github re-analysis due

oaslananka/a2a-warp

github

TypeScript runtime, CLI, registry, transports, MCP bridge, and conformance tooling for building and testing Agent2Agent (A2A) protocol integrations.

maintainer
oaslananka
license
NOASSERTION
first seen
2026-06-05
last seen
2026-06-13
releases · 30d
26
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 63b1ea8 · analyzer v17 · 14h ago

skills & prompt files 8

code evidence v@oaslananka/a2a-warp-v9.0.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 28

  • fs oaslananka-a2a-warp-63b1ea8/cli/src/commands/conformance-badge.ts :1 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/cli/src/commands/conformance.ts :1 import { mkdirSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/cli/src/commands/export-card.ts :1 import { writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/cli/src/commands/registry.ts :1 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/cli/src/commands/release-check.ts :2 import { existsSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/cli/src/commands/scaffold.ts :1 import { mkdirSync, existsSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/cli/src/commands/validate.ts :1 import { readFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/build-schemas-package.mjs :1 import { copyFileSync, mkdirSync, readdirSync, readFileSync, rmSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/build-tsc-package.mjs :2 import { mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-bundle-sizes.mjs :1 import { stat } from 'node:fs/promises';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-command-surface.mjs :1 import { readdirSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-npm-pack.mjs :1 import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-openapi.mjs :1 import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-package-registry-parity.mjs :1 import { readFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-powershell-doc-parity.mjs :1 import { readdirSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-review-threads.mjs :2 import { readFileSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-runtime-versions.mjs :1 import { writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-utils.mjs :2 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/check-workspace-declarations.mjs :8 import { existsSync, readFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/clean.mjs :1 import { readdirSync, rmSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/generate-command-docs.mjs :1 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/generate-json-schemas.mjs :1 import { mkdirSync, readdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/generate-sbom.mjs :1 import { mkdir, writeFile } from 'node:fs/promises';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/prepare-release-artifacts.mjs :3 import { mkdir, readFile, readdir, rm, writeFile } from 'node:fs/promises';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/release-state.mjs :3 import { readFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/run-consumer-smoke.mjs :27 import { mkdtempSync, writeFileSync, readFileSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/run-examples-smoke.mjs :1 import { existsSync } from 'node:fs';
  • fs oaslananka-a2a-warp-63b1ea8/scripts/validate-release-config.mjs :2 import { readFile } from 'node:fs/promises';

shell / exec 16

  • shell oaslananka-a2a-warp-63b1ea8/cli/src/commands/release-check.ts :1 import { execFileSync, type ExecFileSyncOptions } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/packages/core/src/storage/SqliteTaskStorage.ts :14 exec(sql: string): void;
  • shell oaslananka-a2a-warp-63b1ea8/packages/create-a2a-agent/src/run.ts :1 import { spawnSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/packages/registry/src/storage/RedisStorage.ts :45 exec(): Promise<unknown>;
  • shell oaslananka-a2a-warp-63b1ea8/scripts/build-tsc-package.mjs :1 import { execFileSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/check-docs-commands.mjs :1 import { execFileSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/check-name-collisions.mjs :1 import { execFileSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/check-reuse.mjs :11 import { execSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/check-utils.mjs :1 import { execFileSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/dev-smoke.mjs :1 import { spawn } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/prepare-release-artifacts.mjs :1 import { execFile } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/release-state.mjs :2 import { execFileSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/run-consumer-smoke.mjs :30 import { execFileSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/run-examples-smoke.mjs :2 import { execFileSync } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/run-k6-performance.mjs :3 import { spawn } from 'node:child_process';
  • shell oaslananka-a2a-warp-63b1ea8/scripts/run-prettier.mjs :1 import { spawnSync } from 'node:child_process';

network 14

  • net oaslananka-a2a-warp-63b1ea8/apps/demo/main.ts :2 import type { Server } from 'node:http';
  • net oaslananka-a2a-warp-63b1ea8/apps/registry-ui/src/api/registry.ts :105 return fetch(endpoint(path), {
  • net oaslananka-a2a-warp-63b1ea8/packages/core/src/net/fetchWithPolicy.ts :127 const response = await fetch(url, mergedInit);
  • net oaslananka-a2a-warp-63b1ea8/packages/core/src/security/url.ts :2 import { isIP, isIPv4 } from 'node:net';
  • net oaslananka-a2a-warp-63b1ea8/packages/core/src/server/A2AServer.ts :6 import type { Server as HttpServer } from 'node:http';
  • net oaslananka-a2a-warp-63b1ea8/packages/core/src/testing/A2ATestServer.ts :1 import type { Server } from 'node:http';
  • net oaslananka-a2a-warp-63b1ea8/packages/registry/src/RegistryServer.ts :7 import type { Server as HttpServer } from 'node:http';
  • net oaslananka-a2a-warp-63b1ea8/packages/transport-ws/src/WsServer.ts :1 import { createServer, type Server as HttpServer } from 'node:http';
  • net oaslananka-a2a-warp-63b1ea8/scripts/check-package-registry-parity.mjs :27 const res = await fetch(url);
  • net oaslananka-a2a-warp-63b1ea8/scripts/check-public-docs-links.mjs :48 const response = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
  • net oaslananka-a2a-warp-63b1ea8/scripts/check-review-threads.mjs :168 const response = await fetch('https://api.github.com/graphql', {
  • net oaslananka-a2a-warp-63b1ea8/scripts/dev-smoke.mjs :23 const res = await fetch(url, { signal: AbortSignal.timeout(5000) });
  • net oaslananka-a2a-warp-63b1ea8/scripts/run-consumer-smoke.mjs :31 import { createServer } from 'node:net';
  • net oaslananka-a2a-warp-63b1ea8/scripts/run-k6-performance.mjs :132 const response = await fetch(`${registryBaseUrl}/agents/register`, {

secrets 7

  • secrets oaslananka-a2a-warp-63b1ea8/apps/demo/config.ts :54 const registryToken = process.env['REGISTRY_TOKEN']?.trim() || undefined;
  • secrets oaslananka-a2a-warp-63b1ea8/apps/demo/main.ts :83 if (!process.env['OPENAI_API_KEY']) {
  • secrets oaslananka-a2a-warp-63b1ea8/apps/demo/researcher-agent.ts :38 const apiKey = process.env['OPENAI_API_KEY'];
  • secrets oaslananka-a2a-warp-63b1ea8/apps/demo/writer-agent.ts :39 const apiKey = process.env['ANTHROPIC_API_KEY'];
  • secrets oaslananka-a2a-warp-63b1ea8/cli/src/commands/scaffold.ts :162 new OpenAI({ apiKey: process.env.OPENAI_API_KEY }),
  • secrets oaslananka-a2a-warp-63b1ea8/packages/registry/src/bin/start.ts :32 const registrationToken = process.env['REGISTRY_TOKEN']?.trim() || undefined;
  • secrets oaslananka-a2a-warp-63b1ea8/scripts/check-review-threads.mjs :5 const token = process.env.GITHUB_TOKEN;

database 1

  • db oaslananka-a2a-warp-63b1ea8/packages/core/src/storage/SqliteTaskStorage.ts :279 const imported = require('better-sqlite3') as

declared dependencies 25

  • @arethetypeswrong/cli@0.18.3
  • @commitlint/cli@21.0.2
  • @commitlint/config-conventional@21.0.2
  • @eslint/js@10.0.1
  • @stryker-mutator/core@9.6.1
  • @stryker-mutator/vitest-runner@9.6.1
  • @types/node@22.19.20
  • @types/supertest@7.2.0
  • @vitest/coverage-v8@4.1.8
  • eslint@10.4.1
  • fast-check@4.8.0
  • globals@17.6.0
  • husky@9.1.7
  • jscpd@4.2.5
  • knip@6.16.1
  • lint-staged@17.0.7
  • markdownlint-cli2@0.22.1
  • prettier@3.8.4
  • publint@0.3.21
  • supertest@7.2.2
  • typedoc@0.28.19
  • typedoc-plugin-markdown@4.12.0
  • typescript@6.0.3
  • typescript-eslint@8.61.0
  • vitest@4.1.8