npm JavaScript analyzed 0.164.11 unconfirmed MCP

@bilig/headless

v0.164.11

npm

Lower-level WorkPaper formula runtime for Node services with JSON persistence and verified formula readback.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.164.11 · analyzer v28 · 3d ago

code evidence v0.164.11 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 281

fs package/dist/formula-clinic-cli.js :1 import { existsSync, readFileSync, statSync } from 'node:fs';
fs package/dist/mcp-challenge-cli.js :1 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs package/dist/work-paper-mcp-file-server.js :5 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
fs package/dist/work-paper-mcp-xlsx-file.js :1 import { existsSync, mkdirSync, renameSync, statSync, writeFileSync } from 'node:fs';
fs package/dist/xlsx-internal/xlsx-export.js :1 import { writeFileSync } from 'node:fs';
fs package/dist/xlsx-internal/xlsx-source-bytes.js :2 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, statSync, unlinkSync, writeSync } from 'node:fs';
fs package/dist/xlsx-internal/xlsx-source-copy.js :1 import { closeSync, openSync, writeFileSync, writeSync } from 'node:fs';
fs package/dist/xlsx.js :1 import { writeFile } from 'node:fs/promises'

shell package/dist/work-paper-sheet-inspection.js :8 const SIMPLE_SCALAR_EXPRESSION_RE = new RegExp(`^(?:${SCALAR_CELL_REF_PATTERN}|${SCALAR_NUMBER_PATTERN})(?:[+\\-*/](?:${SCALAR_CELL_REF_PATTERN}|${SCALAR_NUMBER_PATTERN}))*$`);

net package/dist/n8n-forecast-server-cli.js :1 import { createServer } from 'node:http';