npm JavaScript analyzed 3.0.0-alpha.3 unconfirmed MCP

@claude-flow/guidance

v3.0.0-alpha.3

npm

Guidance Control Plane - Compiles, retrieves, enforces, and evolves guidance rules for Claude Code sessions

maintainer: ruvnet
license: MIT
first seen: 2026-06-09
last seen: 2026-08-12
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-06-09 code analysis flagged committed secret ×2, dynamic code execution in @claude-flow/guidance

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v3.0.0-alpha.3 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 67

filesystem 4

fs package/dist/analyzer.js :358 await fs.writeFile(claudeMdPath, this.contextContent, 'utf-8');
fs package/dist/index.js :23 import { readFile } from 'node:fs/promises';
fs package/dist/persistence.js :15 import { mkdir, readFile, writeFile, appendFile, stat, unlink, rename } from 'node:fs/promises';
fs package/wasm-pkg/guidance_kernel.js :318 const wasmBytes = require('fs').readFileSync(wasmPath);

shell / exec 2

shell package/dist/analyzer.js :344 const { execFile } = await import('node:child_process');
shell package/dist/headless.js :21 const { execFile } = await import('node:child_process');

declared dependencies 6

@claude-flow/hooks@^3.0.0-alpha.7
@claude-flow/memory@^3.0.0-alpha.2
@claude-flow/shared@^3.0.0-alpha.1
@types/node@^20.10.0
typescript@^5.3.0
vitest@^4.0.16