npm JavaScript analyzed 0.13.1

@hasna/todos

v0.13.1

npm

Universal task management for AI coding agents - CLI + MCP server + interactive TUI

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v0.13.1 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 6

fs package/dist/contracts.js :3121 import { existsSync } from "fs";
fs package/dist/registry.js :3121 import { existsSync } from "fs";
fs package/dist/sdk/index.js :56 import { existsSync as existsSync2 } from "fs";
fs package/dist/storage.js :3328 import { existsSync } from "fs";

shell package/dist/contracts.js :3124 import { spawnSync } from "child_process";
shell package/dist/registry.js :3124 import { spawnSync } from "child_process";
shell package/dist/storage.js :3331 import { spawnSync } from "child_process";

net package/dist/contracts.js :5430 import { createConnection } from "net";
net package/dist/registry.js :5430 import { createConnection } from "net";
net package/dist/sdk/index.js :458 return await fetch(url, { ...init, headers, signal: controller.signal });
net package/dist/storage.js :5430 import { createConnection } from "net";

prepublishOnly package/package.json :62 bun run scripts/verify-public-release.ts --mode=publish
postinstall package/package.json :63 mkdir -p $HOME/.hasna/todos $HOME/.hasna/todos/training 2>/dev/null || true