TavernKeeper Scan Report

Chechelpo/Simulith

Commit 4453817 Reviewed Aug 20, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 8 low

What this review found

No material or immediate-danger item was identified.

Deterministic technical evidence (6)

Dependency advisory GHSA-55q2-fjhq-7xh7:pkg:2fd628b415ad04f802a2d1cc applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-fxqj-rqcc-2cmp:pkg:48f7fae3c8c125b98852d2a2 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-c2j3-45gr-mqc4:pkg:3a617860720e33c3832a83a7 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-r28c-9q8g-f849:pkg:97b607f316e1d58c10e4e4eb applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-2v37-7h3g-55p8:pkg:bcb01fa3f22fe943388f7142 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json
Dependency advisory GHSA-28wg-ghj8-5hjv:pkg:590275f7f1e65a0bda08b540 applies · osv-scanner 2.4.0

A dependency has a published security issue, though this scan does not show that the project exposes it to an attacker.

Policy reason: osv-structured-advisory · Execution scope: unknown

Source: frontend/package-lock.json

Contextual expected matches (2)

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This file is a reference data file that maps text fragments to token IDs for an AI model. It contains no program code and cannot modify system startup or persistence settings. The scanner alert is a false match on words inside the data.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification. The match applies to this repository.

Contextual assessment: The flagged file is a static JSON tokenizer vocabulary for a Claude model, containing BPE token mappings, added special tokens, and normalizer configuration. It is data used for token counting or encoding, not executable code. There is no persistence mechanism, startup registration, file-system modification, or code execution path present. The scanner rule likely matched on substrings within the tokenizer vocabulary entries, producing a false positive on inert data.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: production
Source: frplm-engine/src/main/resources/tokenizers/claude.json:1

JavaScript analysis reported javascript.xray.shady-link

Expected behavior · high confidence

The flagged line is just the development server set to run on the user's own machine, with API traffic routed to the local backend on the same machine. There is no connection to any external or suspicious server.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The scanner flagged line 26 as a shady-link signal. The actual code at that line is the Vite dev server host binding to the loopback address. The only network destination in the file is the dev proxy target, also a loopback address on port 8080, which routes API requests to the local Java backend described in the project README. Both addresses are localhost-only and constitute standard frontend tooling configuration with no external or suspicious destination.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.shady-link
File role: tooling
Source: frontend/vite.config.js:26

Coverage and limitations

Inventory: 719 files · 51770437 bytes
Contextual coverage: 8 of 8 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 65 files · 421758 bytes
X-Ray review families: 2 warning occurrences compacted to 1 evidence-preserving review families
Representations: 65 raw · 0 decoded · 0 normalized · 0 bundle modules
Stage scans: 65 raw signatures · 9 raw AST · 65 raw OpenGrep · 0 derived signatures · 0 derived AST · 0 derived OpenGrep

Unresolved JavaScript stages

frontend/sdk/src/HostSdkBindings.ts — raw-ast / parse
frontend/sdk/src/components.ts — raw-ast / parse
frontend/sdk/src/sdk-index.ts — raw-ast / parse
frontend/src/app/router.ts — raw-ast / parse
frontend/src/components/primitive-editors/plugin.ts — raw-ast / parse
frontend/src/components/space/world_graph/composables/useLocationContextGraphData.ts — raw-ast / parse
frontend/src/components/space/world_graph/composables/useWorldGraphBackgrounds.ts — raw-ast / parse
frontend/src/components/space/world_graph/composables/useWorldGraphData.ts — raw-ast / parse
frontend/src/components/space/world_graph/composables/useWorldGraphInteractions.ts — raw-ast / parse
frontend/src/components/space/world_graph/composables/useWorldGraphSearch.ts — raw-ast / parse
frontend/src/components/space/world_graph/composables/useWorldGraphViewport.ts — raw-ast / parse
frontend/src/components/space/world_graph/types.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/bulkConnections.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/controlHelp.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/edgeSync.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/geometry.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/graph.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/interaction.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/locationContext.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/locationRadius.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/locationRadiusPersistence.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/locationRadiusProtocol.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/rendering.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/reparentResistance.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/resizeGesture.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/scaling.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/search.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/sizing.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/viewerSettings.ts — raw-ast / parse
frontend/src/components/space/world_graph/utils/viewport.ts — raw-ast / parse
frontend/src/core/ABSEntity.ts — raw-ast / parse
frontend/src/core/FieldMetadata.ts — raw-ast / parse
frontend/src/core/GlobalError.ts — raw-ast / parse
frontend/src/core/interfaces.ts — raw-ast / parse
frontend/src/core/queries.ts — raw-ast / parse
frontend/src/core/theme.ts — raw-ast / parse
frontend/src/domain/Characters.ts — raw-ast / parse
frontend/src/domain/Connection.ts — raw-ast / parse
frontend/src/domain/EntityTypes.ts — raw-ast / parse
frontend/src/domain/Lorebook.ts — raw-ast / parse
frontend/src/domain/Prompts.ts — raw-ast / parse
frontend/src/domain/Session.ts — raw-ast / parse
frontend/src/domain/Tag.ts — raw-ast / parse
frontend/src/domain/World.ts — raw-ast / parse
frontend/src/extensions/HostBindings.ts — raw-ast / parse
frontend/src/extensions/extensions.ts — raw-ast / parse
frontend/src/extensions/registerPrimitiveEditors.ts — raw-ast / parse
frontend/src/services/apiClient.ts — raw-ast / parse
frontend/src/services/tokenizer.ts — raw-ast / parse
frontend/src/types/ChatCompletions.ts — raw-ast / parse
frontend/src/types/DTOs.ts — raw-ast / parse
frontend/src/types/Equatable.ts — raw-ast / parse
frontend/src/utils/CommonFields.ts — raw-ast / parse
frontend/src/utils/CustomSet.ts — raw-ast / parse
frontend/src/utils/PromptThings.ts — raw-ast / parse
frontend/src/utils/ReferenceCodec.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: 44538179ddf4e9acd9b96f10bc50d5896ae95db4
Completed: Aug 20, 2026
History depth: 5 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · zai-org/glm-latest
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 2 fresh / 0 reused groups · 2 fresh / 0 reused candidates
Review source reports: none
Evidence triage: 6 deterministic / 2 contextual candidates · 2 contextual / 3 total behavior cases
Model budget: 1 model call · 2 / 12 fresh cases · 39047 / 200000 estimated input · 39948 / 250000 actual input · 951 / 40000 output tokens
Review batching: 1 model call · up to 2 groups and 2 candidates per call · 0 retry calls · 0 over-budget singleton calls
Review usage: 39948 input · 951 output · 1359 cache read · 0 reasoning tokens
Report: 1a811c17b4e31a77e07ca8d696f861e7931420fd7f5b3de6f63e355e805cebd1