TavernKeeper Scan Report

AMousePad/Hone

Commit 0538b85 Reviewed Aug 11, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 11 low

What this review found

No material or immediate-danger item was identified.

Contextual expected matches (11)

Dependency advisory GHSA-2v37-7h3g-55p8:pkg:a9b17cadf83e3a5de547592b applies

Expected behavior · high confidence

This is a known issue in a library used only during development to build the extension. The extension you install does not include this library, so there is no risk from this advisory.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-2v37-7h3g-55p8:pkg:a9b17cadf83e3a5de547592b to a dependency declared by this repository.

Contextual assessment: The nanoid advisory applies to version 3.3.11 resolved in the lockfile as a transitive dependency of postcss, which is itself a transitive dependency of vite. Vite is listed as a devDependency used only during development and build processes. The shipped extension output (dist/backend.js and file) does not include these build-time dependencies, so the advisory has no runtime reachability for end users. No attacker-controlled input reaches nanoid through the extension.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-2v37-7h3g-55p8:pkg:a9b17cadf83e3a5de547592b
File role: production
Source: bun.lock

Dependency advisory GHSA-v6wh-96g9-6wx3:pkg:0c88a33159b6d5fe228c0396 applies

Expected behavior · high confidence

This vulnerability affects a tool used only when building the extension from source, not the version you actually run. Users are not exposed.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v6wh-96g9-6wx3:pkg:0c88a33159b6d5fe228c0396 to a dependency declared by this repository.

Contextual assessment: The vite advisory applies to version 7.3.2 resolved as a devDependency via vitest. Vite is a build tool used for bundling the frontend and backend during development. The extension's shipped artifacts are pre-built static files; vite is not executed in the runtime environment. Therefore there is no path for an attacker to exploit this vulnerability through normal extension usage.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-v6wh-96g9-6wx3:pkg:0c88a33159b6d5fe228c0396
File role: production
Source: bun.lock

Dependency advisory GHSA-qx2v-qp2m-jg93:pkg:9e8d18bd2de227fe14841294 applies

Expected behavior · high confidence

This advisory is for a CSS processing tool that runs only during development. It does not affect the extension you use.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-qx2v-qp2m-jg93:pkg:9e8d18bd2de227fe14841294 to a dependency declared by this repository.

Contextual assessment: The postcss advisory applies to version 8.5.9 resolved as a transitive dependency of vite. Postcss is used during the build process for CSS processing. It is not part of the runtime dependencies of the extension and does not execute in the context where an end user interacts with the extension. Hence there is no demonstrated exposure.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-qx2v-qp2m-jg93:pkg:9e8d18bd2de227fe14841294
File role: production
Source: bun.lock

Dependency advisory GHSA-6g55-p6wh-862q:pkg:abb95b52facc6c71bcbbe480 applies

Expected behavior · high confidence

Another advisory on the same build-time CSS library. Still no risk to the extension's users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-6g55-p6wh-862q:pkg:abb95b52facc6c71bcbbe480 to a dependency declared by this repository.

Contextual assessment: This is another postcss advisory (GHSA-6g55-p6wh-862q) for the same version 8.5.9. The analysis is identical: postcss is a build-time dependency of vite, which is a devDependency. The advisory does not affect the shipped runtime bundle. No attacker-controlled input reaches postcss in the deployed extension.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-6g55-p6wh-862q:pkg:abb95b52facc6c71bcbbe480
File role: production
Source: bun.lock

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

This extension bundles small images and a sound effect directly inside its code as data URLs, which is a normal way to include visual elements without downloading from the internet. The security scanner flagged these as potentially suspicious, but they are just harmless decoration and audio assets.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link in this repository.

Contextual assessment: The scanner rule 'shady-link' flagged data: URIs embedded in the generated frontend bundle. These are inline base64-encoded assets (chibi webp images and a ding audio mp3) used for the extension's custom UI. Data URIs are a standard, self-contained technique for bundling small assets to avoid external network requests, and they pose no security risk. No malicious payload, external domains, or concealed behavior is present; the flagged literals are benign asset data.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.shady-link
File role: generated
Source: dist/frontend.js:5137

Dependency advisory GHSA-28wg-ghj8-5hjv:pkg:006e2a19c763cc0fc17b9679 applies

Expected behavior · high confidence

Same build-time library issue as the first nanoid advisory. Not a concern for users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-28wg-ghj8-5hjv:pkg:006e2a19c763cc0fc17b9679 to a dependency declared by this repository.

Contextual assessment: This is another nanoid advisory (GHSA-28wg-ghj8-5hjv) for the same version 3.3.11. As with the first nanoid candidate, it is a transitive dependency of postcss and vite, which are development-only tools. The extension's runtime does not include nanoid, so there is no exploit path for end users.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-28wg-ghj8-5hjv:pkg:006e2a19c763cc0fc17b9679
File role: production
Source: bun.lock

Dependency advisory GHSA-r28c-9q8g-f849:pkg:0ca5d696f5334a9db83e593d applies

Expected behavior · high confidence

Another advisory on the same build-time tool. Still no impact on the extension you use.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-r28c-9q8g-f849:pkg:0ca5d696f5334a9db83e593d to a dependency declared by this repository.

Contextual assessment: This is a third postcss advisory (GHSA-r28c-9q8g-f849) for the same version 8.5.9. It shares the same build-time dependency chain as the other postcss advisories. No runtime reachability in the shipped extension; the vulnerability is not exposed to users.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-r28c-9q8g-f849:pkg:0ca5d696f5334a9db83e593d
File role: production
Source: bun.lock

Dependency advisory GHSA-fx2h-pf6j-xcff:pkg:7c0fc1b306c064c4bcb9edfe applies

Expected behavior · high confidence

Another advisory on the build tool Vite. Users are not affected.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-fx2h-pf6j-xcff:pkg:7c0fc1b306c064c4bcb9edfe to a dependency declared by this repository.

Contextual assessment: This is a second vite advisory (GHSA-fx2h-pf6j-xcff) for the same version 7.3.2. Vite remains a devDependency used only during development and build. The shipped extension artifacts do not include vite runtime code. Therefore there is no demonstrated exposure for end users.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-fx2h-pf6j-xcff:pkg:7c0fc1b306c064c4bcb9edfe
File role: production
Source: bun.lock

Dependency advisory GHSA-g7r4-m6w7-qqqr:pkg:49d70202ab5a1e786e48c24f applies

Expected behavior · high confidence

This advisory is for a build tool used only during development. It does not affect the extension you run.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-g7r4-m6w7-qqqr:pkg:49d70202ab5a1e786e48c24f to a dependency declared by this repository.

Contextual assessment: The esbuild advisory applies to version 0.27.7 resolved as a dependency of vite. Esbuild is a build tool used during development for bundling. It is not executed in the runtime context of the extension. The advisory does not affect the shipped artifact and has no attacker-reachable path.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-g7r4-m6w7-qqqr:pkg:49d70202ab5a1e786e48c24f
File role: production
Source: bun.lock

Dependency advisory GHSA-fxqj-rqcc-2cmp:pkg:00a52c383becc9b3e00aaa17 applies

Expected behavior · high confidence

This advisory is for a development tool; users of the extension are not affected.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-fxqj-rqcc-2cmp:pkg:00a52c383becc9b3e00aaa17 to a dependency declared by this repository.

Contextual assessment: Postcss 8.5.9 advisory (GHSA-fxqj-rqcc-2cmp). Dev-only transitive dependency of vitest; not reachable in the shipped extension.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-fxqj-rqcc-2cmp:pkg:00a52c383becc9b3e00aaa17
File role: production
Source: bun.lock

Dependency advisory GHSA-5xrq-8626-4rwp:pkg:d3693c5162b4693233bd7c05 applies

Expected behavior · high confidence

This critical-sounding advisory applies only to the test runner; users are not at risk.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-5xrq-8626-4rwp:pkg:d3693c5162b4693233bd7c05 to a dependency declared by this repository.

Contextual assessment: Vitest 3.2.4 advisory (GHSA-5xrq-8626-4rwp). Vitest is a devDependency used only for testing; it is not included in the shipped extension.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: osv-scanner 2.4.0
Rule: GHSA-5xrq-8626-4rwp:pkg:d3693c5162b4693233bd7c05
File role: production
Source: bun.lock

Coverage and limitations

Inventory: 99 files · 4070110 bytes
Contextual coverage: 11 of 11 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 67 files · 2603247 bytes
X-Ray review families: 9 warning occurrences compacted to 1 evidence-preserving review families
Representations: 67 raw · 14 decoded · 0 normalized · 0 bundle modules
Stage scans: 67 raw signatures · 4 raw AST · 67 raw OpenGrep · 14 derived signatures · 0 derived AST · 14 derived OpenGrep

Unresolved JavaScript stages

dist/backend.js — derived-ast / parse
dist/backend.js — normalize / parse
scripts/gen-asset-modules.ts — raw-ast / parse
src/assemble.ts — raw-ast / parse
src/backend/chat-state.ts — raw-ast / parse
src/backend/dispatch.ts — raw-ast / parse
src/backend/events.ts — raw-ast / parse
src/backend/handlers/debug.ts — raw-ast / parse
src/backend/handlers/pov.ts — raw-ast / parse
src/backend/handlers/presets.ts — raw-ast / parse
src/backend/handlers/profiles.ts — raw-ast / parse
src/backend/handlers/refine.ts — raw-ast / parse
src/backend/handlers/settings.ts — raw-ast / parse
src/backend/index.ts — raw-ast / parse
src/backend/permissions.ts — raw-ast / parse
src/backend/safe-event.ts — raw-ast / parse
src/backend/version-check.ts — raw-ast / parse
src/constants.ts — raw-ast / parse
src/defaults.ts — raw-ast / parse
src/generation/cancel.ts — raw-ast / parse
src/generation/index.ts — raw-ast / parse
src/hlog.ts — raw-ast / parse
src/lore.ts — raw-ast / parse
src/mutation/queue.ts — raw-ast / parse
src/preset-defaults.ts — raw-ast / parse
src/refinement/context.ts — raw-ast / parse
src/refinement/index.ts — raw-ast / parse
src/refinement/model-resolver.ts — raw-ast / parse
src/refinement/strategy.ts — raw-ast / parse
src/resources/model-profiles.ts — raw-ast / parse
src/resources/pov-presets.ts — raw-ast / parse
src/resources/presets.ts — raw-ast / parse
src/resources/resource-service.ts — raw-ast / parse
src/storage/settings.ts — raw-ast / parse
src/storage/stats.ts — raw-ast / parse
src/storage/undo.ts — raw-ast / parse
src/storage/user-storage.ts — raw-ast / parse
src/text/extract.ts — raw-ast / parse
src/text/history.ts — raw-ast / parse
src/text/shield.ts — raw-ast / parse
src/types.ts — raw-ast / parse
src/ui/drawer/index.ts — raw-ast / parse
src/ui/drawer/input-panel.ts — raw-ast / parse
src/ui/drawer/models-panel.ts — raw-ast / parse
src/ui/drawer/output-panel.ts — raw-ast / parse
src/ui/editors/chip-input.ts — raw-ast / parse
src/ui/editors/pipeline-editor.ts — raw-ast / parse
src/ui/editors/pov-editor.ts — raw-ast / parse
src/ui/editors/preset-panel.ts — raw-ast / parse
src/ui/flog.ts — raw-ast / parse
src/ui/forms/connection-select.ts — raw-ast / parse
src/ui/forms/context-panel.ts — raw-ast / parse
src/ui/forms/controls.ts — raw-ast / parse
src/ui/forms/index.ts — raw-ast / parse
src/ui/forms/inline-notice.ts — raw-ast / parse
src/ui/forms/sections.ts — raw-ast / parse
src/ui/forms/slider.ts — raw-ast / parse
src/ui/index.ts — raw-ast / parse
src/ui/injectors/input-area.ts — raw-ast / parse
src/ui/injectors/message-action.ts — raw-ast / parse
src/ui/injectors/observe-root.ts — raw-ast / parse
src/ui/settings-page.ts — raw-ast / parse
src/ui/widgets/diff-modal.ts — raw-ast / parse
src/ui/widgets/float-widget.ts — raw-ast / parse
src/ui/widgets/preview-modal.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: 0538b853ad4a388455dc8df55296cee047e4f5c0
Completed: Aug 11, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · deepseek/deepseek-v4-flash:thinking
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 3 fresh / 0 reused groups · 11 fresh / 0 reused candidates
Review source reports: none
Evidence triage: 0 deterministic / 11 contextual candidates · 3 contextual / 3 total behavior cases
Model budget: 4 model calls · 3 / 12 fresh cases · 123208 / 200000 estimated input · 170716 / 250000 actual input · 10374 / 40000 output tokens
Review batching: 4 model calls · up to 2 groups and 10 candidates per call · 2 retry calls · 0 over-budget singleton calls
Review usage: 170716 input · 10374 output · 0 cache read · 0 reasoning tokens
Report: 21c719ab74398ccec53ff9e8fc563c8eab89f92574285826b3f437e0757e2c37