MCP Observatory
5m ago Tracked 60,039 Last 5m ago 24h 2,475
github TypeScript analyzed 669430e deep scan · partial (385/1,660 files)

SvatahLabs/Yam

github

Deterministic automation runtime with a standard agent surface, for humans and agents.

maintainer
SvatahLabs
licence
Apache-2.0
first seen
2026-09-14
last seen
2026-09-14
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 22 tools
transport stdio · streamable-http · http counts 22 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • surface_act
  • surface_capabilities
  • surface_check
  • surface_close
  • surface_connect
  • surface_control
  • surface_describe
  • surface_events
  • surface_read
  • surface_request
  • surface_screenshot
  • surface_sessions
  • surface_snapshot
  • surface_targets
  • surface_trajectory
  • yam_bindings
  • yam_compile
  • yam_heal
  • yam_lint
  • yam_record
  • yam_results
  • yam_run
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 669430e · analyzer v33 · 19h ago

skills & prompt files 16

danger signals3

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 775

filesystem 265

  • fs SvatahLabs-Yam-669430e/apps/desktop/src/main/debug.ts :31 import { appendFileSync, mkdirSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/apps/desktop/src/main/index.ts :29 import { existsSync, mkdirSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/apps/desktop/src/main/preferences.ts :16 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/apps/desktop/src/main/service.ts :32 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/client.test.ts :11 import { mkdtempSync, readFileSync, rmSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/debug.test.ts :13 import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/first-task.test.tsx :24 import { readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/parity.test.ts :20 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/review.test.ts :33 } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/screen-reader.test.tsx :22 import { readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/screen-rule.test.ts :29 import { readdirSync, readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/security.test.ts :15 import { readFileSync, readdirSync } from "node:fs";
show 28 more
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/service-lifecycle.test.ts :15 import { existsSync, mkdtempSync, rmSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/shell.spec.ts :54 } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/surfaces-dogfood.mjs :10 import { cpSync, existsSync, mkdtempSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/desktop/test/theme-root.test.tsx :18 import { readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/apps/sample-web/test/variants-doc.test.ts :5 import { readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/docs/spec/design/build-ux.mjs :1 import { readFileSync, writeFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/docs/spec/design/build.mjs :1 import { writeFileSync, readdirSync, readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/docs/spec/design/macros.mjs :8 import { readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/docs/spec/surface-first/evidence/dogfood.mjs :5 import {mkdirSync,mkdtempSync,writeFileSync,readFileSync,cpSync,existsSync} from 'node:fs';
  • fs SvatahLabs-Yam-669430e/evals/self/yam-on-yam/launch.mjs :39 import { existsSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/evals/self/yam-on-yam/oracles.mjs :23 import { readFileSync, readdirSync, statSync, existsSync, writeFileSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/evals/self/yam-on-yam/run.mjs :37 import { mkdirSync, writeFileSync, mkdtempSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/evals/self/yam-on-yam/terminal.mjs :23 import { mkdtempSync, writeFileSync, mkdirSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/examples/plain-playwright/tests/lifecycle.spec.ts :20 import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/packages/adapter-appium/src/surface.ts :17 import { writeFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/packages/adapter-appium/test/page-source.test.ts :13 import { readFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/packages/adapter-appium/test/surface.test.ts :16 import { readFileSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/packages/adapter-ax/src/bridge.ts :63 import { statSync, unlinkSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/packages/adapter-ax/test/bridge.test.ts :15 import { existsSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/packages/adapter-ax/test/recorded.ts :23 import { readFileSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/packages/adapter-bidi/src/launch.ts :27 import { existsSync, mkdtempSync, readdirSync, rmSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/packages/adapter-bidi/src/surface.ts :24 import { readFileSync, writeFileSync } from "node:fs";
  • fs (weak) SvatahLabs-Yam-669430e/packages/adapter-bidi/test/protocol.test.ts :9 import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/packages/adapter-http/src/request.ts :20 import { readFile } from "node:fs/promises";
  • fs (weak) SvatahLabs-Yam-669430e/packages/adapter-http/test/request.test.ts :11 import { mkdtempSync, writeFileSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/packages/adapter-playwright/src/surface.ts :1460 fs.readFile(state.storageState!, "utf8").then((t) => JSON.parse(t) as {
  • fs (weak) SvatahLabs-Yam-669430e/packages/adapter-playwright/test/session.spec.ts :12 import { mkdtempSync, readFileSync, statSync, writeFileSync } from "node:fs";
  • fs SvatahLabs-Yam-669430e/packages/adapter-process/src/surface.ts :47 import { readFileSync, realpathSync, statSync } from "node:fs";

225 more not shown — this panel samples each group; the count above is the real total.

shell / exec 110

  • shell SvatahLabs-Yam-669430e/apps/desktop/src/main/service.ts :30 import { spawn, type ChildProcess } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/apps/desktop/test/client.test.ts :10 import { execFileSync } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/apps/desktop/test/parity.test.ts :19 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/apps/desktop/test/shell.spec.ts :45 import { spawn, spawnSync, type ChildProcess } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/apps/desktop/test/surfaces-dogfood.mjs :9 import { spawn, spawnSync } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/docs/spec/surface-first/evidence/dogfood.mjs :3 import {spawn, spawnSync} from 'node:child_process';
  • shell SvatahLabs-Yam-669430e/evals/self/yam-on-yam/app-walk.mjs :25 import { spawnSync } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/evals/self/yam-on-yam/drivers.mjs :21 import { spawnSync } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/evals/self/yam-on-yam/launch.mjs :38 import { spawnSync } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/evals/self/yam-on-yam/oracles.mjs :24 import { spawnSync } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/evals/self/yam-on-yam/run.mjs :40 import { spawnSync } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/examples/mcp-agent/test.mjs :10 import { spawn } from "node:child_process";
show 28 more
  • shell SvatahLabs-Yam-669430e/packages/adapter-atspi/src/bridge.ts :34 import { spawn } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/adapter-ax/src/bridge.ts :62 import { spawn } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/adapter-ax/src/grant.ts :30 import { spawnSync } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/adapter-bidi/src/launch.ts :26 import { spawn, type ChildProcess } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/adapter-process/src/pty.ts :44 import { spawn, spawnSync, type ChildProcess } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/adapter-uia/src/bridge.ts :35 import { spawn } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/cli/src/commands/eval-self.ts :34 import { spawnSync } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/cli/src/commands/run.ts :20 import { spawn } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/cli/src/commands/surface-control.ts :27 import { spawn } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/cli/src/commands/ui.ts :27 import { spawn, type ChildProcess } from "node:child_process";
  • shell SvatahLabs-Yam-669430e/packages/cli/src/commands/workspace.ts :14 import { spawnSync } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/base-url-precedence.test.ts :23 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/bidi-independence.test.ts :13 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/dialog.test.ts :23 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/from-prototype.test.ts :28 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/guards-compensation.test.ts :22 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/heal-cycle.test.ts :40 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/privacy.test.ts :18 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/record-capture.test.ts :8 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/record-human.test.ts :10 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/record.test.ts :13 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/repl.test.ts :15 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/resume.test.ts :21 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/surface-flags.test.ts :14 import { spawnSync } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/surface-journey.test.ts :15 import { spawn } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/surface-service.test.ts :19 import { spawn, type ChildProcess } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/surface-transport.test.ts :15 import { spawn, spawnSync, type ChildProcess } from "node:child_process";
  • shell (weak) SvatahLabs-Yam-669430e/packages/cli/test/tool-server.test.ts :26 import { spawn } from "node:child_process";

70 more not shown — this panel samples each group; the count above is the real total.

network 36

  • net SvatahLabs-Yam-669430e/apps/desktop/src/main/index.ts :431 const response = await fetch(`${connection.url}/project`, {
  • net SvatahLabs-Yam-669430e/apps/desktop/src/renderer/client.generated.ts :88 const response = await fetch(`${this.connection.url}${path}`, {
  • net SvatahLabs-Yam-669430e/apps/desktop/src/renderer/client.ts :49 const response = await fetch(`${this.connection.url}/events/sse`, {
  • net (weak) SvatahLabs-Yam-669430e/apps/desktop/test/service-lifecycle.test.ts :145 const response = await fetch(`${running.connection.url}/project`, {
  • net (weak) SvatahLabs-Yam-669430e/apps/desktop/test/surfaces-dogfood.mjs :13 import { createServer, request as proxyRequest } from "node:http";
  • net SvatahLabs-Yam-669430e/apps/sample-web/src/server.ts :1 import { createServer, type Server, type ServerResponse } from "node:http";
  • net (weak) SvatahLabs-Yam-669430e/apps/sample-web/test/smoke.test.ts :20 const res = await fetch(`${app.origin}${path}`);
  • net (weak) SvatahLabs-Yam-669430e/docs/spec/surface-first/evidence/dogfood.mjs :8 import {createServer,request as proxyRequest} from 'node:http';
  • net SvatahLabs-Yam-669430e/evals/self/yam-on-yam/launch.mjs :213 const response = await fetch(`${cdpUrl}/json/version`, {
  • net SvatahLabs-Yam-669430e/packages/adapter-http/src/request.ts :31 } from "undici";
  • net (weak) SvatahLabs-Yam-669430e/packages/adapter-http/test/server.ts :9 import { createServer, type IncomingMessage, type Server, type ServerResponse } from "node:http";
  • net SvatahLabs-Yam-669430e/packages/bindings-cli/src/commands/eval.ts :204 const response = await fetch(`${baseUrl}/api/variants`);
show 24 more
  • net (weak) SvatahLabs-Yam-669430e/packages/cli/test/base-url-precedence.test.ts :25 import { createServer } from "node:http";
  • net (weak) SvatahLabs-Yam-669430e/packages/cli/test/privacy.test.ts :260 'const r = await fetch("https://api.anthropic.com/v1/messages").catch((e) => e);' +
  • net (weak) SvatahLabs-Yam-669430e/packages/cli/test/service.test.ts :108 await fetch(`${service.url}/project`, { headers: { authorization: `Bearer ${TOKEN}` } })
  • net (weak) SvatahLabs-Yam-669430e/packages/cli/test/surface-service.test.ts :65 const response = await fetch(`${connection.url}${path}`, {
  • net (weak) SvatahLabs-Yam-669430e/packages/cli/test/surface-transport.test.ts :79 const response = await fetch(`${connection.url}${path}`, {
  • net SvatahLabs-Yam-669430e/packages/mcp/src/http.ts :49 import { createServer, type Server, type ServerResponse } from "node:http";
  • net (weak) SvatahLabs-Yam-669430e/packages/mcp/test/http.test.ts :120 const health = await fetch(new URL("/health", served.url));
  • net SvatahLabs-Yam-669430e/packages/sdk/src/generated.ts :104 const response = await fetch(`${this.connection.url}${path}`, {
  • net SvatahLabs-Yam-669430e/packages/sdk/src/index.ts :137 const response = await fetch(`${this.connection.url}/events/sse`, {
  • net (weak) SvatahLabs-Yam-669430e/packages/service/test/capture.test.ts :24 await fetch(`${service!.url}${path}`, {
  • net (weak) SvatahLabs-Yam-669430e/packages/service/test/contract.test.ts :41 await fetch(`${service.url}${path}`, {
  • net SvatahLabs-Yam-669430e/packages/surface-control/src/codegen.ts :81 " const response = await fetch(url, {",
  • net SvatahLabs-Yam-669430e/packages/surface-control/src/probes.ts :72 const response = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
  • net SvatahLabs-Yam-669430e/packages/surface-control/src/server.ts :22 import { createServer, type Server } from "node:http";
  • net (weak) SvatahLabs-Yam-669430e/packages/surface-control/test/one-broker.test.ts :26 import { createServer, type Server } from "node:http";
  • net (weak) SvatahLabs-Yam-669430e/packages/ui-tokens/scripts/site-palette.mjs :86 const response = await fetch(new URL("/styles.css", url), {
  • net (weak) SvatahLabs-Yam-669430e/scripts/block-external-network.mjs :24 import http from "node:http";
  • net (weak) SvatahLabs-Yam-669430e/scripts/desktop-grounding-cases.mjs :105 const response = await fetch(`http://127.0.0.1:${PORT}/json/list`);
  • net (weak) SvatahLabs-Yam-669430e/scripts/fetch-axe.mjs :66 response = await fetch(AXE_URL, { redirect: "follow" });
  • net (weak) SvatahLabs-Yam-669430e/scripts/generate-app-client.mjs :140 lines.push(" const response = await fetch(`${this.connection.url}${path}`, {");
  • net (weak) SvatahLabs-Yam-669430e/scripts/generate-clients.mjs :204 lines.push(" const response = await fetch(`${this.connection.url}${path}`, {");
  • net (weak) SvatahLabs-Yam-669430e/scripts/record-desktop-tree.mjs :140 const response = await fetch(`http://127.0.0.1:${PORT}/json/list`);
  • net (weak) SvatahLabs-Yam-669430e/scripts/record-screen-fixtures.mjs :255 const response = await fetch(`${handshake.url}${path}`, {
  • net (weak) SvatahLabs-Yam-669430e/scripts/tree-agreement.mjs :100 const response = await fetch(`http://127.0.0.1:${PORT}/json/list`);

secrets 10

  • secrets SvatahLabs-Yam-669430e/packages/cli/src/commands/runs.ts :42 const token = stringOption(args, "token") ?? process.env["YAM_SERVICE_TOKEN"];
  • secrets SvatahLabs-Yam-669430e/packages/cli/src/commands/ui.ts :163 token: stringOption(args, "token") ?? process.env["YAM_SERVICE_TOKEN"],
  • secrets SvatahLabs-Yam-669430e/packages/cli/src/commands/workspace.ts :70 token: stringOption(args, "token") ?? process.env["YAM_SERVICE_TOKEN"],
  • secrets (weak) SvatahLabs-Yam-669430e/packages/cli/test/bind-grounding.test.ts :42 const key = process.env["ANTHROPIC_API_KEY"];
  • secrets (weak) SvatahLabs-Yam-669430e/packages/cli/test/diagnostics.test.ts :76 delete process.env["YAM_DIAG_UNSET_SECRET"];
  • secrets (weak) SvatahLabs-Yam-669430e/packages/cli/test/tier2.test.ts :464 const before = { key: process.env["ANTHROPIC_API_KEY"], token: process.env["ANTHROPIC_AUTH_TOKEN"] };
  • secrets SvatahLabs-Yam-669430e/packages/sdk/src/index.ts :228 const token = connection?.token ?? process.env["YAM_SERVICE_TOKEN"];
  • secrets (weak) SvatahLabs-Yam-669430e/scripts/eval-reports.mjs :47 runner: process.env.ANTHROPIC_API_KEY || process.env.ANTHROPIC_AUTH_TOKEN
  • secrets (weak) SvatahLabs-Yam-669430e/scripts/publish.mjs :130 const hasToken = (process.env["NPM_TOKEN"] ?? "") !== "";
  • secrets (weak) SvatahLabs-Yam-669430e/tools/repo-checks/test/packaging.test.ts :396 expect(publish).toContain('process.env["NPM_TOKEN"]');

tool registrations 22

  • yam_compile SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :287
  • yam_lint SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :328
  • yam_run SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :355
  • yam_record SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :391
  • yam_heal SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :476
  • yam_bindings SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :540
  • yam_results SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :564
  • surface_targets SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :610
  • surface_connect SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :627
  • surface_snapshot SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :685
  • surface_act SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :711
  • surface_read SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :742
show 10 more
  • surface_check SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :766
  • surface_close SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :797
  • surface_sessions SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :811
  • surface_capabilities SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :822
  • surface_describe SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :835
  • surface_events SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :851
  • surface_control SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :865
  • surface_request SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :892
  • surface_screenshot SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :932
  • surface_trajectory SvatahLabs-Yam-669430e/packages/mcp/src/server.ts :948

declared dependencies 30

  • @modelcontextprotocol/sdk@catalog:
  • @eslint/js@catalog:
  • @playwright/test@catalog:
  • @svatah/yam@workspace:*
  • @svatah/yam-adapter-playwright@workspace:*
  • @svatah/yam-adapter-process@workspace:*
  • @svatah/yam-bindings@workspace:*
  • @svatah/yam-compiler@workspace:*
  • @svatah/yam-mcp@workspace:*
  • @svatah/yam-migrate@workspace:*
  • @svatah/yam-schema@workspace:*
  • @svatah/yam-screens@workspace:*
show 18 more
  • @svatah/yam-service@workspace:*
  • @svatah/yam-spec@workspace:*
  • @svatah/yam-steps@workspace:*
  • @svatah/yam-surface@workspace:*
  • @svatah/yam-ui@workspace:*
  • @svatah/yam-ui-tokens@workspace:*
  • @types/node@catalog:
  • eslint@catalog:
  • eslint-import-resolver-typescript@catalog:
  • eslint-plugin-import@catalog:
  • jsdom@^30.0.1
  • playwright@catalog:
  • sample-web@workspace:*
  • tsup@catalog:
  • typescript@catalog:
  • typescript-eslint@catalog:
  • vitest@catalog:
  • yaml@catalog:

obfuscation 1

  • dynamic require()/import() SvatahLabs-Yam-669430e/packages/cli/src/commands/explore.ts :57 mcp = (await import(/* @vite-ignore */ "@svatah/yam" + "-mcp")) as {

perm:untrusted 1

  • untrusted (weak) SvatahLabs-Yam-669430e/apps/sample-web/test/smoke.test.ts :175 const listed = (await (await fetch(`${app.origin}/api/variants`)).json()) as Array<{