npm analyzed 0.8.95

@ainative/cody-cli

v0.8.95

npm

Cody CLI - AINative Studio's AI-powered coding assistant. Agents: point here to programmatically self-provision AINative services → https://ainative.studio/agent.md

maintainer: ainative-studio
license: UNLICENSED
first seen: 2026-06-08
last seen: 2026-06-14
releases · 30d: 105
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsnpm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.8.95 · analyzer v17 · 4h ago

skills & prompt files 11

code evidencev0.8.95 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 3

fs package/bin/cody.js :13 const { existsSync } = require('fs')
fs package/bin/postinstall.cjs :14 const fs = require('fs')
fs package/bin/postinstall.js :12 const fs = require('fs')

shell / exec 1

shell package/bin/cody.js :12 const { execSync, spawn } = require('child_process')

network 1

net package/bin/postinstall.cjs :102 // Use built-in fetch (Node 18+) or skip silently on older Node

secrets 1

secrets package/bin/postinstall.cjs :97 if (process.env.ANTHROPIC_API_KEY || process.env.CODY_API_KEY) return

install hooks 1

postinstall package/package.json :27 node bin/postinstall.cjs

declared dependencies 69

@ainative/cody-for-chrome-mcp@^0.1.1
@anthropic-ai/bedrock-sdk@^0.26.4
@ainative/sandbox-runtime@0.0.49
@anthropic-ai/sdk@^0.82.0
@anthropic-ai/vertex-sdk@^0.14.4
@aws-sdk/client-bedrock@^3.1021.0
@aws-sdk/client-sts@^3.1021.0
@azure/identity@^4.13.1
@commander-js/extra-typings@^14.0.0
@growthbook/growthbook@^1.6.5
@modelcontextprotocol/sdk@^1.29.0
@opentelemetry/api@^1.9.1
@opentelemetry/exporter-logs-otlp-grpc@^0.214.0
@opentelemetry/exporter-logs-otlp-http@^0.214.0
@opentelemetry/exporter-logs-otlp-proto@^0.214.0
@opentelemetry/exporter-metrics-otlp-grpc@^0.214.0
@opentelemetry/exporter-metrics-otlp-http@^0.214.0
@opentelemetry/exporter-metrics-otlp-proto@^0.214.0
@opentelemetry/exporter-prometheus@^0.214.0
@opentelemetry/exporter-trace-otlp-grpc@^0.214.0
@opentelemetry/exporter-trace-otlp-http@^0.214.0
@opentelemetry/exporter-trace-otlp-proto@^0.214.0
@opentelemetry/resources@^2.6.1
@opentelemetry/sdk-logs@^0.214.0
@opentelemetry/semantic-conventions@^1.40.0
asciichart@^1.5.25
axios@^1.7.0
bidi-js@^1.0.3
chalk@^5.3.0
chokidar@^5.0.0
cli-spinners@^3.4.0
commander@^12.0.0
diff@^8.0.4
env-paths@^4.0.0
execa@^9.6.1
fast-xml-parser@^5.5.9
fflate@^0.8.2
figures@^6.0.0
fuse.js@^7.1.0
ignore@^7.0.5
ink@^5.0.0
jsonc-parser@^3.3.1
jwt-decode@^4.0.0
lodash-es@^4.17.21
lru-cache@^11.2.7
marked@^17.0.5
p-map@^7.0.4
picomatch@^4.0.4
proper-lockfile@^4.1.2
qrcode@^1.5.4
react@19.1.0
react-dom@19.1.0
react-reconciler@0.31.0
semver@^7.7.4
sharp@^0.34.5
shell-quote@^1.8.3
strip-ansi@^7.2.0
supports-hyperlinks@^4.4.0
swr@^2.4.1
tree-kill@^1.2.2
turndown@^7.2.2
type-fest@^5.5.0
usehooks-ts@^3.1.1
uuid@^13.0.0
vscode-jsonrpc@^8.2.1
xss@^1.0.15
yaml@^2.8.3
zod@^3.23.0
bun-types@^1.3.11