TavernKeeper Scan Report

Finn-Hecker/RyokanApp

Commit cf40123 Reviewed Oct 1, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 24 low

What this review found

No material or immediate-danger item was identified.

Deterministic technical evidence (23)

Dependency advisory RUSTSEC-2026-0104:pkg:7e658c07c48d9d2faf042606 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2025-0134:pkg:097221ca551c5a36ea9650f1 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-p98j-92pf-mc4p:pkg:4ba94cac5a532404d4aa2553 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory RUSTSEC-2026-0204:pkg:33c0cae0e4dbc28ee9aceeac applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-pxg6-pf52-xh8x:pkg:6da1e3539f31ff57c2a349c3 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-9rgm-9g3h-6x36:pkg:8a05d6d431ec29dc9927e432 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory RUSTSEC-2024-0370:pkg:9b268f40461da81c7a1c55ed applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-wrw7-89jp-8q8g:pkg:4b30aae73f1836d87a5b008c applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2026-0258:pkg:95f9173f3d1ac6374e456fa8 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/utils/generationCapabilities.test.mjs:55
Dependency advisory RUSTSEC-2026-0221:pkg:44eb386acc1a4f9a94166f13 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-82j2-j2ch-gfr8:pkg:96123c5b487f527f8d0800cf applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2026-0098:pkg:2cf644dbdab1acf4454363df applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2024-0429:pkg:d2e88fc02f6be9987f66e6e8 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2026-0099:pkg:785327dcda385fd054101702 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
zizmor reported artipacked · zizmor 1.28.0

The code has a known weakness, though this scan does not show that anyone can exploit it here.

Policy reason: zizmor-known-workflow-rule · Execution scope: automation

Source: .github/workflows/windows-release.yml:27
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/utils/connectionCore.test.mjs:52
Dependency advisory GHSA-xgp8-3hg3-c2mh:pkg:313321f0eff461a0ed69a98d applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/utils/rollingSummaryRuntime.test.mjs:80
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/utils/diagnostics.test.mjs:53
Dependency advisory GHSA-965h-392x-2mh5:pkg:f53b69f7659a4af07ac9fa2b applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2024-0436:pkg:ebf877986b5b24c5e0b97624 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/utils/apiParameters.test.mjs:26

Contextual expected matches (1)

JavaScript analysis reported javascript.xray.serialize-environment

Expected behavior · high confidence

A scanner noticed the script takes information from a system environment variable and wrote it into a file, which can sometimes indicate secret theft. Here, the value is a public signing key — a piece of information that is deliberately shared with users so their app can verify that updates genuinely come from the project. It is written only into a local build configuration file, never sent anywhere over the network. This is a normal, expected step for setting up secure automatic updates.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment. The match applies to this repository.

Contextual assessment: The scanner flagged environment-variable serialization at the point where the build script reads TAURI_UPDATER_PUBLIC_KEY and passes it into a config generator. Reviewing the actual data flow: the value read is a Tauri updater signing PUBLIC key, which by design is distributed to clients and embedded in the shipped app to verify update signatures — it is not a credential or secret. The script validates the value's structure, embeds it only in a locally generated updater configuration file within the repository, and emits a release tag. There is no network transmission of environment contents, no inclusion of other environment variables, no obfuscation, and no execution path beyond an explicit developer/CI invocation gated on being run as the main module. This matches the stated purpose of preparing signed auto-update configuration for the project's Windows releases. The 'serialize-environment' heuristic is a candidate-locating signal only; the demonstrated data flow shows no secret handling and no exfiltration.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.serialize-environment
File role: tooling
Source: scripts/updater-config.mjs:33

Coverage and limitations

Inventory: 267 files · 5302944 bytes
Contextual coverage: 24 of 24 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 61 files · 349707 bytes
X-Ray review families: 18 warning occurrences compacted to 6 evidence-preserving review families
Representations: 61 raw · 1 decoded · 0 normalized · 0 bundle modules
Stage scans: 61 raw signatures · 23 raw AST · 61 raw OpenGrep · 1 derived signatures · 0 derived AST · 1 derived OpenGrep

Unresolved JavaScript stages

src/lib/components/editor/character/characterLogic.ts — raw-ast / parse
src/lib/components/editor/worldinfo/worldInfoLogic.ts — raw-ast / parse
src/lib/components/lobby/mobileCharacterLongPress.ts — raw-ast / parse
src/lib/data/characters.ts — raw-ast / parse
src/lib/data/worldInfo.ts — raw-ast / parse
src/lib/stores/appState.svelte.ts — raw-ast / parse
src/lib/stores/characterStore.svelte.ts — raw-ast / parse
src/lib/stores/chatStore.svelte.ts — raw-ast / parse
src/lib/stores/multiplayer.svelte.ts — raw-ast / parse
src/lib/stores/navigation.ts — raw-ast / parse
src/lib/stores/roleStore.svelte.ts — raw-ast / parse
src/lib/stores/worldInfoStore.svelte.ts — raw-ast / parse
src/lib/utils/additionalApiParameters.ts — raw-ast / parse
src/lib/utils/androidViewport.ts — raw-ast / parse
src/lib/utils/apiConnections.ts — raw-ast / parse
src/lib/utils/apiParameters.ts — raw-ast / parse
src/lib/utils/characterGreeting.ts — raw-ast / parse
src/lib/utils/chatApi.ts — raw-ast / parse
src/lib/utils/chatPromptBuilder.ts — raw-ast / parse
src/lib/utils/chatScroll.ts — raw-ast / parse
src/lib/utils/clientLanguage.ts — raw-ast / parse
src/lib/utils/connectionCore.ts — raw-ast / parse
src/lib/utils/diagnosticDecisions.ts — raw-ast / parse
src/lib/utils/diagnostics.ts — raw-ast / parse
src/lib/utils/diagnosticsMetadata.ts — raw-ast / parse
src/lib/utils/generationCapabilities.ts — raw-ast / parse
src/lib/utils/generationError.ts — raw-ast / parse
src/lib/utils/modelPickerData.ts — raw-ast / parse
src/lib/utils/modelProviderGroups.ts — raw-ast / parse
src/lib/utils/promptBuilder.ts — raw-ast / parse
src/lib/utils/renderMessageMarkdown.ts — raw-ast / parse
src/lib/utils/rollingSummary.svelte.ts — raw-ast / parse
src/lib/utils/rollingSummaryCore.ts — raw-ast / parse
src/lib/utils/settings.ts — raw-ast / parse
src/lib/utils/thinkingOutput.ts — raw-ast / parse
src/lib/utils/tokenCount.ts — raw-ast / parse
src/lib/utils/tokenUsage.ts — raw-ast / parse
src/lib/utils/updater.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — completed
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: cf401235980efa7616a2cb0368622b63fb4beb82
Completed: Oct 1, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · zai-org/glm-latest
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 1 fresh / 0 reused groups · 1 fresh / 0 reused candidates
Review source reports: none
Evidence triage: 23 deterministic / 1 contextual candidates · 1 contextual / 10 total behavior cases
Model budget: 1 model call · 1 / 12 fresh cases · 10404 / 200000 estimated input · 6857 / 250000 actual input · 601 / 40000 output tokens
Review batching: 1 model call · up to 1 groups and 1 candidates per call · 0 retry calls · 0 over-budget singleton calls
Review usage: 6857 input · 601 output · 10 cache read · 105 reasoning tokens
Report: 2783e39bb5bb11243fa68dd2e9082e3cabec7bb197448c40b14abedf9fdc3010