What this review found
No material or immediate-danger item was identified.
Minor cautions
Dependency advisory GHSA-7p8r-x3mc-p8w7:pkg:02e3933277d4b322a1bb7329 applies
Minor caution · medium confidence
The lockfile records a package version with a published advisory, but this evidence does not show that the extension uses the affected behavior or that a user can trigger it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-7p8r-x3mc-p8w7:pkg:02e3933277d4b322a1bb7329 to a dependency declared by this repository.
Contextual assessment: The supplied evidence is a dependency-advisory match in a production lockfile. It does not establish runtime reachability, attacker-controlled input, or concrete impact for this browser extension.
Impact: low · Exploitability: unlikely
Developer action: Check whether the dependency is runtime-reachable in the shipped extension and update it if reachable and affected.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-7p8r-x3mc-p8w7:pkg:02e3933277d4b322a1bb7329
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-frvp-7c67-39w9:pkg:682033ccbfda6cc7860c37a3 applies
Minor caution · medium confidence
A server-related package has an advisory in the lockfile, but the project description says the extension has no server and the evidence does not show this package running.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-frvp-7c67-39w9:pkg:682033ccbfda6cc7860c37a3 to a dependency declared by this repository.
Contextual assessment: The advisory identifies a resolved dependency version only. Project-purpose context describes a plain browser extension with no server; runtime reachability and attacker-controlled triggering are not demonstrated.
Impact: low · Exploitability: unlikely
Developer action: Determine whether the server package is included in shipped or executable runtime code; upgrade or remove it if so.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-frvp-7c67-39w9:pkg:682033ccbfda6cc7860c37a3
- File role
- production
- Source
- package-lock.json
OpenGrep reported tavernkeeper.download-and-execute.shell-pipeline
Minor caution · high confidence
The documentation tells users to download an installer from the internet and run it immediately. If that remote content were changed or intercepted, it could run unwanted commands, but this is an installation instruction in a documentation file rather than demonstrated extension behavior.
Technical evidence
Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.download-and-execute.shell-pipeline in this repository.
Contextual assessment: The supplied evidence shows a shell pipeline that retrieves a remote installer and passes it directly to a shell. The artifact is documentation, and no executable extension path, runtime trigger, attacker-controlled input, or resulting data flow is shown. Therefore the scanner match does not demonstrate a vulnerability in the shipped extension or malicious behavior, but the installation guidance has avoidable supply-chain and review weaknesses.
Impact: low · Exploitability: plausible
Developer action: Avoid recommending a remote installer piped directly into a shell; document a verified release or provide checksum/signature verification and an explicit review step before execution.
- Scanner
- opengrep 1.26.0
- Rule
- tavernkeeper.download-and-execute.shell-pipeline
- File role
- documentation
- Source
- .beads/README.md:64-65
zizmor reported unpinned-uses
Minor caution · high confidence
The workflow downloads a third-party action by a moving release label, so a future change to that label could affect lint runs.
Technical evidence
Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.
Contextual assessment: The workflow uses an unpinned checkout action reference. This weakens supply-chain reproducibility, but the supplied evidence does not demonstrate a compromised action or impact on extension users.
Impact: low · Exploitability: plausible
Developer action: Pin the referenced checkout action to a reviewed immutable commit, optionally retaining the version in a comment.
- Scanner
- zizmor 1.28.0
- Rule
- unpinned-uses
- File role
- tooling
- Source
- .github/workflows/lint.yml:13
zizmor reported unpinned-uses
Minor caution · high confidence
The workflow downloads a third-party setup action by a moving release label, allowing future upstream changes to alter CI behavior.
Technical evidence
Scanner reason: zizmor matched workflow-security rule unpinned-uses in this repository.
Contextual assessment: The Node setup action is referenced by a mutable version label rather than an immutable commit. This is a CI supply-chain hardening issue; no malicious change or user-facing execution path is shown.
Impact: low · Exploitability: plausible
Developer action: Pin the referenced setup action to a reviewed immutable commit, optionally retaining the version in a comment.
- Scanner
- zizmor 1.28.0
- Rule
- unpinned-uses
- File role
- tooling
- Source
- .github/workflows/lint.yml:15
Dependency advisory GHSA-2v37-7h3g-55p8:pkg:bcb01fa3f22fe943388f7142 applies
Minor caution · medium confidence
The lockfile contains a flagged identifier package, but no supplied evidence shows how the extension uses it or how a user could exploit the advisory.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-2v37-7h3g-55p8:pkg:bcb01fa3f22fe943388f7142 to a dependency declared by this repository.
Contextual assessment: This is an advisory match against a resolved lockfile version. No production import, vulnerable-code reachability, attacker-controlled input, or concrete harm is supplied.
Impact: low · Exploitability: unlikely
Developer action: Trace the package into the production bundle and upgrade it if the vulnerable functionality is reachable.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-2v37-7h3g-55p8:pkg:bcb01fa3f22fe943388f7142
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-3jxr-9vmj-r5cp:pkg:821253a22c3d87a034daa956 applies
Minor caution · medium confidence
A pattern-expansion package is flagged, but the evidence does not show that the extension processes attacker-controlled patterns with it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp:pkg:821253a22c3d87a034daa956 to a dependency declared by this repository.
Contextual assessment: The supplied record is a dependency advisory only. It lacks runtime reachability and input-flow evidence needed to establish exploitable impact.
Impact: low · Exploitability: unlikely
Developer action: Identify whether this transitive package is in the production bundle and upgrade the dependency chain where practical.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-3jxr-9vmj-r5cp:pkg:821253a22c3d87a034daa956
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-22jq-vg5j-6vgg:pkg:9eb93abfae910113d9babee3 applies
Minor caution · medium confidence
The address-processing package is flagged in the lockfile, but nothing supplied shows the extension using the affected operation or accepting attacker-controlled addresses.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-22jq-vg5j-6vgg:pkg:9eb93abfae910113d9babee3 to a dependency declared by this repository.
Contextual assessment: This evidence establishes only a version/advisory correlation. It does not establish executable reachability, attacker control of input, or a concrete security consequence.
Impact: low · Exploitability: unlikely
Developer action: Check production reachability and upgrade the package if network-address parsing from untrusted input is exposed.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-22jq-vg5j-6vgg:pkg:9eb93abfae910113d9babee3
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-rgw5-rvv9-x895:pkg:3f058ee2b68aac4f6bcbbf9e applies
Minor caution · medium confidence
Another pattern-expansion version is flagged, but the evidence does not demonstrate that the affected code runs in the extension or receives hostile input.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895:pkg:3f058ee2b68aac4f6bcbbf9e to a dependency declared by this repository.
Contextual assessment: The candidate is an advisory match in the lockfile. Runtime reachability, attacker-controlled trigger, and concrete harm remain unshown.
Impact: low · Exploitability: unlikely
Developer action: Trace this dependency to production code and upgrade the dependency chain if reachable.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-rgw5-rvv9-x895:pkg:3f058ee2b68aac4f6bcbbf9e
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-8j4g-w8fx-2239:pkg:a083f0089a00b08c85dd5ef3 applies
Minor caution · medium confidence
A web framework version is flagged, but the project description says there is no server and the evidence does not show affected framework behavior executing.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-8j4g-w8fx-2239:pkg:a083f0089a00b08c85dd5ef3 to a dependency declared by this repository.
Contextual assessment: The lockfile advisory does not establish that the framework is shipped or runtime-reachable, nor that an attacker can reach the vulnerable input path.
Impact: low · Exploitability: unlikely
Developer action: Confirm whether the framework is bundled into the browser extension; if so, upgrade to a non-affected release.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-8j4g-w8fx-2239:pkg:a083f0089a00b08c85dd5ef3
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-rgw5-rvv9-x895:pkg:2c6a626dc52bd9af79c86b60 applies
Minor caution · medium confidence
A second occurrence of the pattern-expansion package is flagged, but this still does not show that vulnerable behavior is used by the extension.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895:pkg:2c6a626dc52bd9af79c86b60 to a dependency declared by this repository.
Contextual assessment: This is a second advisory match for a resolved dependency version. No executable path, attacker-controlled input, or concrete affected behavior is supplied.
Impact: low · Exploitability: unlikely
Developer action: Resolve the duplicate dependency path and upgrade the affected package wherever it is production-reachable.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-rgw5-rvv9-x895:pkg:2c6a626dc52bd9af79c86b60
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-r292-9mhp-454m:pkg:0e2bbe9034aea9bae7981dcd applies
Minor caution · medium confidence
A bundled package version matches a published security advisory, but the supplied evidence does not show that the vulnerable code is used by the browser extension or that an attacker can reach it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-r292-9mhp-454m:pkg:0e2bbe9034aea9bae7981dcd to a dependency declared by this repository.
Contextual assessment: The lockfile resolves tar 7.5.19 and an advisory was reported. Only dependency metadata is supplied; runtime reachability, attacker-controlled input, and concrete impact are not established.
Impact: low · Exploitability: unlikely
Developer action: Update tar to a non-vulnerable release and regenerate the lockfile; confirm whether the dependency is reachable in shipped extension workflows.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-r292-9mhp-454m:pkg:0e2bbe9034aea9bae7981dcd
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-28wg-ghj8-5hjv:pkg:590275f7f1e65a0bda08b540 applies
Minor caution · medium confidence
The lockfile contains a package version with a known advisory, but this report does not show that the extension uses the affected behavior or that users can trigger it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-28wg-ghj8-5hjv:pkg:590275f7f1e65a0bda08b540 to a dependency declared by this repository.
Contextual assessment: The lockfile resolves nanoid 3.3.15 and an advisory was reported. No executable call path, attacker-controlled input, or concrete harm is demonstrated.
Impact: low · Exploitability: unlikely
Developer action: Update nanoid to a non-vulnerable release and regenerate the lockfile; verify runtime reachability before prioritizing remediation.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-28wg-ghj8-5hjv:pkg:590275f7f1e65a0bda08b540
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-mh99-v99m-4gvg:pkg:f395337a0cb5249680cc1cad applies
Minor caution · medium confidence
One installed package version has a security advisory, but the available information does not show that the extension processes attacker-supplied patterns through it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg:pkg:f395337a0cb5249680cc1cad to a dependency declared by this repository.
Contextual assessment: The lockfile resolves brace-expansion 1.1.15 and an advisory was reported. Runtime reachability and attacker control of relevant input are absent.
Impact: low · Exploitability: unlikely
Developer action: Update brace-expansion to a non-vulnerable release and regenerate the lockfile; establish whether the affected parser is used at runtime.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mh99-v99m-4gvg:pkg:f395337a0cb5249680cc1cad
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-f23p-vx2j-j53r:pkg:9eaf75fff76c34730a920a16 applies
Minor caution · medium confidence
A web-related package is flagged, but the project description says the extension has no server, and this evidence does not connect the package to a shipped server path.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-f23p-vx2j-j53r:pkg:9eaf75fff76c34730a920a16 to a dependency declared by this repository.
Contextual assessment: The lockfile resolves hono 4.12.27 with an advisory. The supplied context describes a plain browser extension without a server and provides no runtime reachability or trigger.
Impact: low · Exploitability: unlikely
Developer action: Update hono to a non-vulnerable release and regenerate the lockfile; verify whether this development or transitive server package is shipped or executable in production.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-f23p-vx2j-j53r:pkg:9eaf75fff76c34730a920a16
- File role
- production
- Source
- package-lock.json
zizmor reported excessive-permissions
Minor caution · medium confidence
The automated lint job may receive more repository access than it needs, increasing the damage possible if a CI step is compromised.
Technical evidence
Scanner reason: zizmor matched workflow-security rule excessive-permissions in this repository.
Contextual assessment: The scanner reports broad workflow permissions, but the supplied workflow excerpt does not show an explicit permissions block or demonstrate writable-token use. The job performs checkout, dependency installation, linting, and formatting checks only.
Impact: low · Exploitability: plausible
Developer action: Declare only the minimum required workflow permissions, preferably read-only repository contents, and review job-level permissions.
- Scanner
- zizmor 1.28.0
- Rule
- excessive-permissions
- File role
- tooling
- Source
- .github/workflows/lint.yml:10-23
Dependency advisory GHSA-mh99-v99m-4gvg:pkg:4a6bce6b1ed4b848fe37e071 applies
Minor caution · medium confidence
Another installed version of a package with a known advisory was found, but there is no evidence here that users can reach the affected behavior.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg:pkg:4a6bce6b1ed4b848fe37e071 to a dependency declared by this repository.
Contextual assessment: The lockfile resolves brace-expansion 2.1.1 and an advisory was reported. No executable path, attacker-controlled input, or concrete impact is supplied.
Impact: low · Exploitability: unlikely
Developer action: Update brace-expansion to a non-vulnerable release and regenerate the lockfile; establish whether the affected parser is used at runtime.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mh99-v99m-4gvg:pkg:4a6bce6b1ed4b848fe37e071
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-54fx-42gc-7vw4:pkg:01213c09920e558b257a5c07 applies
Minor caution · medium confidence
A second advisory affects the same web package, but the supplied evidence does not show an exposed server or reachable vulnerable code.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-54fx-42gc-7vw4:pkg:01213c09920e558b257a5c07 to a dependency declared by this repository.
Contextual assessment: The lockfile resolves hono 4.12.27 and a separate advisory was reported. Production reachability, attacker input, and concrete user harm are not demonstrated.
Impact: low · Exploitability: unlikely
Developer action: Update hono to a non-vulnerable release and regenerate the lockfile; verify whether this dependency is production-reachable.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-54fx-42gc-7vw4:pkg:01213c09920e558b257a5c07
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-v2hh-gcrm-f6hx:pkg:6ce644699a81459598ff3ec1 applies
Minor caution · medium confidence
A URL utility package is flagged, but this report does not show that the extension passes untrusted URLs to the affected code.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-v2hh-gcrm-f6hx:pkg:6ce644699a81459598ff3ec1 to a dependency declared by this repository.
Contextual assessment: The lockfile resolves fast-uri 3.1.3 and an advisory was reported. No import, call path, attacker-controlled URL, or runtime impact is supplied.
Impact: low · Exploitability: unlikely
Developer action: Update fast-uri to a non-vulnerable release and regenerate the lockfile; confirm whether URL parsing receives attacker-controlled input in shipped code.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-v2hh-gcrm-f6hx:pkg:6ce644699a81459598ff3ec1
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-4xrf-jv44-h6hh:pkg:249ffb00fffad7006fcf485a applies
Minor caution · medium confidence
An IP-address package version is flagged, but no evidence shows that the extension uses the affected parser with attacker-supplied input.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-4xrf-jv44-h6hh:pkg:249ffb00fffad7006fcf485a to a dependency declared by this repository.
Contextual assessment: The lockfile resolves ip-address 10.2.0 and an advisory was reported. Runtime reachability, input control, and concrete harm are not established.
Impact: low · Exploitability: unlikely
Developer action: Update ip-address to a non-vulnerable release and regenerate the lockfile; verify whether production code parses attacker-controlled addresses.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-4xrf-jv44-h6hh:pkg:249ffb00fffad7006fcf485a
- File role
- production
- Source
- package-lock.json
JavaScript analysis reported javascript.xray.unsafe-regex
Minor caution · medium confidence
The extension uses a pattern to recognize inline state headers. A scanner flagged it as potentially expensive on specially crafted text, but the supplied evidence does not show that it can be abused to cause meaningful disruption.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex in this repository.
Contextual assessment: The flagged expression performs case-insensitive matching with lazy character and whitespace components followed by a lookahead while normalizing generated text. This is plausibly a regular-expression performance concern for unusually large or adversarial input, but no measured catastrophic behavior, attacker-controlled trigger, input limit, or resulting denial of service is demonstrated by the supplied evidence. Its use is consistent with the documented summary and structural-header parsing purpose rather than concealed behavior.
Impact: low · Exploitability: unlikely
Developer action: Consider bounding input lengths or documenting expected maximum text sizes if this regular expression processes attacker-controlled, very large model output.
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.unsafe-regex
- File role
- production
- Source
- src/core/structural-headers.js:3
Dependency advisory GHSA-5p4m-2wfm-xmqj:pkg:d055453f026a4e70572d800d applies
Minor caution · medium confidence
The lockfile records an older library version with a published security advisory, but this evidence does not show that the extension executes the affected code or that an attacker can reach it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-5p4m-2wfm-xmqj:pkg:d055453f026a4e70572d800d to a dependency declared by this repository.
Contextual assessment: The scanner matched js-yaml 4.3.0 in the production lockfile. Only dependency metadata and the resolved version are supplied; runtime reachability, affected functionality, and attacker-controlled input are not demonstrated.
Impact: low · Exploitability: unlikely
Developer action: Upgrade js-yaml and confirm the resolved version is no longer affected; determine whether the package is production-reachable.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-5p4m-2wfm-xmqj:pkg:d055453f026a4e70572d800d
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-fxqj-rqcc-2cmp:pkg:48f7fae3c8c125b98852d2a2 applies
Minor caution · medium confidence
A build-related library version has a published advisory, but the supplied evidence does not show that users run the affected behavior.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-fxqj-rqcc-2cmp:pkg:48f7fae3c8c125b98852d2a2 to a dependency declared by this repository.
Contextual assessment: The scanner matched postcss 8.5.16. The lockfile context identifies extensive development tooling, but does not establish runtime reachability, vulnerable parser use, or attacker control of input.
Impact: low · Exploitability: unlikely
Developer action: Upgrade postcss and confirm the resolved version is no longer affected; determine whether it is used only during development or included in shipped execution.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-fxqj-rqcc-2cmp:pkg:48f7fae3c8c125b98852d2a2
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-r28c-9q8g-f849:pkg:97b607f316e1d58c10e4e4eb applies
Minor caution · medium confidence
A build-related library version has a published advisory, but the supplied evidence does not show that users run the affected behavior.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-r28c-9q8g-f849:pkg:97b607f316e1d58c10e4e4eb to a dependency declared by this repository.
Contextual assessment: The scanner matched postcss 8.5.16 under a separate advisory. No supplied evidence connects the vulnerable behavior to shipped extension execution or attacker-controlled data.
Impact: low · Exploitability: unlikely
Developer action: Upgrade postcss and confirm the resolved version is no longer affected; determine whether it is used only during development or included in shipped execution.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-r28c-9q8g-f849:pkg:97b607f316e1d58c10e4e4eb
- File role
- production
- Source
- package-lock.json
JavaScript analysis reported javascript.xray.serialize-environment
Minor caution · high confidence
The commit hook passes the developer's environment to local formatting, linting, and test commands. This is normal for package tools, but it means those commands can see environment values such as tokens if present.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.
Contextual assessment: runNpm invokes local npm tooling with env: process.env and pipes output locally. The supplied evidence shows no network destination, serialization, logging, or exfiltration of inherited variables. Environment inheritance is a limited exposure surface for child tooling, not demonstrated credential theft.
Impact: low · Exploitability: unlikely
Developer action: Consider avoiding inheritance of the full environment when invoking package scripts, or explicitly document why inherited variables are required.
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.serialize-environment
- File role
- production
- Source
- .husky/pre-commit.js:45
Dependency advisory GHSA-79qm-7rj5-m7r9:pkg:9da158dae724299c9774def1 applies
Minor caution · medium confidence
The lockfile includes a library with a published advisory, but this extension is described as browser-only with no server, and the evidence does not show the affected library is used by users.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-79qm-7rj5-m7r9:pkg:9da158dae724299c9774def1 to a dependency declared by this repository.
Contextual assessment: The scanner matched hono 4.12.27. Project-purpose metadata says there is no server, while no dependency graph or executable imports are supplied to establish reachability or attacker-controlled input.
Impact: low · Exploitability: unlikely
Developer action: Upgrade hono and determine whether it is a development-only transitive dependency or has any shipped runtime role.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-79qm-7rj5-m7r9:pkg:9da158dae724299c9774def1
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-mwp4-54f8-5fhr:pkg:dbb007cbd7ab30b0c5bafbe0 applies
Minor caution · medium confidence
A library version has a published advisory, but there is no evidence here that the extension uses the vulnerable feature or accepts dangerous input through it.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mwp4-54f8-5fhr:pkg:dbb007cbd7ab30b0c5bafbe0 to a dependency declared by this repository.
Contextual assessment: The scanner matched ip-address 10.2.0. The supplied lockfile evidence does not establish runtime use, vulnerable code-path reachability, or attacker control of inputs.
Impact: low · Exploitability: unlikely
Developer action: Upgrade ip-address and determine whether the affected functionality is reachable in shipped browser code.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mwp4-54f8-5fhr:pkg:dbb007cbd7ab30b0c5bafbe0
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-3jxr-9vmj-r5cp:pkg:33bd75a43666b34e8d957c42 applies
Minor caution · medium confidence
An older pattern-matching library is flagged, but the evidence does not show that users can supply input to its affected code.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp:pkg:33bd75a43666b34e8d957c42 to a dependency declared by this repository.
Contextual assessment: The scanner matched brace-expansion 1.1.15. No runtime dependency path, vulnerable operation, or attacker-controlled trigger is supplied.
Impact: low · Exploitability: unlikely
Developer action: Upgrade brace-expansion 1.1.15 and identify whether it is development-only or reachable from shipped execution.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-3jxr-9vmj-r5cp:pkg:33bd75a43666b34e8d957c42
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-mh99-v99m-4gvg:pkg:17a4bca76c8dccd42bb43bfa applies
Minor caution · medium confidence
A pattern-matching library is flagged, but the evidence does not show that users can supply input to its affected code.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg:pkg:17a4bca76c8dccd42bb43bfa to a dependency declared by this repository.
Contextual assessment: The scanner matched brace-expansion 5.0.7. The supplied evidence establishes presence in the lockfile only, not shipped reachability or attacker-controlled input.
Impact: low · Exploitability: unlikely
Developer action: Upgrade brace-expansion 5.0.7 and identify whether it is development-only or reachable from shipped execution.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-mh99-v99m-4gvg:pkg:17a4bca76c8dccd42bb43bfa
- File role
- production
- Source
- package-lock.json
Dependency advisory GHSA-rgw5-rvv9-x895:pkg:c15eeb4b6498ad284f4ce31d applies
Minor caution · medium confidence
A pattern-matching library is flagged by another advisory, but the evidence does not show that users can supply input to its affected code.
Technical evidence
Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895:pkg:c15eeb4b6498ad284f4ce31d to a dependency declared by this repository.
Contextual assessment: The scanner matched brace-expansion 5.0.7 under a separate advisory. No executable path, vulnerable operation, or attacker-controlled trigger is demonstrated.
Impact: low · Exploitability: unlikely
Developer action: Upgrade brace-expansion 5.0.7 and identify whether it is development-only or reachable from shipped execution.
- Scanner
- osv-scanner 2.4.0
- Rule
- GHSA-rgw5-rvv9-x895:pkg:c15eeb4b6498ad284f4ce31d
- File role
- production
- Source
- package-lock.json
Expected scanner matches (13)
JavaScript analysis reported javascript.xray.data-exfiltration
Expected behavior · high confidence
This signal comes from a repository maintenance hook that runs local project commands after commits. The supplied code does not show it sending information to an external destination or stealing credentials.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.data-exfiltration in this repository.
Contextual assessment: The file invokes Git to obtain the current commit and runs four fixed local package scripts through the Node package manager when the commit has not previously been processed. It uses local filesystem state and inherited process environment, but the supplied behavior contains no network destination, credential selection, or outbound data flow. The scanner signal alone does not establish exfiltration.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.data-exfiltration
- File role
- production
- Source
- .husky/post-commit-repomix.js:3
JavaScript analysis reported javascript.xray.serialize-environment
Expected behavior · high confidence
The flagged setting passes the existing process environment to local formatting checks. This is normal for a repository pre-push hook and does not show that information is sent anywhere.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.
Contextual assessment: The supplied source shows a development pre-push hook invoking the local npm CLI with process.env and piped output. It runs lint and format checks synchronously, with no network destination, credential extraction, persistence beyond the hook, or external transmission shown. The scanner signal alone does not establish credential theft or exposure.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.serialize-environment
- File role
- production
- Source
- .husky/pre-push.js:48
JavaScript analysis reported javascript.xray.serialize-environment
Expected behavior · high confidence
The hook passes the existing development environment to local Repomix commands so those commands can run normally. The supplied code does not show that environment information being saved or transmitted elsewhere.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.
Contextual assessment: The child process receives process.env while executing fixed local package scripts, with output captured for error reporting. No serialization destination, network operation, credential extraction, or attacker-controlled command is shown. Passing the environment to a local package command is ordinary process behavior and does not demonstrate credential exposure.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.serialize-environment
- File role
- production
- Source
- .husky/post-commit-repomix.js:69
JavaScript analysis reported javascript.xray.serialize-environment
Expected behavior · high confidence
The hook reads an environment setting to control how much error output it displays. The supplied code does not send that value elsewhere.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.
Contextual assessment: The flagged operation parses a process environment variable into a local numeric limit used by tailOutput to truncate displayed npm errors. No external destination or credential flow is shown; the surrounding hook runs local checks and reports failures.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.serialize-environment
- File role
- production
- Source
- .husky/pre-commit.js:6
zizmor reported artipacked
Expected behavior · low confidence
The supplied material does not show that this lint workflow saves credentials in an artifact.
Technical evidence
Scanner reason: zizmor matched workflow-security rule artipacked in this repository.
Contextual assessment: The candidate is based on a low-confidence scanner finding, while the supplied workflow contains no artifact-upload step and its relevant excerpts are otherwise limited. Credential persistence is therefore not demonstrated.
Impact: none · Exploitability: unlikely
Developer action: Inspect the complete workflow and artifact configuration; avoid uploading logs or build artifacts that could contain credentials, and restrict artifact contents if uploads are needed.
- Scanner
- zizmor 1.28.0
- Rule
- artipacked
- File role
- tooling
- Source
- .github/workflows/lint.yml:13
JavaScript analysis reported javascript.xray.serialize-environment
Expected behavior · high confidence
The hook reads an environment value only to control how many error lines are displayed. It is part of local linting and does not demonstrate secret collection or upload.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.
Contextual assessment: The supplied source parses a named environment variable as a local output-tail limit. Its use is restricted to trimming displayed command output after local checks fail. No sensitive-field selection, serialization for transmission, network call, or attacker-controlled execution path is shown.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.serialize-environment
- File role
- production
- Source
- .husky/pre-push.js:9
Gitleaks reported vault-service-token
Expected behavior · low confidence
The scanner found a credential-like pattern, but the supplied lines only show a normal settings reset and do not expose a usable service token or show it being transmitted.
Technical evidence
Scanner reason: Gitleaks matched secret-detection rule vault-service-token in this repository.
Contextual assessment: The candidate is based on a redacted pattern match in production source. The supplied source context contains default-setting assignments and persistence of user configuration, with no credential value, secret-consuming operation, external destination, or exfiltration flow demonstrated. The match may be a false positive or non-usable value; the evidence is insufficient to establish credential exposure or malicious behavior.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- gitleaks 8.30.1
- Rule
- vault-service-token
- File role
- production
- Source
- src/entry/ui-events.js:735
JavaScript analysis reported javascript.xray.serialize-environment
Expected behavior · high confidence
The flagged environment access only checks a skip setting so the version-bump script does not run repeatedly after it creates its own commit. The supplied evidence does not show credential collection, transmission, or concealment.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.
Contextual assessment: The candidate is on a tooling script's process-environment guard. The shown logic compares one environment value against a fixed marker and exits; the same script passes that marker to its own version-bump commit. No environment serialization, credential use, external destination, or runtime extension path is shown. Its git and file operations are consistent with the documented automated version-bump purpose and are not demonstrated to affect shipped browser behavior or expose secrets.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.serialize-environment
- File role
- tooling
- Source
- scripts/bump-version-after-commit.js:100
JavaScript analysis reported javascript.xray.serialize-environment
Expected behavior · high confidence
The flagged line passes the current process environment into a Git command used by a version-bumping tool. This is normal tooling behavior and does not show that credentials are collected or sent elsewhere.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.serialize-environment in this repository.
Contextual assessment: The supplied source shows an environment merge for synchronous Git subprocess execution, with the repository directory, text output, and standard I/O configured. No destination, credential selection, network transmission, persistence, or concealed execution is shown. The file is development tooling, and the scanner signal alone does not demonstrate credential exposure.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.serialize-environment
- File role
- tooling
- Source
- scripts/bump-version-after-commit.js:17
JavaScript analysis reported javascript.xray.unsafe-regex
Expected behavior · high confidence
This is a pattern used to recognize message-range labels in the extension's memory metadata. The available evidence does not show secret handling, external data transmission, or harmful execution.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex in this repository.
Contextual assessment: The flagged expression is a fixed, anchored parser pattern matching optional message anchors and numeric ranges. It operates on local snippet text, with no demonstrated attacker-controlled high-volume input, external sink, persistence, or security-sensitive operation in the supplied context.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.unsafe-regex
- File role
- production
- Source
- src/core/snippet-metadata.js:7
JavaScript analysis reported javascript.xray.unsafe-regex
Expected behavior · high confidence
This is a simple date-format recognition pattern used for snippet metadata. Nothing supplied indicates that it creates a practical security problem.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex in this repository.
Contextual assessment: The flagged expression is anchored and uses bounded date and hour components for local metadata parsing. The supplied evidence shows no demonstrated attacker-controlled trigger, harmful destination, credential exposure, or material denial-of-service path.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.unsafe-regex
- File role
- production
- Source
- src/core/snippet-metadata.js:4
JavaScript analysis reported javascript.xray.unsafe-regex
Expected behavior · medium confidence
The flagged expression is a fixed date-and-time parser used by the extension's memory-state handling. The supplied evidence does not show that user-controlled text is compiled into a regular expression or that this expression can cause harmful resource consumption.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex in this repository.
Contextual assessment: The scanner identified a static regular-expression signal at the declaration of a bounded, fixed pattern. No dynamic construction, attacker-controlled pattern, execution path, or denial-of-service impact is demonstrated by the supplied production context. The regex contains only fixed syntax and bounded numeric and short alphabetic fields, so the candidate is consistent with normal parsing behavior for the stated summarization purpose.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.xray.unsafe-regex
- File role
- production
- Source
- src/core/summarizer-state.js:25
JavaScript analysis reported javascript.download-to-execution
Expected behavior · high confidence
The flagged network request retrieves connection-profile names from SillyTavern so the extension can populate a settings dropdown. The supplied code does not show downloaded content being executed.
Technical evidence
Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution in this repository.
Contextual assessment: The production code performs a same-host GET request to the SillyTavern connection-manager profile endpoint, parses JSON, and inserts profile identifiers and display names into option elements using value and text setters. The supplied representation contains no dynamic execution sink or flow from the response into executable code; the scanner result appears to be a correlation rather than demonstrated download-to-execution behavior.
Impact: none · Exploitability: unlikely
Developer action: none
- Scanner
- javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1
- Rule
- javascript.download-to-execution
- File role
- production
- Source
- src/entry/ui-connection.js:128-209