TavernKeeper Scan Report

iamarxs/AnyWorld

Commit 25b45e3 Reviewed Oct 15, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 4 low

No material or immediate-danger item was identified.

Deterministic technical evidence (4)

JavaScript analysis reported javascript.xray.shady-link · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: tests/client_reconnect.test.cjs:75
OpenGrep reported tavernkeeper.dynamic-execution.javascript-eval · opengrep 1.26.0

This technical signal is not part of the shipped runtime behavior.

Policy reason: owned-inert-tooling · Execution scope: test-documentation-data

Source: tests/client_reconnect.test.cjs:84
JavaScript analysis reported javascript.xray.unsafe-vm-context · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-content · Execution scope: test-documentation-data

Source: tests/client_reconnect.test.cjs:81
OpenGrep reported tavernkeeper.dynamic-execution.javascript-eval · opengrep 1.26.0

This technical signal is not part of the shipped runtime behavior.

Policy reason: owned-inert-tooling · Execution scope: test-documentation-data

Source: tests/client_reconnect.test.cjs:81

Status: Complete
Candidates: 9 files · 85863 bytes
X-Ray review families: 3 warning occurrences compacted to 2 evidence-preserving review families
Representations: 9 raw · 0 decoded · 0 normalized · 0 bundle modules
Stage scans: 9 raw signatures · 9 raw AST · 9 raw OpenGrep · 0 derived signatures · 0 derived AST · 0 derived OpenGrep

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — not-applicable
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — completed

Technical scan identity

Full commit: 25b45e3486948baad7cb9460e53a61bf9dfd9819
Completed: Oct 15, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: Not used — deterministic policy
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 0 fresh / 0 reused groups · 0 fresh / 0 reused candidates
Review source reports: none
Evidence triage: 4 deterministic / 0 contextual candidates · 0 contextual / 2 total behavior cases
Model budget: 0 model calls · 0 / 12 fresh cases · 0 / 200000 estimated input · 0 / 250000 actual input · 0 / 40000 output tokens
Review usage: 0 input · 0 output · 0 cache read · 0 reasoning tokens
Report: d083449fc007c10f0acfe7d1da4ab4e8e28ddfed9d566154098340371b0e626a