garrytan/gbrain

Score 40. Found 1 critical, 5 medium findings.

Trust score

40/ 100

Score 40. Found 1 critical, 5 medium findings.

garrytan/gbrain · 50 of 598 files read

Critical1

src/cli.ts:397 · shell_exec

Spawns a subprocess.

execSync(`bash "${scriptPath}"`, { stdio: 'inherit', env: { ...process.env } });

Medium5

package.json · unpinned_dep
Dependency has no upper version bound — installs may drift.
```
"@types/bun": "latest"
```
scripts/build-llms.ts:163 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(llmsPath, llmsTxt);
```
scripts/build-llms.ts:164 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(llmsFullPath, llmsFullTxt);
```
src/commands/export.ts:32 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(filePath, md);
```
src/commands/export.ts:46 · fs_write
Filesystem write to a path that is not obviously a temp directory.
```
writeFileSync(rawPath, JSON.stringify(rawObj, null, 2) + '\n');
```