github Go re-analysis due

r2cuerdame/CodeSampleX

github

An open compatibility testing network: does this library API actually run on your version, OS and runtime? Real build evidence, verified samples, and the environment each result came from.

maintainer
r2cuerdame
licence
Apache-2.0
first seen
2026-08-13
last seen
2026-09-16
releases · 30d
163
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools
transport http verified reported listed in the official MCP registry counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • convert_temperature
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit c1bc620 · analyzer v33 · 11h ago

danger signals1

code evidence vv0.1.195 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1590

filesystem 14

  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/docs/evidence/174/acceptance.mjs :2 import fs from 'node:fs';
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/internal/web/pulse_test.js :2 const fs = require('fs');
  • fs r2cuerdame-CodeSampleX-c1bc620/seeds/bun-node-builtins/src/index.ts :3 import { readFile } from "node:fs/promises";
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/bun-sqlite-builtin/test/contract.mjs :2 import { readFileSync } from "node:fs";
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/dotenv-esm-load-order/test/contract.mjs :4 import fs from 'node:fs';
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/npm-drizzle-sqlite-migration/test/contract.mjs :2 import { readFileSync } from "node:fs";
  • fs r2cuerdame-CodeSampleX-c1bc620/seeds/npm-esbuild-alpine-musl/src/bundler.mjs :2 import { openSync, readSync, closeSync } from "node:fs";
  • fs r2cuerdame-CodeSampleX-c1bc620/seeds/npm-lightningcss-musl-prebuild/src/compile.mjs :2 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/npm-mcp-sdk-inmemory-transport/test/contract.mjs :2 import { readFileSync } from "node:fs";
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/npm-password-hash-scrypt-bcryptjs/test/contract.mjs :3 import { readFileSync } from "node:fs";
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/puppeteer-23111-screenshot-bytes/test/contract.mjs :2 import { readFile } from "node:fs/promises";
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/puppeteer-244-page-evaluation/test/contract.mjs :2 import { readFile } from 'node:fs/promises';
show 2 more
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/tailwind-v4-build/test/contract.mjs :1 import fs from 'node:fs';
  • fs (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/three-r185-output-pass-browser/test/contract.mjs :3 import { readFile } from 'node:fs/promises';

shell / exec 3

  • shell (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/dotenv-esm-load-order/test/contract.mjs :2 import { spawnSync } from 'node:child_process';
  • shell (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/esm-only-from-cjs/test/contract.mjs :2 import { spawnSync } from 'node:child_process';
  • shell (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/npm-jose-hs256-verify/test/contract.mjs :4 import { spawnSync } from 'node:child_process';

network 25

  • net (weak) r2cuerdame-CodeSampleX-c1bc620/adapters/node/testdata/npmproj/dist/out.js :1 import axios from 'axios';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/adapters/node/testdata/npmproj/src/index.ts :1 import axios from 'axios';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/adapters/node/testdata/npmproj/src/tagged.js :1 import axios from 'axios';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/docs/evidence/174/acceptance.mjs :12 while(performance.now()-readinessStarted<30000){try{const r=await fetch(base+'/version');const value=await r.json();if(r.status===200&&value.service==='csx-server'&&(!evidence.build.commit||value.revi
  • net r2cuerdame-CodeSampleX-c1bc620/internal/admin/static/admin.js :16 const response = await fetch(url, {...options, headers, credentials: "same-origin", cache: "no-store"});
  • net r2cuerdame-CodeSampleX-c1bc620/internal/admin/static/reports.js :15 const response = await fetch(url, {method:body ? 'POST':'GET', credentials:'same-origin', cache:'no-store', headers:body ? {'Content-Type':'application/json','X-CSX-CSRF':'1'} : {}, body:body ? JSON.s
  • net r2cuerdame-CodeSampleX-c1bc620/internal/web/static/pulse.js :187 fetch(endpoint, {
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/axios-1190-interceptor-pipeline/test/contract.mjs :2 import axios from 'axios';
  • net r2cuerdame-CodeSampleX-c1bc620/seeds/axios-multipart-upload/src/index.mjs :1 import axios from 'axios';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/axios-multipart-upload/test/contract.mjs :1 import http from 'node:http';
  • net r2cuerdame-CodeSampleX-c1bc620/seeds/axios-post-json/src/index.mjs :1 import axios from 'axios';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/axios-post-json/test/contract.mjs :1 import http from 'node:http';
show 13 more
  • net r2cuerdame-CodeSampleX-c1bc620/seeds/axios-timeout-code/src/index.mjs :1 import axios from 'axios';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/axios-timeout-code/test/contract.mjs :1 import http from 'node:http';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/express-json-route/test/contract.mjs :11 const res = await fetch(`http://127.0.0.1:${port}/items`, {
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/express5-async-errors/test/contract.mjs :8 const res = await fetch(`http://127.0.0.1:${port}/boom`, { signal: AbortSignal.timeout(5000) });
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/express5-route-syntax/test/contract.mjs :32 const res = await fetch(`http://127.0.0.1:${port}${path}`);
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/hono-json-routes/test/contract.mjs :6 const got = await app.fetch(new Request('http://local/items/42'));
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/npm-express5-bun/test/contract.mjs :8 const got = await fetch(`${base}/items/7?page=2`);
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/npm-express5-node/test/contract.mjs :8 const got = await fetch(`${base}/items/7?page=2`);
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/three-r185-output-pass-browser/test/contract.mjs :2 import { createServer } from 'node:http';
  • net r2cuerdame-CodeSampleX-c1bc620/seeds/undici-request-json/src/index.mjs :1 import { request } from 'undici';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/seeds/undici-request-json/test/contract.mjs :1 import http from 'node:http';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/test/e2e/fixtures/npmproj/src/index.js :1 import axios from 'axios';
  • net (weak) r2cuerdame-CodeSampleX-c1bc620/test/e2e/fixtures/sample-axios-upload/test/contract.mjs :5 import http from 'node:http';

tool registrations 1

  • convert_temperature r2cuerdame-CodeSampleX-c1bc620/seeds/npm-mcp-sdk-inmemory-transport/src/server.mjs :44

declared dependencies 26

  • ajv@8.20.0
  • github.com/Microsoft/go-winio@v0.6.2
  • github.com/jackc/pgx/v5@v5.10.0
  • github.com/pelletier/go-toml/v2@v2.4.3
  • golang.org/x/mod@v0.37.0
  • golang.org/x/sys@v0.47.0
  • modernc.org/sqlite@v1.56.0
  • github.com/dustin/go-humanize@v1.0.1
  • github.com/google/uuid@v1.6.0
  • github.com/jackc/pgpassfile@v1.0.0
  • github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761
  • github.com/mattn/go-isatty@v0.0.24
show 14 more
  • github.com/ncruces/go-strftime@v1.0.0
  • github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec
  • golang.org/x/text@v0.29.0
  • modernc.org/libc@v1.74.4
  • modernc.org/mathutil@v1.7.1
  • modernc.org/memory@v1.11.0
  • anyhow@1.0.104
  • thiserror@2.0.20
  • brick/math@0.19.1
  • phpunit/phpunit@13.3.1
  • activesupport@8.1.3.1
  • com.fasterxml.jackson.core:jackson-annotations@2.21
  • com.fasterxml.jackson.core:jackson-core@2.21.4
  • com.fasterxml.jackson.core:jackson-databind@2.21.4

obfuscation 1

  • dynamic require()/import() r2cuerdame-CodeSampleX-c1bc620/seeds/npm-jose-hs256-verify/test/contract.mjs :320 import('data:text/javascript,' + encodeURIComponent('import jose from ' + JSON.stringify(entry) + '; export default jose;')),