TavernKeeper Scan Report

Finn-Hecker/RyokanApp

Commit decebe6 Reviewed Oct 8, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 42 low

What this review found

No material or immediate-danger item was identified.

Deterministic technical evidence (39)

Dependency advisory RUSTSEC-2026-0104:pkg:7e658c07c48d9d2faf042606 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
JavaScript analysis reported javascript.xray.unsafe-regex · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-unsafe-regex-inert · Execution scope: tooling-only

Source: scripts/verify-android-bridge.mjs:46
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/utils/fileExport.test.mjs:51
Dependency advisory GHSA-mcm9-63f2-9j32:pkg:4e13747c388bb440736ec354 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory RUSTSEC-2025-0134:pkg:097221ca551c5a36ea9650f1 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/stores/characterStore.test.mjs:30
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/ai/connections/connectionCore.test.mjs:52
Dependency advisory GHSA-j22f-vq7h-c4qm:pkg:10b8ede4b47dbb1f07fc9d89 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-p98j-92pf-mc4p:pkg:4ba94cac5a532404d4aa2553 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/diagnostics/diagnostics.test.mjs:53
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/ai/tokens/providerTokenBudget.test.mjs:25
Dependency advisory GHSA-pxg6-pf52-xh8x:pkg:6da1e3539f31ff57c2a349c3 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-9rgm-9g3h-6x36:pkg:8a05d6d431ec29dc9927e432 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory RUSTSEC-2024-0370:pkg:9b268f40461da81c7a1c55ed applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-wrw7-89jp-8q8g:pkg:4b30aae73f1836d87a5b008c applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2026-0258:pkg:95f9173f3d1ac6374e456fa8 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2026-0221:pkg:44eb386acc1a4f9a94166f13 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-82j2-j2ch-gfr8:pkg:96123c5b487f527f8d0800cf applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
OpenGrep reported tavernkeeper.dynamic-execution.javascript-eval · opengrep 1.26.0

This technical signal is not part of the shipped runtime behavior.

Policy reason: owned-inert-tooling · Execution scope: test-documentation-data

Source: src/lib/ai/connections/providers.test.mjs:17-20
Dependency advisory RUSTSEC-2026-0098:pkg:2cf644dbdab1acf4454363df applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/ai/connections/generationCapabilities.test.mjs:55
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/ai/connections/apiParameters.test.mjs:52
Dependency advisory GHSA-hx4r-w6wj-j8fg:pkg:5bb8a5f56915b9cd542611e7 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory RUSTSEC-2024-0429:pkg:d2e88fc02f6be9987f66e6e8 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory RUSTSEC-2026-0099:pkg:785327dcda385fd054101702 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
JavaScript analysis reported javascript.xray.data-exfiltration · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-tooling · Execution scope: tooling-only

Source: scripts/verify-android-bridge.mjs:4
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/stores/chatCharacterSnapshot.test.mjs:99
zizmor reported artipacked · zizmor 1.28.0

The code has a known weakness, though this scan does not show that anyone can exploit it here.

Policy reason: zizmor-known-workflow-rule · Execution scope: automation

Source: .github/workflows/windows-release.yml:27
Dependency advisory GHSA-4q55-j62x-fr9h:pkg:9f69c30a03e3f5f9a019f9ac applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-xgp8-3hg3-c2mh:pkg:313321f0eff461a0ed69a98d applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-68fv-2mgg-jv7q:pkg:9534329f616dc744f00f37e0 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/components/settings/ApiSection.presetTransitions.test.mjs:43
Dependency advisory GHSA-r9w8-h9r3-54w4:pkg:ac70b50d579964b7d1bf096b applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-965h-392x-2mh5:pkg:f53b69f7659a4af07ac9fa2b applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: src-tauri/Cargo.lock
Dependency advisory GHSA-x5rw-q4pp-hg5g:pkg:2b78b08a9e392fafe5d66576 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
OpenGrep reported tavernkeeper.dynamic-execution.javascript-eval · opengrep 1.26.0

This technical signal is not part of the shipped runtime behavior.

Policy reason: owned-inert-tooling · Execution scope: test-documentation-data

Source: src/lib/ai/tokens/requestBudget.test.mjs:14-15
JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: src/lib/ai/summary/rollingSummaryRuntime.test.mjs:316
Dependency advisory GHSA-6688-9rhm-gjv2:pkg:cdc36a5a2ca5bac568acc28f applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json
Dependency advisory GHSA-wf3x-273g-mvxv:pkg:4e96fe7cea42e42227d0bdb1 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: package-lock.json

Contextual expected matches (3)

Gitleaks reported generic-api-key

Expected behavior · high confidence

The scanner flagged what looks like an API key, but the line just names the storage slot where the app keeps its preset settings. It is a fixed label, not a password, and nothing sensitive is exposed.

Technical evidence

Scanner reason: Gitleaks matched secret-detection rule generic-api-key. The match applies to this repository.

Contextual assessment: In this revision of the same file, the flagged line is again the module-level constant declaring the versioned storage identifier for the preset library. The full supplied source confirms it is a fixed, non-secret, human-readable literal used only to namespace locally persisted preset data; it is never used as authentication material and never leaves the app. The generic credential pattern matched the *_KEY naming convention rather than any actual secret. The file also contains explicit validation that strips credential-like keys and bearer or key-shaped string values from portable presets, indicating deliberate protective design rather than credential handling.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: gitleaks 8.30.1
Rule: generic-api-key
File role: production
Source: src/lib/ai/presets/presetCore.ts:6

Gitleaks reported generic-api-key

Expected behavior · high confidence

The scanner thought it found a leaked password or API key. It actually found a label the app uses to find its own saved settings on your device, like the name of a drawer. It is not a secret and cannot be used to access anything.

Technical evidence

Scanner reason: Gitleaks matched secret-detection rule generic-api-key. The match applies to this repository.

Contextual assessment: Detailed technical wording was omitted by the public report safety filter.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: gitleaks 8.30.1
Rule: generic-api-key
File role: production
Source: src/lib/ai/presets/presetCore.ts:6

JavaScript analysis reported javascript.xray.serialize-environment

Expected behavior · high confidence

A scanner noticed the script takes information from a system environment variable and wrote it into a file, which can sometimes indicate secret theft. Here, the value is a public signing key — a piece of information that is deliberately shared with users so their app can verify that updates genuinely come from the project. It is written only into a local build configuration file, never sent anywhere over the network. This is a normal, expected step for setting up secure automatic updates.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment. The match applies to this repository.

Contextual assessment: The scanner flagged environment-variable serialization at the point where the build script reads TAURI_UPDATER_PUBLIC_KEY and passes it into a config generator. Reviewing the actual data flow: the value read is a Tauri updater signing PUBLIC key, which by design is distributed to clients and embedded in the shipped app to verify update signatures — it is not a credential or secret. The script validates the value's structure, embeds it only in a locally generated updater configuration file within the repository, and emits a release tag. There is no network transmission of environment contents, no inclusion of other environment variables, no obfuscation, and no execution path beyond an explicit developer/CI invocation gated on being run as the main module. This matches the stated purpose of preparing signed auto-update configuration for the project's Windows releases. The 'serialize-environment' heuristic is a candidate-locating signal only; the demonstrated data flow shows no secret handling and no exfiltration.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.serialize-environment
File role: tooling
Source: scripts/updater-config.mjs:33

Coverage and limitations

Inventory: 336 files · 5754100 bytes
Contextual coverage: 42 of 42 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 113 files · 676609 bytes
X-Ray review families: 53 warning occurrences compacted to 13 evidence-preserving review families
Representations: 113 raw · 2 decoded · 0 normalized · 0 bundle modules
Stage scans: 113 raw signatures · 58 raw AST · 113 raw OpenGrep · 2 derived signatures · 0 derived AST · 2 derived OpenGrep

Unresolved JavaScript stages

src/lib/ai/connections/additionalApiParameters.ts — raw-ast / parse
src/lib/ai/connections/apiConnections.ts — raw-ast / parse
src/lib/ai/connections/apiParameters.ts — raw-ast / parse
src/lib/ai/connections/connectionCore.ts — raw-ast / parse
src/lib/ai/connections/generationCapabilities.ts — raw-ast / parse
src/lib/ai/connections/modelPickerData.ts — raw-ast / parse
src/lib/ai/connections/modelProviderGroups.ts — raw-ast / parse
src/lib/ai/connections/parameterSettings.ts — raw-ast / parse
src/lib/ai/connections/providers.ts — raw-ast / parse
src/lib/ai/generation/chatApi.ts — raw-ast / parse
src/lib/ai/generation/generationError.ts — raw-ast / parse
src/lib/ai/generation/thinkingOutput.ts — raw-ast / parse
src/lib/ai/presets/presetCore.ts — raw-ast / parse
src/lib/ai/presets/presetLibrary.ts — raw-ast / parse
src/lib/ai/prompt/chatPromptBuilder.ts — raw-ast / parse
src/lib/ai/prompt/promptBuilder.ts — raw-ast / parse
src/lib/ai/prompt/textRules.ts — raw-ast / parse
src/lib/ai/summary/rollingSummary.svelte.ts — raw-ast / parse
src/lib/ai/summary/rollingSummaryCore.ts — raw-ast / parse
src/lib/ai/tokens/providerTokenBudget.ts — raw-ast / parse
src/lib/ai/tokens/requestBudget.ts — raw-ast / parse
src/lib/ai/tokens/tokenCount.ts — raw-ast / parse
src/lib/ai/tokens/tokenEstimate.ts — raw-ast / parse
src/lib/ai/tokens/tokenUsage.ts — raw-ast / parse
src/lib/chat/characterGreeting.ts — raw-ast / parse
src/lib/chat/chatScroll.ts — raw-ast / parse
src/lib/chat/messageData.ts — raw-ast / parse
src/lib/chat/renderMessageMarkdown.ts — raw-ast / parse
src/lib/components/editor/character/characterLogic.ts — raw-ast / parse
src/lib/components/editor/worldinfo/worldInfoLogic.ts — raw-ast / parse
src/lib/components/lobby/mobileCharacterLongPress.ts — raw-ast / parse
src/lib/components/settings/sortableRules.ts — raw-ast / parse
src/lib/data/characters.ts — raw-ast / parse
src/lib/data/worldInfo.ts — raw-ast / parse
src/lib/diagnostics/diagnosticDecisions.ts — raw-ast / parse
src/lib/diagnostics/diagnostics.ts — raw-ast / parse
src/lib/diagnostics/diagnosticsMetadata.ts — raw-ast / parse
src/lib/settings/settings.ts — raw-ast / parse
src/lib/stores/appState.svelte.ts — raw-ast / parse
src/lib/stores/characterStore.svelte.ts — raw-ast / parse
src/lib/stores/chatStore.svelte.ts — raw-ast / parse
src/lib/stores/exportFeedback.ts — raw-ast / parse
src/lib/stores/multiplayer.svelte.ts — raw-ast / parse
src/lib/stores/navigation.ts — raw-ast / parse
src/lib/stores/roleStore.svelte.ts — raw-ast / parse
src/lib/stores/worldInfoStore.svelte.ts — raw-ast / parse
src/lib/updates/updater.ts — raw-ast / parse
src/lib/utils/androidViewport.ts — raw-ast / parse
src/lib/utils/bottomSheetGesture.ts — raw-ast / parse
src/lib/utils/clientLanguage.ts — raw-ast / parse
src/lib/utils/fileExport.ts — raw-ast / parse
src/lib/utils/imageFormats.ts — raw-ast / parse
src/lib/utils/lazyView.ts — raw-ast / parse
src/lib/utils/listbox.svelte.ts — raw-ast / parse
src/lib/utils/prefetchLazyViews.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — completed
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: decebe671effb34d7a4368cbf5ff26764d154f98
Completed: Oct 8, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · zai-org/glm-latest
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 2 fresh / 1 reused groups · 2 fresh / 1 reused candidates
Review source reports: 2783e39bb5bb11243fa68dd2e9082e3cabec7bb197448c40b14abedf9fdc3010
Evidence triage: 39 deterministic / 3 contextual candidates · 3 contextual / 21 total behavior cases
Model budget: 1 model call · 2 / 12 fresh cases · 32766 / 200000 estimated input · 24051 / 250000 actual input · 1840 / 40000 output tokens
Review batching: 1 model call · up to 2 groups and 2 candidates per call · 0 retry calls · 0 over-budget singleton calls
Review usage: 24051 input · 1840 output · 0 cache read · 951 reasoning tokens
Report: d48934b68701763210226ae1e1e26ebf0e3d8844f14c9e2f41dd840a0c8fb73e