package-restate-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
greenlauncher script fetches libraries from the author's GitHub repositories (github.com/getcolors/restate.git,github.com/getcolors/green.git, andgithub.com/getcolors/once.git) during initialization. - [DYNAMIC_EXECUTION]: The script utilizes
babashka.deps/add-depsto load remote dependencies into the runtime environment andrequiring-resolveto execute application logic. - [REMOTE_CODE_EXECUTION]: Fetches and executes code from vendor-owned Git repositories at specific pinned SHAs (
d7127baac67d94d5fa563dfc92f71608bca863e7). - [COMMAND_EXECUTION]: Provisions infrastructure and manages deployment lifecycle operations, interacting with cloud provider APIs and local state files.
- [SAFE]: Implements industry-standard safety practices, including mandatory credential isolation via gitignored environment files, pinned dependency versions for supply chain integrity, and protection against accidental resource destruction through explicit environment overrides.
Audit Metadata