A living research library for one narrow field, built for humans and agents.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport http counts 3 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
bib
-
entries
-
lookup
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit a89336c · analyzer v33 · 1w ago
danger signals1
- dynamic code execution vm exec LKRCharon-field-current-a89336c/src/public.test.ts :154
vm.runInNewContext(script, {
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 72
filesystem 32
- fs (weak) LKRCharon-field-current-a89336c/scripts/export-public.mjs :4
import { cpSync, existsSync, lstatSync, mkdirSync, readdirSync, realpathSync, rmSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/scripts/public-check.mjs :4
import { existsSync, lstatSync, readFileSync, readdirSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/scripts/source-preflight.mjs :4
import { lstatSync, readFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/authorships-upgrade.test.ts :2
import { readFileSync } from "node:fs"; - fs LKRCharon-field-current-a89336c/src/authorships-upgrade.ts :3
import { readFileSync, writeFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/candidates.test.ts :2
import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/cli.test.ts :3
import { mkdtemp, rm, writeFile } from "node:fs/promises"; - fs LKRCharon-field-current-a89336c/src/cli.ts :20
import { readFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/d1-citations.test.ts :2
import { readFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/db.test.ts :2
import { mkdirSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs"; - fs LKRCharon-field-current-a89336c/src/db.ts :18
import { closeSync, existsSync, openSync, readFileSync, readdirSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/filecache.test.ts :2
import { access, mkdtemp, readdir, rm, stat, writeFile } from "node:fs/promises";
show 20 more
- fs LKRCharon-field-current-a89336c/src/filecache.ts :8
import { chmod, mkdir, readFile, writeFile, rm } from "node:fs/promises"; - fs (weak) LKRCharon-field-current-a89336c/src/identity-upgrade.test.ts :2
import { existsSync, mkdtempSync, rmSync } from "node:fs"; - fs LKRCharon-field-current-a89336c/src/identity-upgrade.ts :3
import { existsSync, readFileSync, statSync, writeFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/index-sweep.test.ts :2
import { readFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/maintenance.test.ts :2
import { existsSync, mkdtempSync, rmSync } from "node:fs"; - fs LKRCharon-field-current-a89336c/src/maintenance.ts :3
import { chmodSync, existsSync, mkdirSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/node-identity.test.ts :2
import { mkdtempSync, readFileSync, rmSync } from "node:fs"; - fs LKRCharon-field-current-a89336c/src/node-identity.ts :21
import { existsSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/node-read.test.ts :3
import { mkdtemp, rm } from "node:fs/promises"; - fs (weak) LKRCharon-field-current-a89336c/src/public-export.test.ts :2
import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/public.test.ts :2
import { readFile } from "node:fs/promises"; - fs (weak) LKRCharon-field-current-a89336c/src/safe-rewrite.test.ts :2
import { mkdtemp, readFile, readdir, realpath, rename, rm, writeFile } from "node:fs/promises"; - fs LKRCharon-field-current-a89336c/src/safe-rewrite.ts :10
import { constants } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/server-citations.test.ts :3
import { mkdtempSync, rmSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/server-users.test.ts :3
import { mkdtempSync, rmSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/server.test.ts :3
import { mkdtempSync, rmSync } from "node:fs"; - fs LKRCharon-field-current-a89336c/src/server.ts :16
import { readFile } from "node:fs/promises"; - fs (weak) LKRCharon-field-current-a89336c/src/source-preflight.test.ts :4
import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs"; - fs (weak) LKRCharon-field-current-a89336c/src/users-cli.test.ts :2
import { mkdtempSync, rmSync } from "node:fs"; - fs LKRCharon-field-current-a89336c/src/users-cli.ts :5
import { readFileSync } from "node:fs";
shell / exec 8
- shell (weak) LKRCharon-field-current-a89336c/scripts/export-public.mjs :3
import { execFileSync } from "node:child_process"; - shell (weak) LKRCharon-field-current-a89336c/scripts/source-preflight.mjs :7
import { spawnSync } from "node:child_process"; - shell (weak) LKRCharon-field-current-a89336c/src/cli.test.ts :2
import { spawn } from "node:child_process"; - shell (weak) LKRCharon-field-current-a89336c/src/public-export.test.ts :5
import { spawnSync } from "node:child_process"; - shell (weak) LKRCharon-field-current-a89336c/src/server-citations.test.ts :2
import { spawn } from "node:child_process"; - shell (weak) LKRCharon-field-current-a89336c/src/server-users.test.ts :2
import { spawn } from "node:child_process"; - shell (weak) LKRCharon-field-current-a89336c/src/server.test.ts :2
import { spawn, spawnSync } from "node:child_process"; - shell (weak) LKRCharon-field-current-a89336c/src/source-preflight.test.ts :7
import { spawnSync } from "node:child_process";
network 13
- net (weak) LKRCharon-field-current-a89336c/src/candidates.test.ts :580
return worker.fetch( - net (weak) LKRCharon-field-current-a89336c/src/db.test.ts :950
const health = await worker.fetch(new Request("https://bibhub.test/healthz"), env); - net (weak) LKRCharon-field-current-a89336c/src/index-sweep.test.ts :181
const response = await worker.fetch( - net LKRCharon-field-current-a89336c/src/index.ts :1013
async fetch(request: Request, env: Env): Promise<Response> { - net (weak) LKRCharon-field-current-a89336c/src/mcp.test.ts :348
const response = await handler.fetch( - net LKRCharon-field-current-a89336c/src/mcp.ts :589
return handler.fetch(bounded.request, { parsedBody: bounded.parsedBody }); - net LKRCharon-field-current-a89336c/src/openalex.ts :779
response = await options.fetch(url.toString(), { - net (weak) LKRCharon-field-current-a89336c/src/public.test.ts :189
async fetch(path: string) { - net (weak) LKRCharon-field-current-a89336c/src/server-citations.test.ts :4
import { createServer } from "node:net"; - net (weak) LKRCharon-field-current-a89336c/src/server-users.test.ts :4
import { createServer } from "node:net"; - net (weak) LKRCharon-field-current-a89336c/src/server.test.ts :4
import { createServer } from "node:net"; - net LKRCharon-field-current-a89336c/src/server.ts :15
import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
show 1 more
- net LKRCharon-field-current-a89336c/src/sources.ts :110
const response = await fetch(url, {
secrets 1
- secrets LKRCharon-field-current-a89336c/src/server.ts :73
const ACCESS_TOKEN = process.env.AUTH_TOKEN ?? process.env.BIBHUB_TOKEN;
tool registrations 3
- lookup LKRCharon-field-current-a89336c/src/mcp.ts :360
- entries LKRCharon-field-current-a89336c/src/mcp.ts :390
- bib LKRCharon-field-current-a89336c/src/mcp.ts :420
declared dependencies 9
- @modelcontextprotocol/server@2.0.0
- @modelcontextprotocol/client@2.0.0
- agents@0.20.1
- zod@4.4.3
- @tailwindcss/cli@4.3.3
- @types/node@^26.1.2
- tailwindcss@4.3.3
- typescript@^5.6.0
- wrangler@4.119.0