npm JavaScript analyzed 0.40.30

@happyvertical/smrt-app-cli

v0.40.30

Reusable CLI factory for SMRT apps — branded `<name> <resource> <command>` CLI + stdio MCP bridge with decorator-driven resource discovery

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.40.30 · analyzer v28 · 3d ago

code evidence v0.40.30 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 4

fs package/dist/config-DB4AMYT0.js :2 import { chmod, mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";

shell package/dist/index.js :2 import { spawn, spawnSync } from "node:child_process";