github TypeScript re-analysis due

lorelum/lorelum

github

Engineering knowledge infrastructure for AI coding agents.

maintainer
lorelum
licence
Apache-2.0
first seen
2026-07-05
last seen
2026-09-17
releases · 30d
2
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 9ec78c8 · analyzer v33 · 1w ago

skills & prompt files 2

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 244

filesystem 36

  • fs lorelum-lorelum-9ec78c8/packages/cli/integration/process.integration.ts :2 import { existsSync } from "node:fs";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/cli/src/get/store.integration.test.ts :3 import { existsSync } from "node:fs";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/cli/src/install/install-command.test.ts :2 import { existsSync } from "node:fs";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/cli/src/install/materialize-source.test.ts :4 import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/cli/src/install/materialize-source.ts :1 import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/cli/src/localization/filesystem.ts :1 import { lstat, mkdir, opendir, readFile, rename, unlink, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/cli/src/localization/localization-command.test.ts :2 import { mkdir, mkdtemp, readFile, rm, symlink, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/benchmarks/keyword-query-quality.bench.ts :1 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/benchmarks/keyword-query.bench.ts :1 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/benchmarks/local-store-mutation.bench.ts :1 import { cp, mkdtemp, rm } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/benchmarks/local-store-point-read.bench.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/install.ts :1 import { rm } from "node:fs/promises";
show 24 more
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/local-store.test.ts :2 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/mutation-metrics.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/mutation.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/mutation.ts :2 import { mkdir } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/open.ts :2 import { readFile, realpath } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/point-read.test.ts :2 import { access, mkdtemp, rm, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/recovery.test.ts :3 import { mkdtemp, rm, writeFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/reindex.ts :1 import { readFile, rm } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/lifecycle/uninstall.ts :1 import { rm } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/artifacts/artifact-store.test.ts :3 import { mkdtemp, mkdir, readFile, rm, symlink, writeFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/artifacts/artifact-store.ts :2 import { cp, lstat, mkdir, readdir, readFile, rename, rm, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/artifacts/snapshot-codec.test.ts :2 import { mkdtemp, mkdir, rm, symlink, writeFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/artifacts/snapshot-codec.ts :1 import { lstat, opendir, readFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/artifacts/snapshot-writer.ts :1 import { mkdir, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/journal/operation-journal.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/journal/operation-journal.ts :1 import { mkdir, readFile, readdir, rename, unlink, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/manifest/manifest-store.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/manifest/manifest-store.ts :1 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/mutation-lock.test.ts :2 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/mutation-lock.ts :2 import { mkdir, readFile, rename, rm, unlink, writeFile } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/sqlite/database.ts :2 import { mkdir } from "node:fs/promises";
  • fs lorelum-lorelum-9ec78c8/packages/engine/src/query/keyword/persistent-keyword-index.ts :2 import { access, mkdir, rename, rm } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/query/query-service.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) lorelum-lorelum-9ec78c8/packages/engine/src/query/store.integration.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";

shell / exec 8

  • shell lorelum-lorelum-9ec78c8/packages/cli/integration/process.integration.ts :302 const child = Bun.spawn({ cmd: command, stderr: "pipe", stdout: "pipe" });
  • shell (weak) lorelum-lorelum-9ec78c8/packages/cli/src/install/materialize-source.test.ts :168 const subprocess = Bun.spawn(["git", ...gitArguments], {
  • shell lorelum-lorelum-9ec78c8/packages/cli/src/install/materialize-source.ts :62 subprocess = Bun.spawn(["git", ...arguments_], {
  • shell (weak) lorelum-lorelum-9ec78c8/packages/engine/benchmarks/keyword-query.bench.ts :188 const child = Bun.spawn([resolve(binary), "query", text, "--store-root", rootPath], {
  • shell (weak) lorelum-lorelum-9ec78c8/packages/engine/benchmarks/local-store-mutation.bench.ts :91 const child = Bun.spawn([executable, "--root", rootPath, "--operation", operation], {
  • shell (weak) lorelum-lorelum-9ec78c8/packages/engine/benchmarks/local-store-point-read.bench.ts :90 const child = Bun.spawn([executable, ...args], {
  • shell (weak) lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/mutation-lock.test.ts :115 Bun.spawn([process.execPath, "-e", childScript, root], {
  • shell lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/mutation-lock.ts :58 const child = Bun.spawn(command, { stdout: "pipe", stderr: "ignore" });

declared dependencies 4

  • @types/bun@1.3.8
  • oxfmt@0.59.0
  • oxlint@1.74.0
  • typescript@5.7.2

obfuscation 2

  • dynamic require()/import() lorelum-lorelum-9ec78c8/packages/cli/integration/process.integration.ts :124 const { decodePackDirectory, createLocalStore } = await import(${JSON.stringify(engineEntrypoint)});
  • dynamic require()/import() lorelum-lorelum-9ec78c8/packages/engine/src/local-store/storage/mutation-lock.test.ts :110 const lock = await import(${JSON.stringify(moduleUrl)});