttld/setup-ndk@v1 is pinned to a mutable tag rather than a commit SHA. While the action is widely used, an attacker who compromises the repository or tag could alter its behavior. No exposure is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA after reviewing its current contents.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:116

zizmor reported unpinned-uses

Minor caution · high confidence

Using @stable means the exact toolchain version can change without warning. This could cause a broken build but is not a security risk.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: dtolnay/rust-toolchain is used with the @stable tag, which is a floting version that may change unexpectedly. While the action is maintained, a breaking update could cause build failures. However, no actual exploit is demonstrated and the threat model for pre-release builds is low.

Impact: low · Exploitability: unlikely

Developer action: Consider pinning to a specific commit hash or a fixed version tag like @1.0.0 for reproducible builds, though the current setup is acceptable for a pre-release workflow.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:48

Dependency advisory GHSA-fjxv-7rqg-78g4:pkg:6c89c9914b40635e432f1415 applies

Minor caution · medium confidence

This form-data library has a serious bug, but the app doesn't use it in a way an attacker could reach.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-fjxv-7rqg-78g4:pkg:6c89c9914b40635e432f1415 to a dependency declared by this repository.

Contextual assessment: form-data 2.3.3 has a critical-severity vulnerability (GHSA-fjxv-7rqg-78g4) involving prototype pollution. The package is a transitive dependency of request (deprecated) and is not directly used by this application. No evidence shows it is loaded or that an attacker can control its input to trigger the vulnerability.

Impact: none · Exploitability: unlikely

Developer action: Update the parent dependency or remove request entirely.

Scanner: osv-scanner 2.4.0
Rule: GHSA-fjxv-7rqg-78g4:pkg:6c89c9914b40635e432f1415
File role: production
Source: package-lock.json

Dependency advisory GHSA-hmw2-7cc7-3qxx:pkg:b55f5aef11b0369cc46f988a applies

Minor caution · medium confidence

This form-data library has a bug that could cause slowdowns, but the app doesn't use it in a way an attacker could trigger.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-hmw2-7cc7-3qxx:pkg:b55f5aef11b0369cc46f988a to a dependency declared by this repository.

Contextual assessment: form-data 2.3.3 also flagged by GHSA-hmw2-7cc7-3qxx (ReDoS). Same lack of demonstrated runtime reachability and attacker-controlled input.

Impact: none · Exploitability: unlikely

Developer action: Update the parent dependency or remove request entirely.

Scanner: osv-scanner 2.4.0
Rule: GHSA-hmw2-7cc7-3qxx:pkg:b55f5aef11b0369cc46f988a
File role: production
Source: package-lock.json

Dependency advisory GHSA-6rw7-vpxm-498p:pkg:43bb4aeefd1a794ecdaf18ba applies

Minor caution · medium confidence

This query string parser has a bug, but the app doesn't use it in a way an attacker could exploit.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-6rw7-vpxm-498p:pkg:43bb4aeefd1a794ecdaf18ba to a dependency declared by this repository.

Contextual assessment: qs 6.5.5 has a medium-severity vulnerability (GHSA-6rw7-vpxm-498p) related to object prototype pollution via query string parsing. The package is a transitive dependency of request and is not directly used. No evidence of runtime usage or attacker-controlled query string handling.

Impact: none · Exploitability: unlikely

Developer action: Update the parent dependency or remove request entirely.

Scanner: osv-scanner 2.4.0
Rule: GHSA-6rw7-vpxm-498p:pkg:43bb4aeefd1a794ecdaf18ba
File role: production
Source: package-lock.json

zizmor reported unpinned-uses

Minor caution · high confidence

The action that creates releases is not pinned to a specific version, which is a best practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: softprops/action-gh-release at line 152 uses @v1 instead of a pinned SHA. This action creates GitHub releases and uploads artifacts. An attacker compromising this action could inject malicious release assets.

Impact: low · Exploitability: unlikely

Developer action: Pin softprops/action-gh-release to a specific commit SHA or use GitHub's built-in gh CLI for releases.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:152

Dependency advisory RUSTSEC-2024-0429:pkg:d2e88fc02f6be9987f66e6e8 applies

Minor caution · low confidence

This app uses a library (glib) with a known security issue, but it's deep inside the graphics system and unlikely to be triggered by a typical user's actions.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0429:pkg:d2e88fc02f6be9987f66e6e8 to a dependency declared by this repository.

Contextual assessment: glib 0.18.5 is a transitive dependency of the wry webview crate via the GTK stack. The advisory RUSTSEC-2024-0429 describes a potential vulnerability, but the supplied evidence does not show whether the vulnerable code path is reachable from attacker-controlled input within the Aventuras application. The app primarily loads local content; remote content exposure is limited.

Impact: low · Exploitability: unlikely

Developer action: Update glib to a patched version when available, or monitor for upstream fixes in wry/gtk.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0429:pkg:d2e88fc02f6be9987f66e6e8
File role: production
Source: src-tauri/Cargo.lock

zizmor reported unpinned-uses

Minor caution · medium confidence

This official action uses a version tag instead of a fixed commit. It's a minor supply chain best-practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action actions/setup-node@v4 is pinned to a mutable tag. As an official GitHub action, the risk is minimal, but pinning to a commit SHA is preferred. No exposure demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/lint-and-typecheck.yml:19

zizmor reported unpinned-uses

Minor caution · high confidence

The Node setup action is not locked to a specific version, a best practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/setup-node at line 90 uses @v4 instead of a pinned SHA, allowing potential malicious updates to the action's v4 tag.

Impact: low · Exploitability: unlikely

Developer action: Pin actions/setup-node to a specific commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:90

Dependency advisory GHSA-35p6-xmwp-9g52:pkg:d8c1871761b9627fdd34c81b applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-35p6-xmwp-9g52:pkg:d8c1871761b9627fdd34c81b to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 flagged by GHSA-35p6-xmwp-9g52 (HTTP request smuggling via chunked encoding). Same reasoning as other undici advisories: the AI SDK used by this app constructs requests to fixed endpoints with user content only in body, so attacker control over request structure is not demonstrated.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later.

Scanner: osv-scanner 2.4.0
Rule: GHSA-35p6-xmwp-9g52:pkg:d8c1871761b9627fdd34c81b
File role: production
Source: package-lock.json

Dependency advisory GHSA-8xcm-r25x-g524:pkg:cc5804616c4fb4e83e60068a applies

Minor caution · medium confidence

This networking library has a known bug, but the app uses it in a protected way that makes it unlikely an attacker could take advantage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-8xcm-r25x-g524:pkg:cc5804616c4fb4e83e60068a to a dependency declared by this repository.

Contextual assessment: undici 5.29.0 flagged by GHSA-8xcm-r25x-g524 (HTTP response splitting). Same lack of demonstrated attacker control over response handling.

Impact: none · Exploitability: unlikely

Developer action: Update undici to version 5.29.1 or later.

Scanner: osv-scanner 2.4.0
Rule: GHSA-8xcm-r25x-g524:pkg:cc5804616c4fb4e83e60068a
File role: production
Source: package-lock.json

Dependency advisory RUSTSEC-2026-0235:pkg:d039eb756756d5d8fe092ddd applies

Minor caution · low confidence

A library used indirectly (rkyv) has a known weakness, but there is no sign that it can be exploited through this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2026-0235:pkg:d039eb756756d5d8fe092ddd to a dependency declared by this repository.

Contextual assessment: rkyv 0.7.46 is a serialization crate used as a transitive dependency. Advisory RUSTSEC-2026-0235 indicates a potential vulnerability, but the evidence does not demonstrate reachability of the vulnerable code within Aventuras. The application does not process untrusted serialized data through this crate.

Impact: low · Exploitability: unlikely

Developer action: Update rkyv to a safe version if a patch is available; otherwise monitor.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2026-0235:pkg:d039eb756756d5d8fe092ddd
File role: production
Source: src-tauri/Cargo.lock

zizmor reported unpinned-uses

Minor caution · medium confidence

This official action uses a version tag instead of a fixed commit. It's a minor supply chain best-practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action actions/upload-artifact@v4 is pinned to a mutable tag. As an official GitHub action, the risk is low, but best practice is to pin to a commit SHA. No exposure is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:151

Dependency advisory RUSTSEC-2025-0100:pkg:bd8adf60c37242745cb633a0 applies

Minor caution · low confidence

A Unicode-related library has a reported vulnerability, but it's not clear how an attacker could use it through this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2025-0100:pkg:bd8adf60c37242745cb633a0 to a dependency declared by this repository.

Contextual assessment: unic-ucd-ident 0.9.0 is a Unicode character database crate used transitively. Advisory RUSTSEC-2025-0100 describes a potential issue, but the evidence does not show that attacker-controlled Unicode input reaches the vulnerable functionality. The application's use of Unicode data is minimal and not directly exposed to untrusted sources.

Impact: low · Exploitability: unlikely

Developer action: Update to a patched version when available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2025-0100:pkg:bd8adf60c37242745cb633a0
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory RUSTSEC-2024-0418:pkg:b245323ca01b322dae07bf9b applies

Minor caution · low confidence

A graphics system library has a known issue, but it's deep in the system and not directly exploitable through normal app use.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0418:pkg:b245323ca01b322dae07bf9b to a dependency declared by this repository.

Contextual assessment: gdk-sys 0.18.2 is a low-level GTK system binding used by the wry webview. Advisory RUSTSEC-2024-0418 indicates a potential vulnerability, but no evidence shows the vulnerable code path is reachable from user input. GTK vulnerabilities typically require local access or specific rendering conditions.

Impact: low · Exploitability: unlikely

Developer action: Update when patched GTK or wry versions become available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0418:pkg:b245323ca01b322dae07bf9b
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory RUSTSEC-2024-0420:pkg:d1377594ef97b5997d1bd6e4 applies

Minor caution · low confidence

A system-level library has a weakness, but it's not something a typical user would encounter or an attacker could exploit through this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0420:pkg:d1377594ef97b5997d1bd6e4 to a dependency declared by this repository.

Contextual assessment: gtk-sys 0.18.2 is a low-level GTK binding. Advisory RUSTSEC-2024-0420 describes a potential vulnerability, but the evidence does not demonstrate reachability from attacker-controlled input. The app's webview is limited to local and controlled remote content.

Impact: low · Exploitability: unlikely

Developer action: Monitor upstream fixes and update dependencies accordingly.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0420:pkg:d1377594ef97b5997d1bd6e4
File role: production
Source: src-tauri/Cargo.lock

Gitleaks reported generic-api-key

Minor caution · high confidence

The app has a secret access key hardcoded in its source code for talking to the JannyAI character search service. Even though it's only a backup key, anyone who reads the code can use it to query that service. This is not a critical leak because the key only allows searching characters, not accessing private data.

Technical evidence

Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.

Contextual assessment: The file hardcodes a 64-character hex token (FALLBACK_TOKEN) used as a Bearer token for authentication to the JannyAI search API. While this fallback is only used when dynamic token retrieval fails, the token is publicly exposed in the source code. This allows anyone with access to the code to use this token to make authenticated requests to the JannyAI search service, potentially leading to abuse of the service or exceeding rate limits. However, the token appears to be a client-side search token with limited scope, and the primary authentication method is dynamic token fetching.

Impact: low · Exploitability: readily_exploitable

Developer action: Remove the hardcoded fallback token. Instead, require the user to provide their own JannyAI token via a configuration setting, or improve the dynamic token retrieval to be more reliable. Alternatively, if the token is intended to be public for the app's use, consider documenting this and rotating it regularly.

Scanner: gitleaks 8.30.1
Rule: generic-api-key
File role: production
Source: src/lib/services/discovery/providers/janny.ts:9

Dependency advisory RUSTSEC-2024-0415:pkg:7feb02dbce543e0572f8f169 applies

Minor caution · low confidence

A library used for windowing has a reported issue, but it is unlikely to be triggered in normal usage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0415:pkg:7feb02dbce543e0572f8f169 to a dependency declared by this repository.

Contextual assessment: gtk 0.18.2 is a direct dependency of wry. Advisory RUSTSEC-2024-0415 indicates a potential vulnerability. The evidence does not show that the vulnerable functionality is reachable from untrusted input within the Aventuras application. GTK vulnerabilities typically require local or specific conditions.

Impact: low · Exploitability: unlikely

Developer action: Update to a patched version of wry or GTK when available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0415:pkg:7feb02dbce543e0572f8f169
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory RUSTSEC-2025-0075:pkg:3e15a087e2f1d00bbc8d944a applies

Minor caution · low confidence

A Unicode library has a known weakness, but it's not exploitable through this app's features.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2025-0075:pkg:3e15a087e2f1d00bbc8d944a to a dependency declared by this repository.

Contextual assessment: unic-char-range 0.9.0 is a Unicode crate used transitively. Advisory RUSTSEC-2025-0075 describes a potential issue. The evidence does not demonstrate that attacker-controlled Unicode input reaches this component. The application's Unicode handling is limited and not directly exposed.

Impact: low · Exploitability: unlikely

Developer action: Update when a patched version is available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2025-0075:pkg:3e15a087e2f1d00bbc8d944a
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory RUSTSEC-2025-0098:pkg:bc6e2fc910a7ca702c31e56a applies

Minor caution · low confidence

Another Unicode-related library has a reported issue, but the app doesn't expose it to attacker influence.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2025-0098:pkg:bc6e2fc910a7ca702c31e56a to a dependency declared by this repository.

Contextual assessment: unic-ucd-version 0.9.0 is a Unicode database crate used transitively. Advisory RUSTSEC-2025-0098 indicates a potential vulnerability. No evidence shows that the vulnerable code is reachable from user input in Aventuras.

Impact: low · Exploitability: unlikely

Developer action: Update to a patched version when available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2025-0098:pkg:bc6e2fc910a7ca702c31e56a
File role: production
Source: src-tauri/Cargo.lock

zizmor reported unpinned-uses

Minor caution · medium confidence

This official action uses a version tag instead of a fixed commit. It's a minor supply chain best-practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action actions/checkout@v4 is pinned to a mutable tag. While the risk is low for an official action, pinning to a commit SHA improves supply chain security. No exposure demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/lint-and-typecheck.yml:16

zizmor reported unpinned-uses

Minor caution · medium confidence

This official action uses a version tag instead of a fixed commit. It's a minor supply chain best-practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action actions/setup-node@v4 is pinned to a mutable tag. Official action, low risk, but pinning to commit SHA is recommended. No exposure demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:46

Dependency advisory RUSTSEC-2024-0416:pkg:c8c328b18837aef0f997eeec applies

Minor caution · low confidence

An accessibility library has a known issue, but it's not accessible via user input in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0416:pkg:c8c328b18837aef0f997eeec to a dependency declared by this repository.

Contextual assessment: atk-sys 0.18.2 is a low-level ATK system binding used by the GTK accessibility layer. Advisory RUSTSEC-2024-0416 describes a potential vulnerability. The evidence does not show reachability from attacker-controlled input; this is a desktop-only component with limited attack surface.

Impact: low · Exploitability: unlikely

Developer action: Update when patched versions are available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0416:pkg:c8c328b18837aef0f997eeec
File role: production
Source: src-tauri/Cargo.lock

Gitleaks reported generic-api-key

Minor caution · high confidence

The app has a hardcoded password for a search service inside its code. While anyone can read it, it can only be used to search for character cards, not to access your personal information or accounts.

Technical evidence

Scanner reason: Gitleaks matched secret-detection rule generic-api-key in this repository.

Contextual assessment: A hardcoded fallback API token for the JannyAI search service is present at line 9 of janny.ts. The token is a 64-character hex string used as an Authorization bearer token when the runtime attempt to fetch a fresh token from JannyAI fails. Since the token is static and visible in the public source code, it could be used by anyone to query the JannyAI search API, which is a rate-limited public service. This does not compromise user credentials or grant access to sensitive data; it only affects the app's own API usage.

Impact: low · Exploitability: plausible

Developer action: Consider fetching the token at build time via environment variable or using a runtime authentication flow that avoids exposing a static credential in the source repository.

Scanner: gitleaks 8.30.1
Rule: generic-api-key
File role: production
Source: src/lib/services/discovery/providers/janny.ts:9

zizmor reported unpinned-uses

Minor caution · medium confidence

This Rust toolchain action uses a version tag instead of a fixed commit, which is a minor supply chain hygiene issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action dtolnay/rust-toolchain@stable is pinned to a mutable tag. While widely used, tag-based pinning allows the action maintainer to change behavior under the same tag. No compromise is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:52

Dependency advisory GHSA-p8p7-x288-28g6:pkg:e8e7ad0090121b0f387eaa27 applies

Minor caution · medium confidence

This old HTTP library has a bug that could allow server-side request forgery, but the app doesn't actually use it.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-p8p7-x288-28g6:pkg:e8e7ad0090121b0f387eaa27 to a dependency declared by this repository.

Contextual assessment: request 2.88.2 has a medium-severity vulnerability (GHSA-p8p7-x288-28g6) related to server-side request forgery (SSRF) via redirects. This package is deprecated and not a direct dependency of the project; it appears only as a transitive dependency. No evidence shows it is used at runtime in this Tauri application. Even if present, attacker control over redirect handling is not demonstrated.

Impact: none · Exploitability: unlikely

Developer action: Remove the unused transitive dependency by updating the packages that depend on request.

Scanner: osv-scanner 2.4.0
Rule: GHSA-p8p7-x288-28g6:pkg:e8e7ad0090121b0f387eaa27
File role: production
Source: package-lock.json

Dependency advisory GHSA-p88m-4jfj-68fv:pkg:0aa6e836b145749eb5c5bae2 applies

Minor caution · high confidence

The project uses an older version of a network library that has known security issues. However, there is no proof that an attacker can actually exploit those issues in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-p88m-4jfj-68fv:pkg:0aa6e836b145749eb5c5bae2 to a dependency declared by this repository.

Contextual assessment: undici@5.29.0 is a transitive dependency with known advisories but no evidence of runtime reachability or attacker-controlled input was provided. The Tauri desktop app may use undici for HTTP calls, but the supplied code does not demonstrate a concrete exploitation path.

Impact: low · Exploitability: unlikely

Developer action: Update undici to a patched version (5.29.1 or later) to reduce supply-chain risk.

Scanner: osv-scanner 2.4.0
Rule: GHSA-p88m-4jfj-68fv:pkg:0aa6e836b145749eb5c5bae2
File role: production
Source: package-lock.json

Dependency advisory GHSA-4992-7rv2-5pvq:pkg:787189633d8ba93446193680 applies

Minor caution · high confidence

The project uses an older version of a network library that has known security issues. However, there is no proof that an attacker can actually exploit those issues in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-4992-7rv2-5pvq:pkg:787189633d8ba93446193680 to a dependency declared by this repository.

Impact: low · Exploitability: unlikely

Developer action: Update undici to a patched version (5.29.1 or later) to reduce supply-chain risk.

Scanner: osv-scanner 2.4.0
Rule: GHSA-4992-7rv2-5pvq:pkg:787189633d8ba93446193680
File role: production
Source: package-lock.json

Dependency advisory RUSTSEC-2024-0419:pkg:694df782baf029578982f056 applies

Minor caution · low confidence

A build-time macro library has a reported weakness, but it only runs during compilation, not in the running app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0419:pkg:694df782baf029578982f056 to a dependency declared by this repository.

Contextual assessment: gtk3-macros 0.18.2 is a proc-macro crate for GTK. Advisory RUSTSEC-2024-0419 describes a potential vulnerability. Proc-macro crates are compile-time only and not directly exploitable at runtime. No runtime reachability is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Update to a patched version when available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0419:pkg:694df782baf029578982f056
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory RUSTSEC-2024-0412:pkg:4216c3e2f95d873b67813c23 applies

Minor caution · low confidence

A graphics library has a known issue, but it's not exploitable through normal app usage.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0412:pkg:4216c3e2f95d873b67813c23 to a dependency declared by this repository.

Contextual assessment: gdk 0.18.2 is a GTK drawing library used by wry. Advisory RUSTSEC-2024-0412 describes a potential vulnerability. No evidence shows reachability from user-controlled input; the attack surface is limited to local desktop rendering.

Impact: low · Exploitability: unlikely

Developer action: Update when patched versions of wry or GTK are available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0412:pkg:4216c3e2f95d873b67813c23
File role: production
Source: src-tauri/Cargo.lock

Dependency advisory GHSA-v9p9-hfj2-hcw8:pkg:272b59ddefffdd1746f88817 applies

Minor caution · high confidence

The project uses an older version of a network library that has known security issues. However, there is no proof that an attacker can actually exploit those issues in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v9p9-hfj2-hcw8:pkg:272b59ddefffdd1746f88817 to a dependency declared by this repository.

Impact: low · Exploitability: unlikely

Developer action: Update undici to a patched version (5.29.1 or later) to reduce supply-chain risk.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v9p9-hfj2-hcw8:pkg:272b59ddefffdd1746f88817
File role: production
Source: package-lock.json

zizmor reported unpinned-uses

Minor caution · medium confidence

This action uses a version tag instead of a specific commit hash. It's a minor supply chain best-practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The action softprops/action-gh-release@v1 is pinned to a mutable tag. This could allow a tag update to change behavior. No evidence of compromise is present.

Impact: low · Exploitability: unlikely

Developer action: Pin the action to an immutable commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:157

zizmor reported unpinned-uses

Minor caution · high confidence

The NDK setup action is not pinned, a best practice issue.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: nttld/setup-ndk at line 111 uses @v1 instead of a pinned SHA, which could be compromised.

Impact: low · Exploitability: unlikely

Developer action: Pin nttld/setup-ndk to a specific commit SHA.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/release.yml:111

Dependency advisory GHSA-g9mf-h72j-4rw9:pkg:2ae61459d96677abe6b160ba applies

Minor caution · high confidence

The project uses an older version of a network library that has known security issues. However, there is no proof that an attacker can actually exploit those issues in this app.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-g9mf-h72j-4rw9:pkg:2ae61459d96677abe6b160ba to a dependency declared by this repository.

Impact: low · Exploitability: unlikely

Developer action: Update undici to a patched version (5.29.1 or later) to reduce supply-chain risk.

Scanner: osv-scanner 2.4.0
Rule: GHSA-g9mf-h72j-4rw9:pkg:2ae61459d96677abe6b160ba
File role: production
Source: package-lock.json

zizmor reported unpinned-uses

Minor caution · high confidence

This Rust toolchain action uses a floating tag that could change unexpectedly, potentially breaking the build.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: Same as group1 candidate 79e753d3. dtolnay/rust-toolchain@stable is a floating tag. While not a security vulnerability, it can cause unexpected build changes.

Impact: low · Exploitability: unlikely

Developer action: Consider pinning to a fixed version tag for reproducibility.

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:102

zizmor reported superfluous-actions

Minor caution · high confidence

The workflow uses a third-party action for a task that GitHub already provides, which is unnecessary but not dangerous.

Technical evidence

Scanner reason: zizmor matched workflow-security rule superfluous-actions in this repository.

Contextual assessment: The softprops/action-gh-release action at line 152 is superfluous because GitHub runners include built-in functionality for uploading release assets via the gh CLI or the create-release action. Using an external action adds an unnecessary dependency.

Impact: none · Exploitability: unlikely

Developer action: Replace the action with a built-in step using the gh CLI (e.g., run: gh release upload) to reduce external dependencies.

Scanner: zizmor 1.28.0
Rule: superfluous-actions
File role: tooling
Source: .github/workflows/release.yml:152

Dependency advisory RUSTSEC-2024-0417:pkg:38b1a8e2b331be3a60dc921d applies

Minor caution · low confidence

A window system library has a known issue, but it's not directly exploitable through this app's features.

Technical evidence

Scanner reason: OSV-Scanner matched advisory RUSTSEC-2024-0417:pkg:38b1a8e2b331be3a60dc921d to a dependency declared by this repository.

Contextual assessment: gdkx11 0.18.2 is a GTK X11 backend used by wry. Advisory RUSTSEC-2024-0417 describes a potential vulnerability. The evidence does not demonstrate that the vulnerable code is reachable from attacker-controlled input. X11 vulnerabilities typically require local access or specific window manager conditions.

Impact: low · Exploitability: unlikely

Developer action: Update when patched versions are available.

Scanner: osv-scanner 2.4.0
Rule: RUSTSEC-2024-0417:pkg:38b1a8e2b331be3a60dc921d
File role: production
Source: src-tauri/Cargo.lock

Expected scanner matches (23)

zizmor reported cache-poisoning

Expected behavior · low confidence

This is the same safe caching pattern as in the desktop build. No risk.

Technical evidence

Scanner reason: zizmor matched workflow-security rule cache-poisoning in this repository.

Contextual assessment: Same cache-poisoning pattern as in the desktop job. The Android job uses actions/setup-node@v4 with npm cache, but npm ci enforces integrity. Scanner confidence low.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: cache-poisoning
File role: tooling
Source: .github/workflows/ci.yml:95

zizmor reported cache-poisoning

Expected behavior · low confidence

The workflow uses a standard npm caching setup that is safe and widely used. No real risk of cache poisoning exists.

Technical evidence

Scanner reason: zizmor matched workflow-security rule cache-poisoning in this repository.

Contextual assessment: The zizmor cache-poisoning rule triggered on actions/setup-node@v4 with the npm cache option. The workflow uses npm ci which enforces file integrity, making cache poisoning practically infeasible. The scanner confidence is low, indicating a theoretical pattern match without demonstrated exploitability.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: cache-poisoning
File role: tooling
Source: .github/workflows/ci.yml:42

zizmor reported unpinned-uses

Expected behavior · high confidence

This action is pinned to a major version, which is the recommended practice. It is safe.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: android-actions/setup-android@v3 is pinned to a major version. No vulnerability demonstrated.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:113

zizmor reported unpinned-uses

Expected behavior · high confidence

This Tauri action is pinned to a major version, which is standard practice.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: tauri-apps/tauri-action@v0 is a well-known official action. Using @v0 is a major version tag, acceptable for a release workflow.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:67

zizmor reported unpinned-uses

Expected behavior · high confidence

Standard and safe pinning.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/checkout@v4 pinned to major version, safe.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:92

zizmor reported unpinned-uses

Expected behavior · high confidence

Using @v4 for set-up-node is normal and safe. It automatically receives security patches.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: The flagged step uses actions/setup-node@v4, which is pinned to a major version tag. This is standard practice in GitHub Actions and points to the latest patch within v4. No evidence of an active supply chain threat targeting this action.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:42

zizmor reported artipacked

Expected behavior · low confidence

This warning is about artifacts possibly saving secret credentials, but the step it flags is just checking out code, not producing an artifact. The real artifacts are clean APK files.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: The artipacked rule warns about credential persistence through artifacts, but the checkout step (line 38–39) does not produce any artifact. The workflow later uploads built APKs, which are the correct artifact type and do not contain secrets. Scanner confidence is low and no credential exposure is demonstrated.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: artipacked
File role: tooling
Source: .github/workflows/ci.yml:38-39

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

A security scanner flagged a GitHub URL in a test file, but that URL is only used as example data for testing version-related code. It's not used to connect anywhere.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link in this repository.

Contextual assessment: The 'shady-link' signal was triggered by a string literal 'ssh://git@github.com/AventurasTeam/Aventuras.git' used as test input in a unit test file. The file is test-only and not shipped. No actual network access occurs from this line.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
Rule: javascript.xray.shady-link
File role: test
Source: scripts/remote.test.js:10

zizmor reported unpinned-uses

Expected behavior · high confidence

This action is pinned to a major version, which is the recommended practice. It is safe.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/checkout@v4 is pinned to a major version tag, following best practices. No vulnerability is implied.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:39

zizmor reported superfluous-actions

Expected behavior · low confidence

This step is needed for uploading files to a GitHub release; it is not unnecessary or dangerous.

Technical evidence

Scanner reason: zizmor matched workflow-security rule superfluous-actions in this repository.

Contextual assessment: The action softprops/action-gh-release@v1 is used to upload an APK to the release. The scanner flagged it as 'superfluous', but the runner does not include this functionality natively. The action is appropriate for this use case.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: superfluous-actions
File role: tooling
Source: .github/workflows/ci.yml:157

zizmor reported excessive-permissions

Expected behavior · high confidence

This workflow needs permission to create releases and upload files. The write permission is exactly what is required and not excessive.

Technical evidence

Scanner reason: zizmor matched workflow-security rule excessive-permissions in this repository.

Contextual assessment: The workflow sets 'contents: write' permission, which is necessary for creating GitHub releases and uploading assets. This is the minimum permission required for the release job's functionality. No excessive permissions are granted beyond what is needed.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: excessive-permissions
File role: tooling
Source: .github/workflows/release.yml:18

zizmor reported artipacked

Expected behavior · low confidence

This is the same non-issue as before. The checkout step does not produce any artifact.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: Same artipacked pattern as in group1. The checkout step does not create artifacts. Later artifact upload is a clean APK.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: artipacked
File role: tooling
Source: .github/workflows/ci.yml:91-92

zizmor reported artipacked

Expected behavior · low confidence

This warning about credential leakage through artifacts does not apply here because no secrets are handled in these steps.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: The scanner flagged potential credential persistence via artifacts for checkout and setup-node steps. However, no secrets are written to files in these steps and the artifact upload (APK) does not include credentials. No exposure path exists.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: artipacked
File role: tooling
Source: .github/workflows/release.yml:86-87

zizmor reported cache-poisoning

Expected behavior · low confidence

The Rust caching action could theoretically be poisoned, but in practice it is very unlikely and the workflow controls make it even safer.

Technical evidence

Scanner reason: zizmor matched workflow-security rule cache-poisoning in this repository.

Contextual assessment: swatinem/rust-cache@v2 is used for Rust build caching. Cache poisoning is a theoretical attack, but the cache key includes the runner and path, and the workflow only runs on tag pushes and manual dispatch, limiting attacker influence. Scanner confidence is low.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: cache-poisoning
File role: tooling
Source: .github/workflows/ci.yml:53

zizmor reported artipacked

Expected behavior · low confidence

This warning about credential leakage through artifacts does not apply here because no secrets are written to files or uploaded.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: The scanner flagged a potential credential persistence via artifacts (artipacked) on the checkout and node setup steps. However, these steps do not write secrets to files or upload artifacts; the artifact upload does not occur in this workflow. No credential exposure path exists.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: artipacked
File role: tooling
Source: .github/workflows/lint-and-typecheck.yml:15-16

JavaScript analysis reported javascript.xray.serialize-environment

Expected behavior · high confidence

The app's build configuration reads a system setting to allow developers to test it on other devices. This is normal and does not pose a security risk.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.

Contextual assessment: The file reads the TAURI_DEV_HOST environment variable at line 5. This is a standard Tauri development configuration that allows the dev server to be accessible on a specific network interface. The variable is used only for the dev server's host and HMR configuration. It does not serialize or transmit environment data to any server; it is a local configuration value. This is expected behavior for a Tauri development setup.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
Rule: javascript.xray.serialize-environment
File role: tooling
Source: vite.config.js:5

zizmor reported artipacked

Expected behavior · low confidence

This warning about credential leakage through artifacts does not apply here because no secrets are exposed.

Technical evidence

Scanner reason: zizmor matched workflow-security rule artipacked in this repository.

Contextual assessment: The scanner flagged potential credential persistence via artifacts for desktop build steps. No secrets are written to files in these steps and artifact upload does not include credential data. No exposure path.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: artipacked
File role: tooling
Source: .github/workflows/release.yml:42-43

JavaScript analysis reported javascript.xray.unsafe-regex

Expected behavior · high confidence

A security scanner flagged a version-checking pattern as potentially dangerous, but this pattern is simple and only used internally during releases. There's no risk for users.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex in this repository.

Contextual assessment: The regex pattern /^(\d+)\.(\d+)\.(\d+)(?:-pre\.(\d+))?$/ is used to validate version strings in a release tooling script. It is fully anchored and matches only bounded sequences of digits and dots, making ReDoS improbable. Moreover, the script is tooling (not shipped to users) and only processes controlled input from the development process.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
Rule: javascript.xray.unsafe-regex
File role: tooling
Source: scripts/version.js:14

zizmor reported unpinned-uses

Expected behavior · high confidence

Standard and safe pinning.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/setup-node@v4 pinned to major version, safe.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:95

zizmor reported excessive-permissions

Expected behavior · high confidence

The workflow needs permission to write to the repository in order to create a release. That is the only permission it has, which is exactly what is needed.

Technical evidence

Scanner reason: zizmor matched workflow-security rule excessive-permissions in this repository.

Contextual assessment: The workflow sets `contents: write` at the top level, which is necessary for creating releases. No additional permissions (e.g., issues, pull requests) are granted. This is appropriate for a release workflow.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: excessive-permissions
File role: tooling
Source: .github/workflows/ci.yml:13

zizmor reported excessive-permissions

Expected behavior · low confidence

The warning about broad permissions is misleading because the workflow uses GitHub's default read-only token for pull requests, which is safe and expected.

Technical evidence

Scanner reason: zizmor matched workflow-security rule excessive-permissions in this repository.

Contextual assessment: The scanner flagged excessive permissions for the entire job, but the workflow does not define a custom permissions block. For pull_request events, the default GITHUB_TOKEN has read-only contents access, which is appropriate for linting and type-checking. No excessive permissions are granted.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: excessive-permissions
File role: tooling
Source: .github/workflows/lint-and-typecheck.yml:12-35

zizmor reported unpinned-uses

Expected behavior · high confidence

This action is pinned to a major version, which is the recommended practice. It is safe.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: swatinem/rust-cache@v2 is pinned to a major version tag, which is standard and safe.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:53

zizmor reported unpinned-uses

Expected behavior · high confidence

Standard and safe pinning.

Technical evidence

Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.

Contextual assessment: actions/setup-java@v4 pinned to major version, safe.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: zizmor 1.28.0
Rule: unpinned-uses
File role: tooling
Source: .github/workflows/ci.yml:107

Related contextual observations

Hardcoded fallback API token

low risk · high confidence

There is a hardcoded search key in the app's code that anyone can see and use. It's not dangerous, but it's not a best practice.

Technical assessment

The FALLBACK_TOKEN constant at line 9 of janny.ts is a static hex string used as a bearer token for the JannyAI search API. It is visible in the public source code and can be extracted by anyone. While it only provides access to a rate-limited public search service and does not expose user data, it is still a security concern as it represents an embedded secret.

Impact: low · Exploitability: plausible

Developer action: Move this token to a build-time environment variable or use a more secure authentication mechanism that does not require a static secret.

Sources:

src/lib/services/discovery/providers/janny.ts:9

Coverage and limitations

Inventory: 789 files · 9534637 bytes
Contextual coverage: 87 of 87 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 371 files · 2663960 bytes
Representations: 371 raw · 19 decoded · 0 normalized · 0 bundle modules
Stage scans: 371 raw signatures · 63 raw AST · 371 raw OpenGrep · 19 derived signatures · 0 derived AST · 19 derived OpenGrep

Unresolved JavaScript stages

scripts/release.js — derived-ast / parse
scripts/release.js — normalize / parse
src/lib/components/settings/advancedPanelView.test.ts — raw-ast / parse
src/lib/components/settings/advancedPanelView.ts — raw-ast / parse
src/lib/components/ui/alert/index.ts — raw-ast / parse
src/lib/components/ui/badge/index.ts — raw-ast / parse
src/lib/components/ui/button/index.ts — raw-ast / parse
src/lib/components/ui/drawer/index.ts — raw-ast / parse
src/lib/components/ui/responsive-modal/context.ts — raw-ast / parse
src/lib/components/ui/toggle/index.ts — raw-ast / parse
src/lib/components/vault/prompts/sampleContext.ts — raw-ast / parse
src/lib/components/vault/prompts/templateGroups.ts — raw-ast / parse
src/lib/components/wizard/wizardTypes.ts — raw-ast / parse
src/lib/constants/modelHealth.ts — raw-ast / parse
src/lib/log.ts — raw-ast / parse
src/lib/services/ai/BaseAIService.ts — raw-ast / parse
src/lib/services/ai/core/config.ts — raw-ast / parse
src/lib/services/ai/core/defaults.ts — raw-ast / parse
src/lib/services/ai/core/factory.ts — raw-ast / parse
src/lib/services/ai/core/index.ts — raw-ast / parse
src/lib/services/ai/core/requestOverrides.ts — raw-ast / parse
src/lib/services/ai/core/types.ts — raw-ast / parse
src/lib/services/ai/generation/ActionChoicesService.ts — raw-ast / parse
src/lib/services/ai/generation/ClassifierService.ts — raw-ast / parse
src/lib/services/ai/generation/MemoryService.ts — raw-ast / parse
src/lib/services/ai/generation/NarrativeService.test.ts — raw-ast / parse
src/lib/services/ai/generation/NarrativeService.ts — raw-ast / parse
src/lib/services/ai/generation/StyleReviewerService.ts — raw-ast / parse
src/lib/services/ai/generation/SuggestionsService.ts — raw-ast / parse
src/lib/services/ai/generation/WorldStateInjector.test.ts — raw-ast / parse
src/lib/services/ai/generation/WorldStateInjector.ts — raw-ast / parse
src/lib/services/ai/generation/index.ts — raw-ast / parse
src/lib/services/ai/image/BackgroundImageService.ts — raw-ast / parse
src/lib/services/ai/image/ImageAnalysisService.ts — raw-ast / parse
src/lib/services/ai/image/InlineImageService.ts — raw-ast / parse
src/lib/services/ai/image/InlineImageTracker.ts — raw-ast / parse
src/lib/services/ai/image/imageUtils.ts — raw-ast / parse
src/lib/services/ai/image/index.ts — raw-ast / parse
src/lib/services/ai/image/providers/a1111.ts — raw-ast / parse
src/lib/services/ai/image/providers/chutes.ts — raw-ast / parse
src/lib/services/ai/image/providers/comfy.ts — raw-ast / parse
src/lib/services/ai/image/providers/fetchAdapter.ts — raw-ast / parse
src/lib/services/ai/image/providers/google.ts — raw-ast / parse
src/lib/services/ai/image/providers/nanogpt.ts — raw-ast / parse
src/lib/services/ai/image/providers/openai.ts — raw-ast / parse
src/lib/services/ai/image/providers/openrouter.ts — raw-ast / parse
src/lib/services/ai/image/providers/pollinations.ts — raw-ast / parse
src/lib/services/ai/image/providers/registry.test.ts — raw-ast / parse
src/lib/services/ai/image/providers/registry.ts — raw-ast / parse
src/lib/services/ai/image/providers/types.ts — raw-ast / parse
src/lib/services/ai/image/providers/zhipu.ts — raw-ast / parse
src/lib/services/ai/index.ts — raw-ast / parse
src/lib/services/ai/lorebook/LoreManagementService.ts — raw-ast / parse
src/lib/services/ai/lorebook/index.ts — raw-ast / parse
src/lib/services/ai/retrieval/AgenticRetrievalService.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/AgenticRetrievalService.ts — raw-ast / parse
src/lib/services/ai/retrieval/EntryRetrievalService.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/EntryRetrievalService.ts — raw-ast / parse
src/lib/services/ai/retrieval/TimelineFillService.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/TimelineFillService.ts — raw-ast / parse
src/lib/services/ai/retrieval/alreadyInContext.ts — raw-ast / parse
src/lib/services/ai/retrieval/chapterContentBudget.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/chapterContentBudget.ts — raw-ast / parse
src/lib/services/ai/retrieval/grepSampling.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/grepSampling.ts — raw-ast / parse
src/lib/services/ai/retrieval/index.ts — raw-ast / parse
src/lib/services/ai/retrieval/recentTail.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/recentTail.ts — raw-ast / parse
src/lib/services/ai/retrieval/retrievalHistory.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/retrievalHistory.ts — raw-ast / parse
src/lib/services/ai/retrieval/retrievalSnapshot.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/retrievalSnapshot.ts — raw-ast / parse
src/lib/services/ai/retrieval/stickiness.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/stickiness.ts — raw-ast / parse
src/lib/services/ai/retrieval/tier2SecondPass.ts — raw-ast / parse
src/lib/services/ai/retrieval/tier3Selection.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/tier3Selection.ts — raw-ast / parse
src/lib/services/ai/retrieval/timelineFillGrouping.test.ts — raw-ast / parse
src/lib/services/ai/retrieval/timelineFillGrouping.ts — raw-ast / parse
src/lib/services/ai/sdk/agents/factory.ts — raw-ast / parse
src/lib/services/ai/sdk/agents/index.ts — raw-ast / parse
src/lib/services/ai/sdk/agents/stopConditions.ts — raw-ast / parse
src/lib/services/ai/sdk/generate.test.ts — raw-ast / parse
src/lib/services/ai/sdk/generate.ts — raw-ast / parse
src/lib/services/ai/sdk/index.ts — raw-ast / parse
src/lib/services/ai/sdk/middleware/index.ts — raw-ast / parse
src/lib/services/ai/sdk/middleware/logging.ts — raw-ast / parse
src/lib/services/ai/sdk/middleware/patchResponse.ts — raw-ast / parse
src/lib/services/ai/sdk/middleware/promptSchema.ts — raw-ast / parse
src/lib/services/ai/sdk/middleware/retryMiddleware.ts — raw-ast / parse
src/lib/services/ai/sdk/middleware/uniqueToolCallId.ts — raw-ast / parse
src/lib/services/ai/sdk/providers/config.ts — raw-ast / parse
src/lib/services/ai/sdk/providers/fetch.ts — raw-ast / parse
src/lib/services/ai/sdk/providers/index.ts — raw-ast / parse
src/lib/services/ai/sdk/providers/modelFetcher.ts — raw-ast / parse
src/lib/services/ai/sdk/providers/modelPing.test.ts — raw-ast / parse
src/lib/services/ai/sdk/providers/modelPing.ts — raw-ast / parse
src/lib/services/ai/sdk/providers/registry.ts — raw-ast / parse
src/lib/services/ai/sdk/schemas/actionchoices.ts — raw-ast / parse
src/lib/services/ai/sdk/schemas/classifier.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 4 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — completed
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: 6d18d6973996f61c0d88a7a71e761ddb191f0c10
Completed: Aug 10, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · deepseek/deepseek-v4-flash:thinking
Scanner: 0.1.0
Scanner policy: 4
Rule catalog: 1
Contextual policy: 4
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 18 fresh / 0 reused groups · 87 fresh / 0 reused candidates
Review source reports: none
Review batching: 10 model calls · up to 4 groups and 16 candidates per call · 3 retry calls · 0 over-budget singleton calls
Review usage: 325534 input · 58450 output · 0 cache read · 0 reasoning tokens
Report: 83009547c106e61366b5ce1243cf502b9fa614104189e57cf3a364a66819caba