github TypeScript re-analysis due

codewithnuh/blockend

github

shadcn/ui for your backend — a CLI that generates production-ready TypeScript blocks (rate limiting, validation, logging) into your codebase. You own the code

maintainer
codewithnuh
licence
MIT
first seen
2026-09-02
last seen
2026-09-17
releases · 30d
1
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 8 tools
transport stdio · http counts 8 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • add_block
  • add_blocks
  • detect_project
  • diff_block
  • doctor
  • list_blocks
  • update_apply
  • update_check
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 58f3e42 · analyzer v33 · 2d ago

skills & prompt files 2

danger signals1

code evidence vv2.0.2 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 229

filesystem 20

  • fs codewithnuh-blockend-58f3e42/apps/web/components/blocks-list.tsx :1 import fs from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/apps/web/components/source-code.tsx :1 import fs from "fs/promises";
  • fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/add.test.ts :4 import fs from "fs/promises";
  • fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/diff.test.ts :3 import fs from "fs/promises";
  • fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/doctor.test.ts :3 import fs from "fs/promises";
  • fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/init.test.ts :4 import fs from "fs/promises";
  • fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/update.test.ts :3 import fs from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/add.ts :3 import fs from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/diff.ts :3 import fs from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/doctor.ts :3 import fs from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/init.ts :3 import fs from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/list.ts :3 import fs from "fs/promises";
show 8 more
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :3 import fs from "node:fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/update.ts :3 import fs from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/package-manager.ts :1 import { existsSync, readFileSync } from "fs";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/filesystem.ts :1 import { existsSync } from "fs";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/package.ts :1 import { readFile } from "fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/read-template.ts :1 import { readFile } from "node:fs/promises";
  • fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/tsconfig.ts :1 import { readFile } from "fs/promises";
  • fs (weak) codewithnuh-blockend-58f3e42/scripts/generate-import-report.mjs :1 import { promises as fs } from "fs";

shell / exec 6

  • shell (weak) codewithnuh-blockend-58f3e42/blocks/idempotency/adapters/express.test.ts :218 execute.mockImplementation(async (_userId, _op, _key, _body, exec) => exec());
  • shell (weak) codewithnuh-blockend-58f3e42/blocks/idempotency/adapters/fastify.test.ts :134 execute.mockImplementation(async (_u, _o, _k, _b, exec) => exec());
  • shell (weak) codewithnuh-blockend-58f3e42/blocks/idempotency/adapters/hono.test.ts :111 execute.mockImplementation(async (_u, _o, _k, _b, exec) => exec());
  • shell (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/add.test.ts :6 import { exec, type ChildProcess } from "child_process";
  • shell codewithnuh-blockend-58f3e42/packages/cli/src/commands/add.ts :4 import { exec } from "child_process";
  • shell codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :105 const { stdout } = await execa(command, args, options);

network 13

  • net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/adapters/express.ts :2 import type { Server } from "node:http";
  • net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/adapters/hono.ts :5 import type { Server } from "node:http";
  • net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/core/connection-tracker.ts :1 import type { Server } from "node:http";
  • net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/express.test.ts :1 import { createServer, type Server } from "node:http";
  • net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/fastify.test.ts :1 import type { AddressInfo } from "node:net";
  • net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/hono.test.ts :1 import { createServer, type Server } from "node:http";
  • net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/unit/connection-tracker.test.ts :1 import { createServer, type Server } from "node:http";
  • net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/unit/http-task.test.ts :1 import { createServer, type Server } from "node:http";
  • net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/utils/http.ts :1 import type { IncomingMessage, Server, ServerResponse } from "node:http";
  • net codewithnuh-blockend-58f3e42/packages/cli/src/commands/add.ts :584 const res = await fetch(`${RAW_CDN_BASE}/${fm.source}`);
  • net codewithnuh-blockend-58f3e42/packages/cli/src/commands/diff.ts :139 const res = await fetch(MANIFEST_URL);
  • net codewithnuh-blockend-58f3e42/packages/cli/src/commands/list.ts :70 const response = await fetch(MANIFEST_URL);
show 1 more
  • net codewithnuh-blockend-58f3e42/packages/cli/src/commands/update.ts :338 const res = await fetch(MANIFEST_URL);

database 2

  • db codewithnuh-blockend-58f3e42/blocks/rate-limiter/variants/redis-store.ts :1 import type { Redis } from "ioredis";
  • db (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/edge-cases.test.ts :35 const input = `import Redis from "ioredis";`;

tool registrations 8

  • list_blocks codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :114
  • add_block codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :124
  • detect_project codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :143
  • diff_block codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :157
  • doctor codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :174
  • update_check codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :188
  • update_apply codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :202
  • add_blocks codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :218

install hooks 3

  • postinstall codewithnuh-blockend-58f3e42/apps/web/package.json :10 fumadocs-mdx
  • prepare codewithnuh-blockend-58f3e42/package.json :18 husky
  • prepublishOnly codewithnuh-blockend-58f3e42/packages/cli/package.json :27 pnpm typecheck

declared dependencies 26

  • prettier@^3.8.4
  • turbo@^2.10.8
  • @commitlint/cli@^21.0.2
  • @commitlint/config-conventional@^21.0.2
  • @hono/node-server@^2.1.1
  • @node-rs/argon2@^2.1.0
  • @types/express@^5.0.6
  • @types/node@^26.2.0
  • @types/supertest@^7.2.1
  • express@^5.2.1
  • express-rate-limit@^8.6.2
  • fastify@^5.12.1
show 14 more
  • fastify-plugin@^6.0.0
  • hono@^4.13.5
  • husky@^9.1.7
  • ioredis@^5.11.1
  • lint-staged@^17.0.7
  • mitata@^1.0.34
  • oxlint@^1.77.0
  • oxlint-tsgolint@^7.0.2001
  • pino@^10.3.1
  • pino-pretty@^13.1.3
  • supertest@^7.2.2
  • typescript@^7.0.2
  • vitest@^4.1.11
  • zod@^4.4.3

perm:untrusted 3

  • untrusted (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/express.test.ts :77 const inflight = fetch(`${base}/slow`).then(async (r) => r.status);
  • untrusted (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/fastify.test.ts :69 const inflight = fetch(`${base}/slow`).then((r) => r.status);
  • untrusted (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/hono.test.ts :76 const inflight = fetch(`${base}/slow`).then((r) => r.status);